Enabling App Store Connect API Access

Apple is moving away from email/password authentication for accessing their API to their respective stores and moving towards an API key solution.

This move offers the following benefits:

1. Enhanced Security: API keys can be more secure than traditional email/password combinations. They reduce the risk of phishing attacks and password leaks, as keys can be managed more strictly and rotated regularly.

2. Automation and CI/CD Integration: API keys facilitate seamless integration with Continuous Integration and Continuous Deployment (CI/CD) pipelines. This allows automated processes to access the App Store Connect portal without manual intervention, improving efficiency and reducing the risk of human error.

3. Granular Access Control: API keys allow for more granular access control. Developers can create multiple keys with specific permissions, limiting access to only the necessary parts of the App Store Connect portal. This reduces the risk of unauthorized access.

4. Audit and Monitoring: API keys can be tracked and monitored more effectively. Developers can audit which keys are being used, when, and for what purpose, allowing for better oversight and quick identification of any suspicious activity.

5. Simplified Key Management: Managing API keys can be simpler than managing multiple user accounts. Keys can be generated, rotated, and revoked easily without needing to update user credentials or inform multiple team members of password changes.

6. Scalability: API keys scale better for larger teams and organizations. As more developers or automated systems require access, generating and distributing API keys is more efficient than creating numerous user accounts with passwords.

7. Improved User Experience: Developers no longer need to remember and manage multiple passwords. Accessing the App Store Connect portal with an API key streamlines the process, especially for those who need to switch between different projects or accounts frequently.

8. Consistency Across Tools: Using API keys provides a consistent method of authentication across various tools and services, reducing the learning curve for developers and standardizing access methods.

Please note that only the Account Holder has access to provide developers the ability to generate api keys. The following steps must be completed so HqO can continue distributing their apps to the Apple App Store

1. As the Account Holder log into the App Store Connect portal: https://appstoreconnect.apple.com/

2. Navigate to User and Access then select the Integrations tab

3. Next select the button to Request Access, which will request access to the App Store Connect API. On the pop up select check that you agree to the terms and submit.

4. You should immediately get access to the App Store Connect API!

5. That’s all that’s needed for now, as long as the HqO developer has access to an Admin role that gives them permission to generate an api key no further action is needed. HqO will reach out if this is not the case and provide further instructions.