Connect Apple Ads through Lily's approved OAuth flow.

Reviewed provider access

Apple reviewed and approved Lily's OAuth application.

This approval authorizes Lily to offer the Apple Ads Provider OAuth flow. Lily redirects you to Apple's authorization endpoint and requests the searchads scope; Apple returns a short-lived access token and a refresh token without exposing your sign-in password to Lily.

• Signed state and a short authorization window protect the callback
• The connection is limited to Apple Ads access
• You can revoke access through the provider relationship

Role-aware access

Lily respects the organizations and roles Apple returns.

After authorization, Lily reads the accessible Apple Ads organizations and determines whether the selected role is read-only or read-write. Campaign management stays disabled when the returned role does not permit writes.

• Organization ID scopes every Campaign Management API request
• Read-only access still supports reporting and analysis
• Write tools remain approval-first in self-serve mode

Connection validation

OAuth success is checked against the live API before activation.

Lily tests the Campaign Management API connection, records the access level, encrypts the resulting tokens, and then activates the account. A failed connectivity check does not silently create an active connection.