I'm currently coding an application using Azure Entra External ID (B2C) with User Flows and multiple identity providers configured.
So far, I’ve successfully linked Microsoft, Google, and Facebook. However, when configuring Apple as an identity provider, the User Flow fails with the following error:
"invalid_request invalid web redirect url"
Following the Microsoft Learn guide (https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-apple-federation-customers), I completed the following:
Create an Apple application
Sign in to the Apple Developer Portal with your account credentials.
From the menu, select Certificates, IDs, & Profiles, and then select (+).
In the Register a New Identifier section, select App IDs, and then select Continue.
For Select a type, select App, and then select Continue.
To Register your App ID:
Enter a Description.
Enter the Bundle ID, such as com.contoso.azure-ad. Explicit naming such as com.myappdomain.myappname recommended.
For Capabilities, select Sign in with Apple from the capabilities list.
Take note of your Team ID (App ID Prefix) from this step. You'll need it later.
Select Continue and then Register.
From the menu, select Certificates, IDs, & Profiles, and then select (+).
In the Register a new identifier section, select Services IDs, and then select Continue.
In Register a Services ID:
Enter a Description. The description is shown to the user on the consent screen.
Enter the Identifier, such as com.contoso.entra-service. Explicit naming such as com.myappdomain.myappname.service is recommended. Take note of your Service ID identifier. The identifier is your Client ID.
Select Continue, and then select Register.
From Identifiers, select the Service ID identifier you created.
Select Sign In with Apple, and then select Configure.
Select the Primary App ID you want to configure Sign in with Apple with.
In Domains and Subdomains, enter the following by replacing
with your tenant ID or your primary domain name, and
with your tenant name. All characters should be in lower-case. As an example:
.ciamlogin.com
.ciamlogin.com
In Return URLs, enter the following by replacing with your tenant ID or your primary domain name, and with your tenant name. All characters should be in lower-case.
As an example:
https://.ciamlogin.com//federation/oauth2
https://.ciamlogin.com//federation/oauth2
https://.ciamlogin.com//federation/oauth2
Select Next, and then select Done.
When the pop-up window is closed, select Continue, and then select Save.
Create an Apple client secret
From the Apple Developer portal menu, select Keys, and then select (+).
To Register a New Key:
Type a Key Name.
Select Sign in with Apple, and then select Configure.
For the Primary App ID, select the app you created previously, and then select Save.
Select Continue, and then select Register to finish the key registration process.
Take note of the Key ID. This key is required when you configure the identity provider.
To Download Your Key, select Download to download the .p8 file that contains your key.
Select Done.
Configure Apple federation in Microsoft Entra External ID
After you create the Apple app, in this step you set the Apple app details in Microsoft Entra External ID. You can use the Microsoft Entra admin center to do so. To configure Apple federation in the Microsoft Entra admin center, follow these steps:
Sign in to the Microsoft Entra admin center.
Browse to Entra ID > External Identities > All identity providers.
Under the Built-in tab, select Apple.
The Name Apple is autopopulated. It cannot be changed.
Enter the following details:
Client (Apple service) ID: The client ID of the Apple application you created in the previous step.
Apple developer team ID: The Apple developer team ID related to the Apple application you created in the previous step.
Key ID: The key ID of the Apple application you created in the previous step.
Client secret (.p8) key: The client secret key of the Apple application you created in the previous step.
Select Save. You’ll see Apple listed as a configured identity provider.
Add Apple identity provider to a user flow
At this point, the Apple identity provider has been set up in your Microsoft Entra External ID, but it's not yet available in any of the sign-in pages. To add the Apple identity provider to a user flow:
In your customer tenant, browse to Entra ID > External Identities > User flows.
Select the user flow where you want to add the Apple identity provider.
Under Settings, select Identity providers.
Under Other Identity Providers, select Apple.
Select Save.
❌ The Issue
After completing all steps, Apple still fails during sign-in, while the other providers work correctly.
The error message I receive is:
"invalid_request invalid web redirect url"
Request for Help
I'm unsure where the misconfiguration may lie — whether it's with:
The Return URLs entered in the Apple Developer portal,
The Client ID or other fields in the Entra portal,
Or something else I’ve overlooked.
