There's a feature for PIN protection which works with Mobile SDK applications which provides an extra level of security for users. The PIN configuration is done as part of a connected app as shown below
Therefore, the PIN is tied to each org (where the connected app is created). Normally, a mobile iOS app which is distributed via App Store can't really be tied to a specific org so it would use a dummy client secret in the
bootconfig.json file. The client secret is based on a Connected App.
Normally, it would not matter to use a dummy client secret but to use the PIN auth feature, the client secret must be of the org where the connected app has been created and PIN feature enabled. Therefore, my question is there a way to generalise this for apps which are to be distributed via public app store? How can I enable pin protection for an app to work on any org because the client secret is actually for a specific org and tied to my app code? The only approach I see as of now is to release separate IPA files for each org which is not a practical solution for App Store distribution anyway.
I'm looking for a confirmation on whether it's actually possible to use pin protection in an org independent manner? Like perhaps packing the Connected app in a managed/ unmanaged package and forcing all users to install it in the orgs where they intend to use the mobile app?