Apple SignIn, issuer changed?

Hi! We're having issues with the sign in flow, starting today. As per the documentation, the issuer of the tokens should be https://appleid.apple.com sign in docs.

But in the published configuration, it is now stated as https://account.apple.com metadata endpoint.

Once the token is received through the sign in flow, the issuer is however still appleid.apple.com. This is causing problems for us where we expect the issuer in the metadata endpoint to be the same as the actual token issuer. What is correct here?

Answered by DTS Engineer in 892107022

Hi @alexeden,

Correct, this was a known issue in June 2025, as described below, and has since been resolved:

[Resolved] Sign in with Apple Service Outage: Thursday, June 12, 2025

https://developer.apple.com/forums/thread/790821

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

This is a widespread issue but seems to have been resolved. The issuer returned by https://appleid.apple.com/.well-known/openid-configuration is back to being https://appleid.apple.com.

Tailscale & Supabase declared incidents because of it. https://status.tailscale.com/ https://status.supabase.com/

Hi @alexeden,

Correct, this was a known issue in June 2025, as described below, and has since been resolved:

[Resolved] Sign in with Apple Service Outage: Thursday, June 12, 2025

https://developer.apple.com/forums/thread/790821

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Apple SignIn, issuer changed?
 
 
Q