flaky-kilobyte-10585
06/08/2023, 7:57 AMchilly-king-10285
06/08/2023, 7:57 AMchilly-king-10285
06/08/2023, 7:58 AMemail
9. Copy the following details from your registered application in Apple to the corresponding fields in the Ory Console form: - Apple Team Id - Apple Private Key Id - Apple Private Key 10. In the Data Mapping field of the form in the Ory Console, add the following Jsonnet code snippet, which maps the desired claims to the Ory Identity schema: local claims = { email_verified: false, } + std.extVar('claims'); { identity: { traits: { // Allowing unverified email addresses enables account // enumeration attacks, if the value is used for // verification or as a password login identifier. // // Therefore we only return the email if it (a) exists and (b) is marked verified // by Apple. [if 'email' in claims && claims.email_verified then 'email' else null]: claims.email, }, }, }
11. Click Save Configuration. For more details, you can refer to the [Ory documentation on setting up Apple as a social sign-in provider](https://www.ory.sh/docs/kratos/social-signin/apple).