http
443
Have you tried https://authentik.company/if/flow/initial-setup/ , replacing authentik.company with your FQDN?
#Authentik for Apple Business Manager
sage skiff
and if you're at the initial setup phase I don't know how you even set up ABM
sage skiff
> http
> 443
Have you tried https://authentik.company/if/flow/initial-setup/ ,...
(this would be if you have a reverse proxy or authentik runs on 80/443, otherwise you'd use http with port :9000 or https with port :9443)
jade ether
Thanks for your reply, I found the issue's solution that I need install the proper trusted certificate. now, both the SSF configure URL and OpenID Config URL are verified by Apple,
however, I still encounterd failure that Apple business Manager stop authorizing account as the following error details:
CUSTOM: Federated Authentication Widget Canceled
BUILD INFO
2520B9__M2520B9__en-us
SESSION ID
Vn1gHI5d8EvAw2EOweTv
APP NAME
ABM.MainPortal
CLIENT TIME
2025-06-08T07:43:48.984Z (1749368628984)
USER AGENT
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0
HREF
https://business.apple.com/#/main/preferences/maid/add
HOSTNAME
business.apple.com
IS ESSENTIALS
false
PATHNAME
/
HASH
#/main/preferences/maid/add
STAT ID
FlAOwhOr56MljZ9tYR217
AUTH DOMAIN ID
1
ENVIRONMENT
MAID_ENT_PROD1
IS INTERNAL
false
IS DEBUG
false
PRIMARY INTERACTION MODE
MOUSE
SIZE CLASS HORIZONTAL
REGULAR
SIZE CLASS VERTICAL
REGULAR
WEBDRIVER
false
ERROR TYPE
UNKNOWN
IS FATAL
true
IS REJECTION
false
SIZE CLASS
REGULAR
LINE NUMBER
11
STACK
Error: CUSTOM: Federated Authentication Widget Canceled
at Object.onAuthCancel (https://business.apple.com/applications/portal/2520B9/en-us/437.main.js:11:18788)
at https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js:1:39398
at u (https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js:1:15477)
at https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js:1:20858
at x (https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js:1:21168)
at O (https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js:1:21325)
at a (https://business.apple.com/applications/portal/2520B9/en-us/main.js:10:1792788)
ORG ID
xxxxxxxxxx
ACCOUNT ID
xxxxxxxxxx
I tried several solutions and double-check the configuration, but failed.