Boilerplate · B2B

B2B iOS App Boilerplate: SSO-Friendly Auth + Entitlements

A business-facing iOS app lives or dies on two things: getting a company's employees signed in without friction, and gating features by the plan their employer bought. The Swift Kit ships both — Supabase auth that plays nicely with Sign in with Apple and email, plus RevenueCat multi-tier entitlements that map cleanly to seat-based and plan-based access.

Last updated: 2026-06-09 6 min read By Ahmed Gagan, iOS Engineer
Quick Answer

The Swift Kit is a b2b ios app boilerplate priced at $99 one-time (unlimited commercial projects, lifetime updates, 14-day refund) built around the two things business apps actually need: SSO-friendly authentication and tiered entitlements. Auth runs on Supabase with email and Sign in with Apple, while RevenueCat handles multi-tier entitlements so you can gate features by the plan a company purchased. API keys are proxied server-side through Supabase Edge Functions, so nothing sensitive ships inside the binary your customers' IT teams will inspect.

Price
$99 one-time, lifetime updates
Auth
Supabase — email + Sign in with Apple
Entitlements
RevenueCat multi-tier, plan-based gating
Secrets
API keys proxied via Edge Functions

Why B2B iOS apps need a different starting point

Consumer app boilerplates assume one user signs up, pays for themselves, and unlocks one premium tier. A business-facing app breaks every one of those assumptions. The person installing the app is rarely the person who pays. Access is granted by an employer's plan, not an individual card. And the buyer's IT team may want to control how employees authenticate. The Swift Kit was assembled with those realities in front of it: Supabase auth gives you a real Postgres user table you can extend with org and role columns, Sign in with Apple covers the privacy-conscious enterprise login path, and RevenueCat's multi-tier entitlements let you model 'Team', 'Business', and 'Enterprise' access without rewriting your gating logic each time sales invents a new plan.

SSO-friendly auth, honestly scoped

Be clear-eyed about what 'SSO-friendly' means here. The Swift Kit ships Supabase email auth and Sign in with Apple out of the box, behind a feature flag you can toggle. That covers the common B2B entry points and gives you a clean Supabase identity layer to build on. True enterprise SSO — SAML, Okta, Azure AD, SCIM provisioning — is configured on the Supabase side, not pre-wired in the app. The kit gives you the foundation (a server-backed auth layer and a user table you own) so adding an OIDC provider is a configuration task, not an architecture rebuild.

  • Email + Sign in with Apple shipped and flag-toggled
  • Supabase Postgres user table you can extend with org_id and role
  • Edge Functions enforce per-user rate limiting server-side
  • SAML/OIDC providers added via Supabase config, not app rewrites

Entitlements that map to how companies buy

In B2B, a feature isn't unlocked because a user tapped a paywall — it's unlocked because their company is on a plan that includes it. RevenueCat's multi-tier entitlements are the right primitive for this. You define entitlements once, attach them to offerings, and check them anywhere in SwiftUI. The 6 feature-flag modules (onboarding, auth, paywall, push, AI, Apple Sign-In) let you ship a self-serve trial flow for smaller teams while leaving room to wire account-level provisioning for enterprise deals later.

  • Multi-tier entitlements model Team / Business / Enterprise plans
  • One entitlement check gates SwiftUI features app-wide
  • Paywall module toggles off cleanly for sales-led deals
  • RevenueCat receipts and renewals handled, not hand-rolled

What a B2B build still requires from you

The Swift Kit gets you to a signed-in, entitlement-gated, secrets-safe iOS app fast — but a serious B2B product needs work the boilerplate deliberately doesn't presume. Org-level data modeling (who belongs to which workspace), admin dashboards, seat management, audit logging, and procurement-friendly compliance documentation are yours to build. What you save is the undifferentiated 6-8 weeks of plumbing: auth, secure key handling, payment infrastructure, design system, and onboarding. You spend your real time on the org logic and the workflow that makes your app worth a company's purchase order.

Swift Kit vs. building your B2B auth and entitlements from scratch

The Swift Kit ($99) vs Build from scratch comparison
FeatureThe Swift Kit ($99)Build from scratch
Cost$99 one-timeWeeks of senior engineering time
Server-backed auth (email + Apple)Shipped on SupabaseBuild and secure yourself
Secrets kept out of the binaryEdge Function proxy includedDesign and host your own proxy
Multi-tier entitlementsRevenueCat, pre-wiredHand-roll receipt + plan logic
Extensible user table for orgs/rolesPostgres, yours to extendSchema from zero
Enterprise SAML/OIDC SSOConfig on Supabase, not pre-wiredFull custom integration
Time to signed-in, gated appHours to daysMany weeks

Frequently Asked Questions

Does the Swift Kit support enterprise SSO like Okta or Azure AD?
Not pre-wired in the app, and I won't pretend otherwise. The kit ships Supabase email auth and Sign in with Apple behind a feature flag. Because auth runs on Supabase, adding a SAML or OIDC provider (Okta, Azure AD, Google Workspace) is a configuration task on the Supabase side — you get a real server-backed identity layer to attach it to, rather than rebuilding auth from scratch.
How do I gate features by the plan a company bought rather than per-user?
RevenueCat multi-tier entitlements are the mechanism. You define entitlements like 'business' or 'enterprise', attach them to offerings, and check them anywhere in SwiftUI. For company-level purchasing you map a customer to the plan their employer bought; the kit gives you the entitlement-checking foundation, while the org-to-plan association is logic you build in your Supabase data model.
Will my customers' IT teams find API keys inside the app?
No. Every AI and backend key (OpenAI, Anthropic, Supabase service operations) is proxied server-side through Supabase Edge Functions and never shipped in the binary. For B2B, where a buyer's security team may decompile your app, keeping secrets out of the bundle is the difference between passing and failing a vendor review.
Can I run a self-serve trial and a sales-led enterprise tier from the same app?
Yes. The paywall is one of 6 toggleable feature-flag modules. Smaller teams can hit a RevenueCat paywall for self-serve plans, while you toggle that flow off (or gate it) for enterprise accounts provisioned through a sales process. The entitlement check stays the same regardless of how access was granted.
What B2B-specific work is NOT included?
Org/workspace data modeling, admin dashboards, seat management, audit logging, and procurement compliance docs are yours to build. The kit covers auth, secure key handling, payments, design system, and onboarding — the undifferentiated plumbing — so your time goes to the org logic that actually differentiates a business app.
Is the $99 license fine for a commercial B2B product I sell to companies?
Yes. It's $99 one-time for unlimited commercial projects with lifetime updates and a 14-day refund. There's no subscription and no per-seat or revenue clause, so shipping a paid B2B app built on it is fully within the license.

Keep exploring

Ship your B2B iOS app on auth and entitlements that already work

Skip the weeks of building secure auth, server-side key handling, and multi-tier entitlement logic. Get The Swift Kit for $99 one-time — lifetime updates, unlimited commercial projects, 14-day refund — and spend your time on the org logic that makes companies pay.

Get The Swift Kit — $99

One-time purchase · Lifetime updates · 14-day refund