Troubleshooting Steps for issue with Push Notification Errors with Apple Push Notification Service

Knowledge Articles
1

Overview

This article provides a list of troubleshooting steps for errors related to sending push notifications through the Apple Push Notification (APN) service. Example error:

Guardian - There was an error sending the push notification: Invalid sandbox value and/or APNs certificate was provided

Applies To

  • Multi-Factor Authentication (MFA)
  • iOS devices

Solution

For Auth0 to send a push notification to an iOS device via APNS production, please ensure the following:

  1. The mobile application, identified by bundle ID, must have push notifications capability enabled.
  2. The developer must generate a Client SSL Certificate that allows Auth0’s notification server to connect to the Apple Push Notification Service. Each App Identifier requires its own Client SSL Certificate. When generating the certificate, the developer must select Apple Push Notification service SSL (Sandbox & Production).
  3. The Auth0 tenant admin must provision the Push Notification using the Auth0 Guardian factor with the client APNS cert and select the Production App environment.
  4. It is recommended to use Guardian SDK to develop the mobile app.
  5. When building the app, the developer must use a Distribution Provisioning Profile (App Store or Ad Hoc). Do not use a Development profile. Create the provisioning profile after enabling the push capability at step 1.
  6. The developer must sign the app with a distribution certificate. Do not sign the app with a development certificate; otherwise, the mobile app will be tied to the sandbox and will not receive the push notification.
  7. The Auth0 user must enroll with push notification MFA by using an app build and signed as described 1-5. During enrollment, the app registers to receive push notifications.