If anyone has successfully configured Apple ID federation with Azure Entra External ID (B2C) and encountered this error, I'd really appreciate any insights or suggestions.
Thank you!
Apple Developer Program
RSS for tagCreate and deliver software for users around the world on Apple platforms using the the tools, resources, and support included with Apple Developer Program membership.
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
Hello Apple Developer Support Team,
I recently purchased an Apple Developer Program membership, but my account remains in “Pending” status and has not advanced to Active. Below are my details:
Program: Apple Developer Program (Individual)
Could you please:
Confirm that my payment was received successfully.
Identify any missing information or steps required on my side.
Advise on the expected timeline for activation.
Thank you for your help in resolving this issue. I appreciate your prompt assistance.
Best regards,
I’m extremely disappointed with the Apple Developer Program experience.
Our organization account (JD SOFTWARE PRIVATE LIMITED) expired on October 26, 2024, and to this day, there is no visible option to renew — not in the Apple Developer app (iOS/Mac), not on the developer website. We've followed every instruction Apple provides, and nothing works.
To make things worse, I’m based in India, but Apple’s support is clearly U.S.-centered and unresponsive. I contacted support and got a canned response asking me to wait 24 hours. Why does a global company like Apple not provide time zone–relevant or regional developer support? This isn’t a minor inconvenience—it’s a major business disruption.
Our apps are unavailable, and we can’t push updates. And yet we’re met with silence and confusion when we try to give Apple more money to renew our account.
Apple enforces the strictest guidelines on developers, yet offers no proper channel to resolve something as basic as account renewal. It’s absurd. We’re now being forced to consider alternative app stores and distribution platforms—not because we want to leave, but because Apple is making it impossible to stay.
Apple, please fix this. Developers outside the U.S. deserve better.
JD SOFTWARE PRIVATE LIMITED
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
Tags:
Developer Tools
Developer Program
Hi everyone,
I’m experiencing a frustrating delay with my Apple Developer Program enrollment and I’m hoping someone here can help or escalate the issue.
I had previously completed the enrollment process and was approved, but after opening the Apple Developer app on my iPad, the entire progress reset for some reason. I was forced to start the process again from scratch, including submitting all required documents.
Last time, my documents were verified and approved within 7 days. However, this time, it’s been over a month since I submitted my documents and there's been no progress.
I contacted Apple Developer Support, but they responded saying it would take an “undetermined amount of time,” without providing any explanation, timeline, or guidance. That’s extremely concerning, especially since I’ve already gone through this once before.
This delay is affecting my ability to move forward with game releases and business plans. I’m more than willing to provide any additional documentation if needed, but I’m currently stuck with no idea what’s going on.
Can someone from the Apple team please:
Check the status of my enrollment using Enrollment ID: 772673548
Let me know if there are any issues that require action from my side
Or help escalate this for review?
Any help or guidance would be greatly appreciated.
Thank you,
Shamsad M
Hi All,
Posting here after completely spinning our wheels with Apple Business Support AND Apple Developer Support thus far.
Problem:
Our team of Developers have been using Corporate e-mail addresses (companyname.com) as Apple Developer Accounts. A couple of months ago we enrolled in Apple Business and enrolled our .com domain under management. Developers and others were given 30 days to enroll their accounts manually at the end of which it would be done automatically.
One of our Developers did the manual transition with the result that his Developer Account "came with him" i.e. signing certificates and whatnot. Our Master Developer - my term, sorry if incorrect reference to the primary Developer Account - did nothing and his e-mail address but not his Developer Account was "forcibly" enrolled. The result being that he lost access to his Developer Account.
Apple Support explained that the Developer Account had automatically been assigned a temporary access in the format "user dot name-company dot com at temporary.appleaccount.com". Great, all the Developer needs to do is to log in and follow the immediate prompting to assign a new valid e-mail address.
Unfortunately, any address that the User enters is accepted and a verification code is expected. But no verification code is ever received. Not in our Corporate e-mail gateway under a working alias, not in other private accounts. Not in Spam, Junk etcetera. Something is inhibiting the change.
