Certificates, Identifiers, and Provisioning Profiles

Confirmation on "Sign in with Apple JS" Web Implementation Compatibility

Hello Developers

We are trying to implement "Sign in with Apple JS" on our e-commerce website, which is built on a SaaS platform called Ticimax in Turkey.

Our platform provider (Ticimax) claims that a web-based implementation of "Sign in with Apple" is not currently possible. They state this is due to "Apple's browser security policies" that prevent consistent and secure support across all major browsers, particularly Safari with its privacy features.

Could you please confirm if there are any fundamental security policies or technical restrictions imposed by Apple that would prevent a standard, secure implementation of "Sign in with Apple JS" on a typical e-commerce website?

We know many global websites use this feature successfully. We need to know if our provider's claim has a technical basis from Apple's perspective, or if this is a standard implementation challenge that developers are expected to handle (e.g., using pop-ups instead of redirects to comply with ITP).

Any official clarification or documentation you can provide on this matter would be greatly appreciated.

Thank you.

Answered by DTS Engineer in 891983022

Hi @thalure,

Sign in with Apple JS is fully supported for web-based implementations and the JS library is specifically provided for web use.

As you said, Sign in with Apple JS offers two distinct authorization flows:

  • pop-up flow: opens a modal/pop-up window for the Apple Account auth
  • redirect flow: redirects the user to Apple's auth page, then back

The latter could be affected by Safari's Intelligent Tracking Prevention if you rely on third-party cookies or cross-site tracking patterns, but this should not be considered a blocker—as it's a known, documented implementation challenge.

For maximum cross-browser reliability, use the pop-up flow.

To properly integrate Sign in with Apple on your websites, please follow the documentation below:

Configuring your environment for Sign in with Apple

https://developer.apple.com/documentation/signinwithapple/configuring-your-environment-for-sign-in-with-apple

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Hi @thalure,

Sign in with Apple JS is fully supported for web-based implementations and the JS library is specifically provided for web use.

As you said, Sign in with Apple JS offers two distinct authorization flows:

  • pop-up flow: opens a modal/pop-up window for the Apple Account auth
  • redirect flow: redirects the user to Apple's auth page, then back

The latter could be affected by Safari's Intelligent Tracking Prevention if you rely on third-party cookies or cross-site tracking patterns, but this should not be considered a blocker—as it's a known, documented implementation challenge.

For maximum cross-browser reliability, use the pop-up flow.

To properly integrate Sign in with Apple on your websites, please follow the documentation below:

Configuring your environment for Sign in with Apple

https://developer.apple.com/documentation/signinwithapple/configuring-your-environment-for-sign-in-with-apple

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Certificates, Identifiers, and Provisioning Profiles
 
 
Q