Explain why sign-in helps.
Request authentication at the point where the protected task needs it. Use the supported identity-provider flow and Apple’s required clarification before collecting personal information.
Confirm the customer and protect account actions.
Connect the conversation to the right business account when a task needs private information. Let your application authorize each requested action.
Account access decision
Identity and access checked
Maya can read order 1042
Account
Maya Chen
Resource owner
Maya Chen
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2086
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Identity and access checked
Sam can read order 1057
Account
Sam Rivera
Resource owner
Sam Rivera
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2091
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Identity and access checked
Noor can read order 1063
Account
Noor Haddad
Resource owner
Noor Haddad
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2104
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2086
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
9:41
Harbor
iMessage
Today 9:41
Please sign in to your Harbor account so we can help with your order.
Verify your identitySign in to your Harbor account
Sign in
Verify your identityYou’re signed in
I’ve signed in. Show order 1042.
Your order is ready for collection. How can we help?
Can you show order 2086 instead?
That order is not available in your account. Our team can help you check the reference.
iMessage
9:41
Harbor
iMessage
Today 9:41
Please sign in to your Harbor account so we can help with your order.
Verify your identitySign in to your Harbor account
Sign in
Verify your identityYou’re signed in
I’ve signed in. Show order 1042.
Your order is ready for collection. How can we help?
Can you show order 2086 instead?
That order is not available in your account. Our team can help you check the reference.
iMessage
Account access decision
Identity and access checked
Maya can read order 1042
Account
Maya Chen
Resource owner
Maya Chen
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2086
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Identity and access checked
Sam can read order 1057
Account
Sam Rivera
Resource owner
Sam Rivera
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2091
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Identity and access checked
Noor can read order 1063
Account
Noor Haddad
Resource owner
Noor Haddad
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2104
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2086
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Account access decision
Identity and access checked
Maya can read order 1042
Account
Maya Chen
Resource owner
Maya Chen
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2086
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Identity and access checked
Sam can read order 1057
Account
Sam Rivera
Resource owner
Sam Rivera
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2091
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Identity and access checked
Noor can read order 1063
Account
Noor Haddad
Resource owner
Noor Haddad
Action
Read order status
Decision
Allowed
The account and requested resource match under the application’s normal authorization checks.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2104
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Resource access refused
The private record stays private
Identity
Signed in
Requested resource
Order 2086
Decision
Denied
Response
No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
9:41
Harbor
iMessage
Today 9:41
Please sign in to your Harbor account so we can help with your order.
Verify your identitySign in to your Harbor account
Sign in
Verify your identityYou’re signed in
I’ve signed in. Show order 1042.
Your order is ready for collection. How can we help?
Can you show order 2086 instead?
That order is not available in your account. Our team can help you check the reference.
iMessage
Compare access to the customer’s own order with an unrelated account’s record.
Bind customer identity and
authorize the resource.
Connect the conversation to an authorized customer account.
Keep the account binding correct.
Validate callbacks and bind the result to the intended conversation and customer account. Keep secrets and tokens in the owning authentication environment.
Test refusal and expiry.
Exercise canceled sign-in, expired access and a different account requesting the same record. Use the same resource permission checks for an assistant tool and a human service action.
Keep building
with Apple Messages.
Use the verified account for the specific service request, booking or purchase that needs it.
Scale without
losing control.
Organize teams in workspaces, control API access, and trace changes through audit logs.
Organization
Harbor
Production
Sandbox
Access stays in its workspace.
Production/API keys
Delivery agent
ActiveEmail
SMS
Apple Messages
ALChanges saved
Alex Lee
Admin
Today · UTC
Audit log
API key updatedAlex Lee · Production
09:42:18ReadWrite
API key createdAlex Lee · Production
09:41:06
Member invitedAlex Lee · Sandbox
09:38:24
Workspace createdAlex Lee · Sandbox
09:36:02
Member invitedAlex Lee · Production
09:31:47
Organization
Harbor
Production
Sandbox
Access stays in its workspace.
Production/API keys
Delivery agent
ActiveEmail
SMS
Apple Messages
ALChanges saved
Alex Lee
Admin
Today · UTC
Audit log
API key updatedAlex Lee · Production
09:42:18ReadWrite
API key createdAlex Lee · Production
09:41:06
Member invitedAlex Lee · Sandbox
09:38:24
Workspace createdAlex Lee · Sandbox
09:36:02
Member invitedAlex Lee · Production
09:31:47
Organization
Harbor
Production
Sandbox
Access stays in its workspace.
Production/API keys
Delivery agent
ActiveEmail
SMS
Apple Messages
ALChanges saved
Alex Lee
Admin
Today · UTC
Audit log
API key updatedAlex Lee · Production
09:42:18ReadWrite
API key createdAlex Lee · Production
09:41:06
Member invitedAlex Lee · Sandbox
09:38:24
Workspace createdAlex Lee · Sandbox
09:36:02
Member invitedAlex Lee · Production
09:31:47