The Developer is now stuck because he cannot log in in order to create his own support ticket. I have done so on his behalf, explained clearly the issue, received a link to an open page that does not require authentication, and he created a new ticket. The response comes again back from L1 Support on how to recover or change your login e-mail. Absolutely no recognition of the problem that has been clearly and repeatedly documented. (Bangs head against wall in frustration.)
Questions:
Is this Problem Description clear? If not PLEASE ask for clarification!
Does anyone recognise this issue?
Does anyone have a solution OR a way to reach the appropriate level in Apple Developer Support SO THAT our key Certificates etcetera that are no longer accessible in this "blocked" account can be recovered!
Thanks for reading ☺
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
My developer account pending for more that 4 days.
When I login to http://developer.apple.com, it show the following message:
Purchase your membership.
To continue your enrollment, complete your purchase now.
Your purchase may take up to 48 hours to process.
I have already paid the membership fee and got the E-invoice from apple.
Could anyone help to solve this problem?
I’m in crisis mode and desperately need advice. Launching in 10 days and just hit a major roadblock.
Background:
Set up developer account under a business name only because we needed the D-U-N-S number when starting development
Have a working app with Family Controls already configured on the main identifier
Yesterday my developer discovered we need Family Controls on 3 additional identifiers for launch
a week ago (terrible timing) I submitted a business name change request thinking it was good housekeeping
The Crisis:
Certificates, Identifiers & Profiles portal is completely locked during business name change processing
Can’t add Family Controls to the 3 identifiers we need for launch
Business name change typically takes 2-4 weeks
Launch is in 10 days
What I’ve Done:
Contacted Apple Developer Support explaining the urgency
Case ID: 102633553000 for the name change request
Desperate Questions:
Has ANYONE successfully cancelled a business name change mid-process for urgent app needs?
Any emergency escalation paths at Apple for launch-blocking issues?
Would creating a new developer account be faster? (Though that seems nuclear)
Any other workarounds I’m not thinking of?
The business name change was purely administrative - nothing structural changes. But these identifier updates are absolutely critical for launch functionality and we didn’t realize they were needed until trying to launch into testflight.
This is our first time so learning a lot the hard way 🫠.
Thanks in advance for any help!
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
Tags:
Entitlements
Family Controls
I have a problem with the enrollment to Apple Developer program, because the page show the message "Your enrollment in the Apple Developer Program could not be completed at this time", I have 1 week watting for any news for the Send Files to Apple Support but not yet any new news. What I can do about this case?
I have an iPhone 11 phone. I installed Beta 2. I installed Beta 1. In both beta, my battery comes as 1%. And I can use the phone. As a solution, I have to go back to version 18.5. Is this problem solved in the new beta?
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
Hi, I'm a novice Account Holder and one of my teammate, who's role is already assigned as App Manager, cannot log into Certificates, IDs, & Profiles Page, nor adjust his account to Organization Account in Xcode's Apple account setting. I tried to change my personal account to a App Manager to see if this is a general setting stuff but I didn't come across problems above. I am able to not only log into the Certificates page but also change my account setting in Xcode.
Is there anything I can do in this situation, or just hand it to Developer Support ?
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
We are using apple pay on the Web. But we are getting this error as below while creating the session from our API -
{"error": "Failed to create Apple Pay session: 400 Bad Request: [{
"statusMessage": "Payment Services Exception merchantId=2BA8AF828D93E74EC76655D09C9132B7445BA789D674E970873CCCD85E5A8A5E not registered for domain=https://applepay-dev.ippay.com",
"statusCode": "400"
}]"}
====================================================
Please use the following Curl request to generate the error.
curl --location 'https://applepay-dev.ippay.com/api/v2/payment/alternatepay/session/create'
--header 'Content-Type: application/json'
--header 'Accept: /'
--header 'Sec-Fetch-Site: same-origin'
--header 'Accept-Language: en-US,en;q=0.9'
--header 'Accept-Encoding: gzip, deflate, br'
--header 'Sec-Fetch-Mode: cors'
--header 'Host: applepay-dev.ippay.com'
--header 'Origin: https://applepay-dev.ippay.com'
--header 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15'
--header 'Referer: https://applepay-dev.ippay.com/payment/payment.html'
--header 'Content-Length: 84'
--header 'Connection: keep-alive'
--header 'Sec-Fetch-Dest: empty'
--data '{"validationUrl":"https://apple-pay-gateway.apple.com/paymentservices/startSession"}'
Configuration steps we followed -
A. Created Merchant ID
B. Created payment processing and Merchant Identity certificate
C. Did domain association mapping for the merchant
C. Created domain name and TLS SSL for the server from where we are calling the API
Please advise.
