On: Apple Successfully Implements OpenID Connect with Sign in with Apple

[jsgo]

has sign in with Apple launched yet? It was the Big Thing in iOS 13 that I was personally most excited about but honestly, if it has launched, I haven't seen it yet.

edit: from the comments it sounds like it has launched, but currently being implemented in a voluntary manner. Looked at the 9to5Mac article on iOS 13 support of apps and it looks like I just don't use any of them unfortunately.

Love the idea still and hoping it gains heavily in adoption.

[rvanmil → jsgo]

Bird Rides[1] uses it. I tried it and it works very well.

[1] https://www.bird.co

[ilogik → rvanmil]

the WWDC announcement said it would be mandatory starting in the spring. did that change?

[ogre_codes → ilogik]

Mandatory so long as the app supports other third party authentication. If they exclusively use only their own accounts, it isn't required. (There are a couple other exceptions for business and education apps)

Edit: https://developer.apple.com/news/?id=09122019b

New Apps will be required to implement this immediately, existing apps have until April next year to support it before updates will be rejected.

[Gaelan → jsgo]

Apple was planning on making SIWA support mandatory, but pushed that back to 2020.

[ogre_codes → Gaelan]

For new Apps it is mandatory, existing apps have until April of next year to support it before updates will start getting rejected.

[Operyl → ogre_codes]

Only mandatory if you use Facebook/google sign in.

[dwaite → Operyl]

Any third party sign-in.

[Operyl → dwaite]

Yeah, sorry, was over generalizing it. They did make that first-party exclusion for SSO thankfully.

[bredren → Gaelan]

My understanding is that critical bugs pushed back the implementation deadline even for existing applications.

[ninkendo → jsgo]

I know of at least one app that uses it (Ten Percent Happier).

[microtherion → ninkendo]

Yes, that was the first time I saw it, and it's exactly the kind of app that I'd rather not give my PII to, so kudos to that developer for offering the option.

[obenn → jsgo]

Just adding "Wordpress" and "Pocket Yoga" to this list.

Wordpress is a good example of a service with a web implementation as well to try from the browser.

[Kikawala → jsgo]

Houzz[1] as of version 19.10.2 uses Sign in with Apple.

[1]https://apps.apple.com/us/app/houzz-home-design-remodel/id39...

[simonw → Kikawala]

Houzz appears to support Sign in with Apple in their iPhone app, but not yet on their https://www.houzz.com/ website. So I created an account on my phone that I can't use on their site.

[lucasverra → jsgo]

web démo here https://starter-siwa.glitch.me/ (not mine)

[mikhailt → jsgo]

Apps and services have to add this support in, it's not something Apple can do on their own.

It is available as part of iOS 13, yes but it will take time.

[helpPeople → jsgo]

Doesn't this lock you further under Apple?

Harder to change everything later.

[lilyball → helpPeople]

It's no harder to change than using any other identity provider. If you want to change, the service just needs to provide some way for you to link your existing account to a new sign-in mechanism.

Classically, this is done merely by detecting that you've signed in on two different mechanisms using the same email address. That can still be done with Sign In With Apple for users that have opted to give the service their email address, but for users that opted to use Apple's email redirector, the service will simply need a way for the user to explicitly link it to another account (or to manually provide their email address).

[toomuchtodo → helpPeople]

Some of us never plan on leaving the Apple ecosystem. Tradeoffs.

[badwolf → jsgo]

Seems so. TikTok uses it.