Hacker News new | ask | show | jobs
by jakobegger 2331 days ago
> To test I needed an Apple ID with 2FA.

Apple make it such a pain in the ass to get Apple IDs. For example, they block emails from small domains. So I can't use my company email address to get an apple ID.... and I found that out by googling cryptic error messages, they don't even tell you.

They don't want you to have multiple Apple IDs, so you need to store the credentials of your main Apple ID on your build server if you want to notarize apps (which is required for distribution). Also, the notarisation service doesn't support 2FA, so you need to get an app-specific-password that bypasses 2FA.

It's ridiculous. Their security system is so complex and full of holes...

2 comments

You should be using this:

https://support.apple.com/guide/apple-business-manager/what-...

https://support.apple.com/guide/apple-business-manager/creat...

Not the consumer Apple IDs. This lets you programically generate the Apple IDs (you can even set permissions on them).

Works great.

Not that they've made it straightforward to make it explicit who should use what, or anything, but they do have solutions for this. It also has other perks (like being able manage distribution of your app)

To be fair to anyone, the Developer Documentation does not talk one bit about this, at all, as a solution.

I guess this also requires an organisation/business account? Because I can't get that either, because Apple doesn't allow sole proprietors like myself to get a business account. I can only get an individual account. Which means that I can't add my employees to my team.
Only a DUNS number, IIRC, which any registered business can get for free
This is news to me. My apple ID is on my personal domain (Google Apps) with only one email address on it, and it works fine. Could it be a recent change?
About 6 months ago I was unable to use my email on a personal domain to create an Apple ID. I had to create an @icloud.com address. And I don't think it's an issue with my domain, it's been fine for the last 9 years.
FYI you can normally change the email on an Apple ID after creation, without the domain restrictions that are present for initial creation.
Great to know, thank you
In my experience it's randomly prohibited by some algorithm.