Apple rejection due to unavailability of production SSN with Swedish BankID

Hello everyone,


Apple has rejected our iOS app and asking to share real SSN to test our app on their devices in order to approve.

Our app uses Swedish BankID for users authentication which is very common way in Sweden.


And with obvious reason no one can share SSN details with Apple to test the app as it is highly confidential and eprsonal.


The another option is to create dummy data setup in Production environment but even if we are able to set up dummy user in production there is no way that we will be able to get a production BankID on a fictional SSN. There is simply no way that we can allow Apple to access production data as that would be a huge regulatory breach.


We tried to convince Apple to verify our Test app (pointing to our Test environment) and based on that approve our production app but they declined the approach and wants to test Production app only.


Any suggestion how we can fix this issue? As many other apps in Sweden are using the exactly same way of authentication and their apps are totally dependent of BankID app.


Any clue in this issue would be highly appreciated.

Post not yet marked as solved Up vote post of Amit Srivastava Down vote post of Amit Srivastava
1.1k views
Posted by
Amit Srivastava
Reply
Add a Comment

Replies

Did you find any solution for this? I have searching the guidelines but didn't find anything regarding BankId.

Posted by
PeterStalbrand
Up vote reply of PeterStalbrand Down vote reply of PeterStalbrand
Add a Comment

Here's what was accepted as a solution by Apple for our application - we've added a possibility to override API URL in the application settings (Settings -> you app name). This allows production app build to point to test environment. Then you can create a test BankID with a test SSN and instruct Apple in the Notes section when you submit your app on how to install test BankID and how to connect it to previously created SSN.

Instruct Apple to order a new test BankID by going to https://demo.bankid.com/CreateCode.aspx and using a valid and reachable email address. Then open https://demo.bankid.com/ on the test unit and enter the code from the inbox under “Log in with a personal code”, and press “Log in”. Issue BankID for test by pressing “Issue”. Enter provided test SSN in the “personal number”-field and leave the first name and last name fields as they are and press issue. Press “Open BankID issuing” in the popup and then “HÄMTA BANKID” on the web page that is opened. In the popup, press “STARTA”. Enter and verify a 6 digit security code and press next. This will be used later when signing in.

Similar setup could be used to connect your test app to test Swish installation. I hope this helps!

Posted by
dimch3z
Post not yet marked as solved Up vote reply of dimch3z Down vote reply of dimch3z
Add a Comment