Apple Business directory sync via Okta System for Cross-domain Identity Management (SCIM) fails daily because a new agreement on the Apple portal requires acceptance. An administrator must sign in to the Apple Business portal, accept the new agreements, and re-authenticate the SCIM integration in Okta. The Apple Business directory sync breaks daily, preventing the creation of new Apple Business federated accounts, and re-authenticating or generating a new client secret only restores functionality for approximately one day.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Integration Network (OIN)
• Apple Business
• System for Cross-domain Identity Management (SCIM)
• Provisioning
• Directory Sync

Apple disrupts integration and forces a sign-in when a newly updated agreement on the Apple portal remains unsigned. Apple limits capabilities and API interactions until an authorized administrator accepts the new terms.

Why does the Apple Business SCIM sync require daily re-authentication?

Accept the new Apple agreements in the Apple Business portal and re-establish the SCIM connection in the Okta Admin Console.

1. Sign in to the Apple Business portal using an Apple administrator account.
2. Review and accept any pending new agreements or terms of service prompted by Apple.
3. Sign in to the Okta Admin Console.
4. Go to Applications > Applications.
5. Select the Apple Business Manager or Apple Business SCIM application.
6. Go to the Provisioning tab and select Integration.
7. Select Re-authenticate with Apple Business Manager SCIM.
8. Verify that the SCIM connection is successful and directory sync operations resume normally.

Related References

• If Apple Business asks you to approve new Terms and Conditions