I assume that’s meant to be @maihacke’s solution as well, and that there’s a bug somewhere.
Well I’m very happy it is authenticating again! 2FA after reboot is a minor inconvenience to me :-). Thx @maihacke 
The binding also stores the cookies, but maybe there is a bug. As said this a early test version. Thanks for reporting that problem.
4 Likes
Many thanks Simon for your work so far. Can this test version also be used on OH 4.3.8 ?
I’ve updated with
Bundle:update
With the package from the console but get:
CONFIGURATION_ERROR
Request https://idmsa.apple.com/appleauth/auth/signin/complete?isRememberMeEnabled=true failed with 401.
Is this the error from the previous version?
Thanks! Seems to work like a charm so far.
Probably yes, be sure that oH loaded the new version.
You can do this in the karat console with bundle:list -s | grep icloud
You should only see one active binding.
Orherwise, stop the old one and restart the new one.
Stop the bridge and start it again.
Thanks for trying too support here.
What i did is:
What i get is:
2025-12-05 10:45:37.322 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:device:0f0b89eaae:c2ba16c0' changed from OFFLINE (BRIDGE_OFFLINE) to UNINITIALIZED
2025-12-05 10:45:37.336 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:device:0f0b89eaae:c2ba16c0' changed from UNINITIALIZED to UNINITIALIZED (HANDLER_MISSING_ERROR)
2025-12-05 10:45:37.337 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:account:0f0b89eaae' changed from OFFLINE (CONFIGURATION_ERROR): Request https://idmsa.apple.com/appleauth/auth/signin/complete?isRememberMeEnabled=true failed with 403. to UNINITIALIZED
2025-12-05 10:45:37.351 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:account:0f0b89eaae' changed from UNINITIALIZED to UNINITIALIZED (DISABLED)
2025-12-05 10:45:37.352 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:device:0f0b89eaae:c2ba16c0' changed from UNINITIALIZED (HANDLER_MISSING_ERROR) to UNINITIALIZED (BRIDGE_UNINITIALIZED)
2025-12-05 10:45:43.656 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:account:0f0b89eaae' changed from UNINITIALIZED (DISABLED) to INITIALIZING
2025-12-05 10:45:43.660 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:account:0f0b89eaae' changed from INITIALIZING to UNKNOWN
2025-12-05 10:45:43.664 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:device:0f0b89eaae:c2ba16c0' changed from UNINITIALIZED (BRIDGE_UNINITIALIZED) to INITIALIZING
2025-12-05 10:45:43.667 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:device:0f0b89eaae:c2ba16c0' changed from INITIALIZING to OFFLINE (BRIDGE_OFFLINE)
2025-12-05 10:45:45.191 [INFO ] [ab.event.ThingStatusInfoChangedEvent] - Thing 'icloud:account:0f0b89eaae' changed from UNKNOWN to OFFLINE (CONFIGURATION_ERROR): Request https://idmsa.apple.com/appleauth/auth/signin/complete?isRememberMeEnabled=true failed with 403.
I disabled the “old” Binding, installed the JAR, did a restart and get the following error:
Request ``https://idmsa.apple.com/appleauth/auth/signin/init`` failed with 503.
Sorry to ask probably a “stupid” question. From where do I get the “new” current version of the binding?
You need to stop the bundle 358 aka the old one.
bundle:stop 358
bundle:restart 309
It should look like this:
openhab> bundle:list -s | grep icloud
309 │ Active │ 80 │ 5.0.4.202512041635 │ org.openhab.binding.icloud
358 │ Resolved │ 80 │ 5.0.2 │ org.openhab.binding.icloud
Then you can restart the bridge and should be asked to input your 2FA code.
Dear all, is there also a version available that is compatible with OH 4.3?
1 Like
Hi,
I‘ve installed it like this:
bundle:update 309 https://github.com/maihacke/openhab-addons/releases/download/17590-srp-5.0.x-beta-0/org.openhab.binding.icloud-5.0.4-SNAPSHOT.jar
If I would do this then it would stop the „openhab could“ not the iCloud, right?
