[GH-ISSUE #418] option to use developer account signing profile without username & password #104

New issue

Open

opened 2026-03-04 00:23:55 +03:00 by kerem · 1 comment

kerem commented

2026-03-04 00:23:55 +03:00

Owner

Originally created by @DetachHead on GitHub (Apr 7, 2024).
Original GitHub issue: https://github.com/SignTools/SignTools/issues/418

according to the FAQ, using a developer account will sometimes trigger 2FA prompts:

You only need your Apple Developer Account's name and password. You will sometimes be prompted for a 6-digit code (2FA) when you sign an app, which you can submit on the service's web page.

this isn't ideal for my use case, as i want to allow users to sign apps who do not have access to my developer account, and i don't want to have to manually give them 2FA codes when requested. i also don't want to use the .mobileprovision method since it either won't have all entitlements or needs to be created for each app individually.

the codemagic CLI tools allow you to log in with an app store connect key identifier, issuer ID and private key, which bypasses 2fa, and it handles the creation of the mobileprovisions, certificates, etc. it would be nice if signtools could do the same thing

Originally created by @DetachHead on GitHub (Apr 7, 2024). Original GitHub issue: https://github.com/SignTools/SignTools/issues/418 according to [the FAQ](https://github.com/SignTools/SignTools/blob/master/INSTALL.md#22-signing-profile), using a developer account will sometimes trigger 2FA prompts: > You only need your Apple Developer Account's name and password. You will sometimes be prompted for a 6-digit code (2FA) when you sign an app, which you can submit on the service's web page. this isn't ideal for my use case, as i want to allow users to sign apps who do not have access to my developer account, and i don't want to have to manually give them 2FA codes when requested. i also don't want to use the `.mobileprovision` method since it either won't have all entitlements or needs to be created for each app individually. the [codemagic CLI tools](https://github.com/codemagic-ci-cd/cli-tools/blob/master/docs/app-store-connect/README.md) allow you to log in with an app store connect key identifier, issuer ID and private key, which bypasses 2fa, and it handles the creation of the mobileprovisions, certificates, etc. it would be nice if signtools could do the same thing

kerem commented

2026-03-04 00:23:56 +03:00

Author

Owner

@DetachHead commented on GitHub (Apr 7, 2024):

looks like this is blocked by https://github.com/fastlane/fastlane/issues/18157

@DetachHead commented on GitHub (Apr 7, 2024): looks like this is blocked by https://github.com/fastlane/fastlane/issues/18157