diff --git a/apps/docs/content/guides/integrate/identity-providers/apple.mdx b/apps/docs/content/guides/integrate/identity-providers/apple.mdx
index 32b0bbd9c..c978b5f02 100644
--- a/apps/docs/content/guides/integrate/identity-providers/apple.mdx
+++ b/apps/docs/content/guides/integrate/identity-providers/apple.mdx
@@ -20,7 +20,13 @@ import TestSetup from './_test_setup.mdx';
Click on the ZITADEL Callback URL to copy it to your clipboard.
You will have to paste it in the Apple service later.
-
+
+For Apple with V1 hosted login, the callback URL ends with `/form` (e.g., `${CUSTOM_DOMAIN}/ui/login/login/externalidp/callback/form`) because Apple uses a Form Post to return the authorization response.
+
+For V2, use the standard callback URL `${CUSTOM_DOMAIN}/idps/callback`, which already accepts POST requests.
+
+
+
## Apple Configuration
@@ -44,7 +50,7 @@ You will have to paste it in the Apple service later.
- Example domain for `https://acme-gzoe4x.zitadel.cloud` would look like this: `acme-gzoe4x.zitadel.cloud`
8. [Paste the ZITADEL Callback URL you copied before](#open-the-apple-identity-provider-template) to the Return URLs
-
+
### Register a new key
@@ -74,7 +80,7 @@ A useful default will be filled if you don't change anything.
-
+
### Ensure your Login Policy allows External IDPs
@@ -84,6 +90,6 @@ A useful default will be filled if you don't change anything.
-
+
-
+
diff --git a/apps/docs/content/guides/integrate/login-ui/external-login.mdx b/apps/docs/content/guides/integrate/login-ui/external-login.mdx
index 2524aa8e5..84df0e761 100644
--- a/apps/docs/content/guides/integrate/login-ui/external-login.mdx
+++ b/apps/docs/content/guides/integrate/login-ui/external-login.mdx
@@ -66,7 +66,9 @@ https://accounts.google.com/o/oauth2/v2/auth?client_id=Test&prompt=select_accoun
After the user has successfully authenticated, a redirect to the ZITADEL backend /idps/callback will automatically be performed.
-Note that the redirect URL is `https://${CUSTOM_DOMAIN}/idps/callback` when using the new V2 hosted login compared to the V1 hosted login, which was `https://${CUSTOM_DOMAIN}/ui/login/login/externalidp/callback`.
+The redirect URL differs between login versions. V2 uses `https://${CUSTOM_DOMAIN}/idps/callback`, while V1 uses `https://${CUSTOM_DOMAIN}/ui/login/login/externalidp/callback`.
+
+For Form Post based callbacks, V1 requires a separate `/form`-suffixed URL (`https://${CUSTOM_DOMAIN}/ui/login/login/externalidp/callback/form`), whereas V2's standard callback URL handles Form Post callbacks natively, so no separate URL is needed.
## Get Provider Information
diff --git a/apps/docs/public/img/guides/zitadel_apple_create_provider.png b/apps/docs/public/img/guides/zitadel_apple_create_provider.png
index 0b030ce71..bef86dfdc 100644
Binary files a/apps/docs/public/img/guides/zitadel_apple_create_provider.png and b/apps/docs/public/img/guides/zitadel_apple_create_provider.png differ
diff --git a/console/src/app/modules/providers/provider-apple/provider-apple.component.ts b/console/src/app/modules/providers/provider-apple/provider-apple.component.ts
index 097731051..62b3ae27b 100644
--- a/console/src/app/modules/providers/provider-apple/provider-apple.component.ts
+++ b/console/src/app/modules/providers/provider-apple/provider-apple.component.ts
@@ -72,7 +72,7 @@ export class ProviderAppleComponent {
this.service$,
);
public expandWhatNow$ = this.nextSvc.expandWhatNow(this.id$, this.activateLink$, this.justCreated$);
- public copyUrls$ = this.nextSvc.callbackUrls();
+ public copyUrls$ = this.nextSvc.callbackUrls(true);
constructor(
private authService: GrpcAuthService,
diff --git a/console/src/app/modules/providers/provider-next/provider-next.service.ts b/console/src/app/modules/providers/provider-next/provider-next.service.ts
index 63faa98c2..b7ef1f527 100644
--- a/console/src/app/modules/providers/provider-next/provider-next.service.ts
+++ b/console/src/app/modules/providers/provider-next/provider-next.service.ts
@@ -80,12 +80,12 @@ export class ProviderNextService {
);
}
- callbackUrls(): Observable {
+ callbackUrls(formPost: boolean = false): Observable {
return this.env.env.pipe(
map((env) => [
{
label: 'Login V1 Callback URL',
- url: `${env.issuer}/ui/login/login/externalidp/callback`,
+ url: `${env.issuer}/ui/login/login/externalidp/callback${formPost ? '/form' : ''}`,
},
{
label: 'Login V2 Callback URL',