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
I cannot renew my membership after it expired in January of 2025. I initially let it lapse, but I decided to renew it. There is nowhere to renew it. There is no renew button in the Developer App, and the web application tells me it expired, but doesn't provide an option to renew. It just tells me to go to the Developer App and click on the Renew button which isn't there.
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
find bug in Dynamic Island shows calling even after the call Was disconnected
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
Hi folks,
I bought a apple developer program two weeks back. I have got the enrollment ID but it says it is still in review. Is two weeks the standard time or is there anything I have to do from my side.
Hello All
I have been trying to enroll on the developer program on behalf of my organization however the enrollement order goes through and we never get a response back.
I have tried it on a macbook and iphone 16.
Are developer services un allowed for Kenyans or what is going on?
As for Customer support, four emails sent to their team with zero response.
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
I have installed WATCHOS 26 Developers Beta in my Apple Watch 6
after installation I found that the battery drains after two hours
Now i can not remove 26 and go back to earlier version
any ideas
I am testing the Music API and I am hitting walls every single moment when I try to do something that is DOCUMENTED but doesn't work/exists.
Documentation says, /v1/catalog/us/artists/{ID}/view/{view}/ NEVER returns 404, while I am getting 404 for even content I know it's available on Apple Music.
e.g
/v1/catalog/us/artists/1487603897/view/appears-on-albums/
results 404 while they are appearing on an album FRIGID TORTURE of Nosphere artist.
So when I request for appears-on or featured albums it shoud appear as a result, but I get 404.
It's here so it should appear:
https://music.apple.com/us/album/frigid-silence/1791001624?i=1791001626
I found NO WAY to get that album for this artist using the API, which is very frustrating and annoying.
Similarly if I try this:
/v1/catalog/us/artists/{ID}?views=>appears-on-albums it will result an EMPTY array for the data property
Also the documentation is unclear about the several limitation max values, many parameters (e.g. include parameters are unknown ) we can't tell what value can we use.
Is Apple Music Api unreliable or I just don't understand something?! I don't even understand why I have to do 4 different requests to get an artists all albums (full, single, featured, appears-on)... this should be MUCH more easier to do it one single request (with pagination).
We are working on a long-term major investment in music startup and trying to move from Spotify API (due to recent changes and limitations) and finding a better alternative.
Based on the docs Apple Music API seemed the most promising one, but now we are testing it we are very disappointed so far.
So should we trust in this or should we forget about Apple Music API?
Hi
i have been trying to enroll in an apple developer program I have made the payment 99$ and it has been deducted from the credit card. I got a message saying you will recieve an email soon. Would like to know whats the process after that and why is enrollment in the apple developer programm a bit diffcuilt.
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
Hi everyone,
I recently submitted for the enrollment in Apple Developer Program and provided all the required information. I received an email confirming my order summary, stating that the payment would be processed within two business days and that I would receive a notification once it was completed. However, it has been longer than that, and I haven’t received any updates—no confirmation of account activation or payment rejection.
Has anyone else experienced this issue? Is there anything I can do to check the status or speed up the process? Any advice would be greatly appreciated!
Thanks!
Topic:
Developer Tools & Services
SubTopic:
Apple Developer Program
I been searching about this for so long now i don’t think it’s possible anymore & its more of a talk about thing than doing😭😭.
But i’m a Mixing/Mastering Engineer for Music, & I’m always seeing people music releasing to Apple Music, with the icon “Apple Digital Master“
But when I do research the only thing i can find is it needs to be done in an approved Apple Studio, But me personally i’ve never heard or seen one.
So i’m patiently & sincerely waiting for the right response that can help me or lead me to the right person or direction to help me out please, Because all this seeking is really starting to make my brain have aneurysm.