Configuring Sign In with Apple

The Sign in with Apple feature provides users with the ability to authenticate with apps and websites using their Apple IDs. With Sign in with Apple, users can also choose to hide their email address when creating an account and instead have a unique, random email address created while their personal email address remains private using the Hide My Email feature.

If you allow authentication through Apple for your product, you must configure your mail send according to Apple's specified requirements in order to successfully deliver email messages to users who opted to use an anonymous, private email relay address with Sign in with Apple. Otherwise, these messages will not get delivered to your users. This additional configuration is needed only if you allow authentication through Apple for your product and meet either of the following conditions in the OneTrust application:

  1. You have a custom SMTP relay setup within the OneTrust application.

  2. You have a custom SMTP set up to send on behalf of your domain.

Note:

For additional information on this process, see Apple's Communicating Using the Private Email Relay Service article.

To communicate with Apple's private email relay service

Additional configuration is needed outside of OneTrust to successfully deliver email messages sent from the OneTrust application to one of Apple's private email relay addresses. First, verify that you have a registered Apple Developer Account as this is required to configure a private email relay service with Apple. Then complete one of the following methods depending on the number of authenticated domains you have.

Note:

If your Apple Developer Account is enrolled as an individual, you can register up to 32 email sources. If you’re enrolled as an organization, you can register up to 100 email sources. If within these limits, see the Recommended Method section below. If you exceed Apple's limits, see the Alternate Method section. Please refer to Apple's Developer Documentation for additional assistance on configuration outside of OneTrust.

Recommended Method

If you're within Apple's domain limits, navigate to Configure Sign in with Apple in your Apple Developer Account. In the Individual Email Addresses section, add the email addresses that will be used to send and receive messages to and from users using Apple's private email relay service, and click Register. Once successfully registered, you should be able to send messages to Apple's private email relay addresses. For a detailed procedure, see Apple's Configure Private Email Relay Service article.

Alternate Method

If your number of domains exceeds Apple's limits, you will need to configure each domain using the following steps. Along with a registered Apple Developer Account, you will also need access to the DNS panel of the domain, an SSL certificate for your domain, and a publicly available webserver to host files over HTTPS.

  1. Register your email domain with Apple

    Navigate to Configure Sign in with Apple within your Apple Developer Account. In the Domains and Associated Email Addresses section, enter your entire domain name, including the subdomain if applicable, and click Register. Then download the unique text file generated by Apple.

  2. Host Apple’s Association Text File

    The unique text file that you downloaded will be used by Apple to verify that you control the domain associated with your mail send. Host and serve Apple's Association Text File over HTTPS using a publicly available web server.

  3. Verify your domain registration

    Verify your domain registration using your Apple Developer Account. Once verified, you should be able to send email messages to Apple's private email relay addresses.