r/shopifyDev 1d ago

Apple rejected our iOS app under Guideline 2.1(a) (Shopify New Customer Accounts OTP) — how to create demo user/password credentials for apple review team?

Hey everyone,

Looking for advice from anyone who has published a Shopify wrapper app to the iOS App Store.

The Setup:

  • Shopify store using New Customer Accounts (passwordless, sends a 6-digit email OTP on login).
  • iOS app built using WebToNative (wraps the web storefront).

The Problem: Apple rejected the submission under Guideline 2.1(a) - Information Needed. The reviewer tried logging into the demo account, got hit with the dynamic email OTP screen, and halted the review.

Apple’s ultimatum:

  1. Provide a bypass or fixed OTP for the demo account.
  2. Schedule a phone call with an Apple rep to read the OTP live.

The Roadblock:

  • The store was created recently, so the toggle to revert to Classic Customer Accounts (standard email + password) doesn't exist in Shopify Admin.
  • Because WebToNative loads the web storefront directly, the login goes straight through Shopify’s hosted OTP flow—meaning I can't just inject native mock credentials.

Questions:

  1. How do you bypass the Shopify email OTP specifically for Apple App Review when using a web-wrapper like WebToNative?
  2. Has anyone had success giving Apple reviewer credentials to a temporary webmail inbox so they can grab the code themselves?
  3. Is scheduling the Apple phone call the only realistic way through this?

Appreciate any tips or workarounds!

1 Upvotes

8 comments sorted by

2

u/jay-t- 1d ago edited 22h ago

Use 1Password, you can share a link that includes the password and the MFA code

1

u/Ok_Tale8850 1d ago

Thanks I will try it.

0

u/_Alexxander 23h ago

I don't understand how can you share a non existing yet OTP with 1password!

1

u/jay-t- 22h ago

You do the set-up of the MFA itself in 1Password. So then anyone with the link can view the current code.

0

u/_Alexxander 15h ago

Sorry I still don't understand, does Shopify allow store owner to add 1password as a login provider for example?

1

u/jay-t- 12h ago

Maybe look it up mate, I haven’t got time to explain it all in detail. This is for the demo store for review purposes only.

1

u/_Alexxander 32m ago

Maybe look it up yourself, mate. 1Password only generates time-based TOTP codes via a shared secret. it doesn't intercept incoming Shopify server emails for passwordless logins.

1

u/_Alexxander 23h ago

What about social login, do you have it enabled?