Link Apple Developer Account to Onside

A step-by-step guide to connecting your AppStore Connect account to Onside using an API Key and Marketplace Token for seamless app management.

Connecting your Apple Developer account is a crucial step that allows Onside to securely and automatically sync your app builds. This guide will walk you through the two parts of the connection process: generating an API Key and a Marketplace Token.

To complete this process, you will need Admin access to your App Store Connect account.

---

Part 1: Generating and Submitting Your API Key

The API Key allows Onside to communicate with App Store Connect on your behalf to manage app information.

1

Go to the API Keys Section in App Store Connect

Click this direct link to open the correct page:

Go to App Store Connect Keys →

You will land on the Users and Access > Integrations > App Store Connect API page.

2

Generate a New API Key

Click the (+) button to generate a new key. In the pop-up window:

1. Name: Give the key a memorable name, like "Onside Marketplace".

2. Access: Assign it the App Manager or Admin role.

3. Click Generate.

3

Download the .p8 Key File

After generating the key, you will see a new entry in your list of active keys. Click the Download button.

You can only download the .p8 key file once. Please save it in a secure location, as you will need to upload it to Onside.

4

Copy & Paste Credentials into Onside

On the same App Store Connect page, you will find your Issuer ID and the Key ID for the new key you just created.

1. Copy the Issuer ID.

2. Copy the Key ID.

3. Go back to the Onside Console "Link Developer account" page.

4. Paste the Apple Developer ID (Issuer ID) into the corresponding field.

5. Upload the .p8 file you downloaded.

6. Paste the Key ID into its field.

7. Click Submit.

Is it safe to give you an API Key with Admin access? Can you delete my app?

We understand this concern completely. Security and trust are fundamental to our partnership with developers.

• Secure, Encrypted Storage: Once you provide the API key, it is immediately encrypted and stored securely in our system. It is never exposed in plain text.

• Purpose-Built Operations: Our systems are designed to use the API key for specific, necessary operations only, such as syncing app builds, viewing metadata, and managing app availability on Onside. We do not have automated or manual processes designed to delete your apps from App Store Connect.

• Your Control: You always remain in full control. You can revoke the API key you generated for Onside at any time in your App Store Connect account, which will immediately cut off our access.

We require the Admin or App Manager role because these are the roles Apple has designated with the necessary permissions to manage builds and app metadata through the API. We are committed to using this access responsibly and only for the stated purposes of operating the Onside marketplace.

Do I need a separate API Key for each of my apps?

No. You only need to generate one App Store Connect API Key for Onside. This single key will allow us to sync all the apps you choose to make available on our platform from your developer account.

What happens if my `.p8` API Key file is lost or compromised?

If you lose the .p8 file before uploading it to us, or if you suspect it has been compromised, you should immediately go to App Store Connect and revoke that specific API key. The key will instantly become invalid. You can then generate a new one and update the credentials in your Onside Console. The old, revoked key will no longer provide any access.

Can I use an existing API Key that I use for other services?

Yes, you can, provided it has the required Admin or App Manager permissions. However, for security and better management, we highly recommend generating a new, dedicated API Key specifically for Onside and naming it accordingly (e.g., "Onside Marketplace"). This makes it easy to track and manage access, and if you ever need to revoke access for one service, it won't affect others.

Part 2: Generating and Submitting Your Marketplace Token

The Marketplace Token specifically authorizes Onside to distribute your selected apps.

1

Sign the Alternative Terms Addendum

Before you can generate a token, you must accept Apple's "Alternative Terms Addendum for Apps in the EU". You will be prompted to do this in App Store Connect if you haven't already.

Sign the Alternative Terms Addendum →

2

Go to the Marketplace Distribution Section

In App Store Connect, navigate to Users and Access > Alternative Distribution.

3

Connect your marketplace token

• Click the Add Marketplace button.

• Copy the Marketplace Token from the Onside Console and paste it into the field in App Store Connect.

4

Select Apps and Enable Notifications

• Select the apps you want to make available for distribution on Onside. Click Next.

• When asked about App Notifications, select "Yes, send notifications to this marketplace." This is required for Onside to receive important updates about your apps.

• Click Save.

5

Submit to Onside

Once the Marketplace is configured in App Store Connect, return to the Onside Console page and click "It's done" to finalize the process.

---

Troubleshooting & FAQs

Why is this connection necessary?

Onside does not accept direct app build uploads. Instead, we securely sync your builds directly from your App Store Connect account. This streamlined process means you only need to upload your builds to one place, and we handle the rest. This connection also enables us to auto-sync metadata like descriptions and screenshots, saving you time.

Why do I need both an API Key and a Marketplace Token?

These two credentials serve different purposes as required by Apple's system:

• The API Key grants us general, secure access to your App Store Connect account to perform technical actions like syncing builds and metadata.

• The Marketplace Token is a specific, explicit permission you grant within App Store Connect that authorizes Onside to act as an alternative marketplace for distributing your apps in the EU.

Both are necessary to create a secure and fully authorized connection between your developer account and the Onside platform.

I'm seeing an error toast. What does it mean?

Here are some common errors and how to solve them:

• "This Apple Developer ID is already linked..." or "...already in use": This means the Apple Developer account has already been connected to another Onside account. An Apple Developer account can only be linked to one Onside account at a time.

• "The API Key or Key ID you provided is incorrect": Double-check that you have copied and pasted the Issuer ID and Key ID correctly, without any extra spaces.

• "Make sure the API Key has at least the App Manager role": When you generated the key in App Store Connect (Step 2 of Part 1), you may have selected a role with insufficient permissions. Please generate a new key with either the App Manager or Admin role.

I don't see the "Integrations" tab or "Team Keys" section in App Store Connect.

This typically means you do not have the required Admin role for your App Store Connect account. Only users with the Admin role can view this section and generate API keys. Please contact the Account Holder or an existing Admin on your team to either grant you Admin access or to generate the API key for you.

I don't see the "Alternative Distribution" or "Marketplace" tab.

This section is only visible to accounts that are eligible for alternative marketplace distribution under Apple's terms for the EU. Please ensure:

1. You have accepted the "Alternative Terms Addendum for Apps in the EU." If you believe you are eligible but cannot see this section, you may need to contact Apple Developer Support.