identityservicesd / Little Snitch

Question

Level 1

4 points

identityservicesd / Little Snitch

Since my recent installation of macOS Sonoma, I regularly get Little Snitch pop-up alerts asking me to accept incoming connections regarding "identityservicesd".

I should point out that the IP addresses indicated in the Little Snitch pop-up refer to Apple / Cupertino. For example :

17.188.143.26

17.188.170.132

17.188.171.68

(...)

At the moment I have accepted 18 IP addresses.

No one at Apple support (phone) can explain to me what "identityservicesd" means, or why I'm getting these Little Snitch alerts. According to Apple support, the problem comes from Little Snitch...

Can someone more professional than Apple support answer my question?

Thanks in advance.

Mac Studio (2022)

Posted on Jan 18, 2024 12:44 AM

Reply

Answer 1

Owl-53

Level 10

102,235 points

Jan 18, 2024 1:01 AM in response to Users404

To get some idea what this might be

Use the Activity Monitor application and make sure to use View >> View All Processes

Type in identityservicesd

Then in second image use the " OpenFiles and Port "

identityservicesd is a background process (Identity Services Daemon) that deals with third-party credentials.

One would not normally receive a " got this pop up. " nor " nor do I know whether or not it should be accepting network connections." unless the computer is running a Third Party Firewall like Little Snitch

Reply

Answer 2

Users404 Author

Level 1

4 points

Jan 30, 2024 11:54 PM in response to dialabrain

I've been in touch with Objective Development support.

They were going to respond eventually but have apparently chosen not to do so here.

I can only write that since macOS Ventura, Apple has made some changes. And so has Objective Development.

Legitimate pop-up alerts can therefore be accepted.

Reply

Answer 3

Jan 19, 2024 3:00 AM in response to Users404

It's set to allow any incoming / outgoing connection on both my LittleSnitch installations. As far as I can tell, it's a process checking the validity of third-party apps signed with Apple.

Reply

Answer 4

Users404 Author

Level 1

4 points

Jan 19, 2024 1:23 AM in response to Owl-53

Hello,

Thank you PRP_53 for your reply.

As I said in my message, it's Little Snitch (which I use) that tells me about an incoming connection with the "identityservicesd" process, linked to an IP address.

What I wanted to know was why I receive an authorization request (pop-up alert from Little Snitch) almost every day, with different IP addresses. They're all different and linked to Apple.

I understood that the solution was to accept all "identityservicesd" requests once and for all.

I'm curious because this is a new thing that's come up since I installed macOS Sonoma, and Little Snitch didn't offer me any pop-up alerts with previous mac OSes.

Reply