Apple App Store

The Corma and Apple App Store integration keeps App Store Connect users, roles and API keys in line with your mobile team. App Store Connect is Apple's suite of tools to submit and manage apps for beta testing and distribution and to view analytics, available once an organization enrolls in the Apple Developer Program. Apple charges an annual program fee and documents no fee per user, so the stake is access to your apps, analytics and reports rather than seats.

Key takeaways

• Apple charges an annual membership fee for the Apple Developer Program and documents no fee per App Store Connect user.
• Each organization has one team with one set of roles, from Account Holder and Admin to Developer, Finance, Marketing, Sales and Customer Support.
• The Account Holder is the only user who can sign legal agreements, renew the membership and request access to the App Store Connect API.
• Every App Store Connect user can generate an individual API key by default, unless an Admin or the Account Holder removes that ability.

Where can App Store Connect access slip?

Roles are fine-grained, but some reach far. Account Holders and Admins manage users fully, while an App Manager can add only Developer or Marketing users to the apps they can see. App Manager, Developer, Marketing, Sales and Customer Support users can be limited to selected apps if they were not given reports access. When someone leaves, deleting the user in Users and Access can take up to 10 minutes to fully revoke access because of caching.

API keys are the second layer. Team API keys carry the role chosen at creation and apply across all apps, so their app access cannot be limited; they are non-human identities in their own right. Individual keys are allowed by default for every user, one active key each, and the Account Holder and Admins can view and manage both kinds. Apple does not say whether a deleted user's individual key is revoked automatically.

How Corma governs Apple App Store

• Elevated roles under review: Admin, App Manager and Finance roles go into automated access reviews, so elevated access is confirmed on a schedule.
• Offboarding with a key check: a leaver workflow in the IT Workflow Builder removes the person from App Store Connect and asks an Admin to revoke their individual API key.
• Account Holder handover: when the Account Holder changes role or leaves, the same workflow can add an approval step for the transfer of that role.
• Program renewal in view: the developer membership and its renewal date sit in SaaS subscription management with your other subscriptions.

Frequently asked questions

Does App Store Connect support SSO or SCIM?

Apple documents no SAML SSO or SCIM in App Store Connect itself. Managed Apple Accounts have no access to Apple Developer Program resources by default, and the organization turns that access on in Apple Business Manager or Apple School Manager. Learn what single sign-on covers.

What happens when the Account Holder leaves?

The current Account Holder starts a transfer of the role, which can only go to another employee on the team with legal authority to bind the organization. Plan it before the departure, since signing legal agreements, renewing the membership and requesting App Store Connect API access depend on that role.

Where is Corma data hosted?

Corma runs on AWS, with web servers and databases in data centers inside the European Union. Data is encrypted in transit and at rest, and Corma is ISO/IEC 27001:2022 certified.

Want to know who can still publish or read reports on your apps? Book a Corma demo.