I‘m not sure if this is intended
309 │ Active │ 80 │ 5.0.4.202512041635 │ openHAB Add-ons :: Bundles :: iCloud Binding
358 │ Active │ 80 │ 5.0.3 │ openHAB Add-ons :: Bundles :: IO :: openHAB Cloud Connector
Sorry! I´ve not read the description and you used a different filter.
309 is correct and should work.
Hey, do we know when to expect this fix to make it into the stable branch?
After uninstalling the Addon Store version of the iCloud Binding, I tested the jar using OH5.0.3 and OH 5.1-snapshot. It works with both versions, however I did have to create new iCloud Bridges. I couldn’t seem to get the old (original) bridges to come online. I kept getting the 503 Error that some others have reported. Creating a new bridge and linking it to my iCloud Things fixed all of the issues. Thanks for the continued support of this binding.
Hi Simon, have upgraded today to OH 5.0.3 and your binding works out great. 2FA is a minor issue for me. Thanks for all your work and forget my request for an OH 3.4.6 version 
. Hesitated to upgrade but at the end i am really happy now.
Have a nice Advent time.
I tried to leave issue on github, but can not find it. So here:
I got an “Request https://idmsa.apple.com/appleauth/auth/signin/init failed with 503.” after reboot or in second case:
“Request https://idmsa.apple.com/appleauth/auth/signin/complete?isRememberMeEnabled=true failed with 503.”
Maybe because work with an text file for configuration, in which code is changes wenn 2FA is sent?
I have the same issue. Already tried to delete the .thing file, restarted, tried to set it up via the GUI but with no luck. Still get the message “Request https://idmsa.apple.com/appleauth/auth/signin/complete?isRememberMeEnabled=true failed with 403.”
I also tried to do “openhab-cli clean-cache” but it didn’t succeed.
Are there any other things I could try in order to make it work again? Because it says “Token is not valid. Attemping new login”:
9:53:47.491 [DEBUG] [al.handler.ICloudAccountBridgeHandler] - iCloud bridge handler initializing …
19:53:47.498 [DEBUG] [al.handler.ICloudAccountBridgeHandler] - iCloud bridge handler initialized.
19:53:47.508 [DEBUG] [al.handler.ICloudAccountBridgeHandler] - Starting iCloud authentication (AuthState=INITIAL, Thing=icloud:account:fli)…
19:53:47.512 [DEBUG] [binding.icloud.internal.ICloudService] - Checking session token validity
19:53:47.517 [DEBUG] [binding.icloud.internal.ICloudSession] - iCloud request POST ``https://setup.icloud.com/setup/ws/1/validate``.
19:53:47.812 [DEBUG] [binding.icloud.internal.ICloudService] - Token is not valid. Attemping new login.
org.openhab.binding.icloud.internal.ICloudApiAuthenticationException: Request Request ``https://setup.icloud.com/setup/ws/1/validate`` failed with 421. failed with 421.
at org.openhab.binding.icloud.internal.ICloudSession.request(ICloudSession.java:159) ~[?:?]
at org.openhab.binding.icloud.internal.ICloudSession.post(ICloudSession.java:98) ~[?:?]
at org.openhab.binding.icloud.internal.ICloudService.validateToken(ICloudService.java:202) ~[?:?]
at org.openhab.binding.icloud.internal.ICloudService.authenticate(ICloudService.java:102) ~[?:?]
at org.openhab.binding.icloud.internal.handler.ICloudAccountBridgeHandler.checkLogin(ICloudAccountBridgeHandler.java:336) ~[?:?]
at org.openhab.binding.icloud.internal.handler.ICloudAccountBridgeHandler.callApiWithRetryAndExceptionHandling(ICloudAccountBridgeHandler.java:162) ~[?:?]
at org.openhab.binding.icloud.internal.handler.ICloudAccountBridgeHandler.lambda$2(ICloudAccountBridgeHandler.java:125) ~[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:317) ~[?:?]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) ~[?:?]
at java.lang.Thread.run(Thread.java:1583) [?:?]
19:53:47.819 [DEBUG] [binding.icloud.internal.ICloudService] - Authenticating as user@domain.com