> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # Connect Apple Business Manager with OAuth 2.0 (Client Assertion) – StackOne Hub > Link a Apple Business Manager account in the StackOne Hub using OAuth 2.0 (Client Assertion). End-user guide to authorize the integration and start using Apple Business Manager actions. Only an Apple Business user with the Organization Administrator role can create an API account, and the client assertion must be re-signed and re-entered before its expiry date or every call starts failing.

Create an API account

Create an API account in Apple Business. Apple generates the key pair and gives you the private key to download.

Sign in to Apple Business with a user who has the Organization Administrator role, choose Settings, then API.

Select Add API Account, enter a name such as `StackOne`, select its role, then select Next.

Select Generate & Download to generate and download the key. The key's filename ends in `.pem`, and you generate it only once.

Select Edit on the API account to view its Client ID and Key ID.

Sign a client assertion

Apple's OAuth implementation guide includes a Python script that signs a client assertion JWT (ES256) from the downloaded private key.

Follow the sample script on Apple's OAuth implementation guide, passing your client id, key id and downloaded private key. Choose an expiry up to 180 days out.

  • The script prints a signed JWT string. Copy it in full.

Linking the Account from the Hub

Use one of the three Linking Account Methods to access the Hub. Fill out the following fields using details from your provider:
  • Client ID
  • Client Assertion
  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.