--- title: "Support App Attest" slug: "s3suite94-support-app-attest" updated: 2026-10-27T18:41:54Z published: 2026-10-27T18:41:54Z canonical: "docs.onespan.com/s3suite94-support-app-attest" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.onespan.com/llms.txt > Use this file to discover all available pages before exploring further. # Support App Attest Use the App Attest service to provide assurance that client apps connecting to the Auth Server are valid instances of your apps. App Attest asserts that the authenticator has attestation and the app is legitimate. The Auth Server uses the App Attest service for both registration and authentication. For more information, see [Establishing your app’s integrity | Apple Developer Documentation](https://developer.apple.com/documentation/devicecheck/establishing_your_app_s_integrity). When considering whether or not to use the App Attest service, weigh the security requirements of your app against the processing overhead of using the App Attest service. If the App Attest service is fielding too many requests, it could throttle incoming traffic. Older Apple devices do not support App Attest, so evaluate how many of your customers will benefit from this service. To configure the S3 Suite to use the App Attest service, you need to 1. [Update FIDO policies to require App Attest](/dpoa/docs/s3suite94-support-app-attest#update-your-policy-to-require-app-attest). 2. [Update your iOS Apps to use App Attest](/dpoa/docs/s3suite94-support-app-attest#configure-an-ios-app-to-use-app-attest). > You must register an App ID for each iOS app that uses App Attest on the Apple Developer website. You need the Team ID of your Apple Developer Account to configure your iOS App. This can be found at https://developer.apple.com/account//membership/. ## Update Your Policy to Require App Attest You can only update a draft policy. If the policy that you want to modify is active, then copy the policy and make your modifications. A policy must be active in order to be used. 1. In the Admin Console, login and, if needed, switch to the desired tenant. Navigate to **Authentication > FIDO Policies**. 2. On the **Policies** page, copy the active policy you want to modify. In the **Actions** column for that policy, click ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image1(23).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D) (copy). The **Policy Details** page opens, rename your new policy. > In addition to letters and digits, only the following characters are allowed in a policy name: hyphen (-), forward slash (/), underscore (_) and space ( ). 3. Scroll down to the **FIDO UAF Authenticators** panel. Select both the **Request App Attest Credential** and **Reject if missing or invalid** checkboxes. The latter checkbox ensures that the App Attest credential is required. ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image9(13).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D) 1. If your policy includes the FIDO2 protocol, scroll down to the **FIDO2/WebAuthn Authenticators** panel. Select both the **Request App Attest Credential** and **Reject if missing or invalid** checkboxes. The latter checkbox ensures that the App Attest credential is required. ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image3(18).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D) 1. Save your policy. 2. To activate your policy, on the **Policies** page, look for the row containing your policy. Click ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image10(12).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D) (activate) in the **Actions** column. ## Configure an iOS App to Use App Attest Use the Admin Console to update your iOS App. 1. Login to the Admin Console and, if needed, switch to the desired tenant. Navigate to **Configuration > Apps**. 2. The **Apps** page appears. Find your app in the list and either click its name or the ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image4(22).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D) (edit) icon at the end of its row. ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image2(33).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D) 3. The **App** page appears. Enter your Team ID and save. ![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/image6(14).png?sv=2026-02-06&spr=https&st=2026-10-29T03%3A25%3A50Z&se=2026-10-29T04%3A25%3A50Z&sr=c&sp=r&sig=C%2FxH0W%2BtBNKAUiTZYGuyf%2FtgI7Grze3KqpEJVbAd3ko%3D)