I am getting error while configuring Xcode provisioning profiles.
Provisioning profile $ProfileName doesn't include the
com.apple.security.application-groups entitlement.
How to fix it. It seems my provisioning profile/certificate does not have some capabilities. How/where to add those capabilities?
update
In marked duplicated post, Sharing data in between apps in IOS the poster asked for generic way to share data between apps but in this post i am asking to resolve a specific build error i am getting while sharing data in between groups.
First you have to set the app group up in the Apple Developer Center for your App ID:
Afterwards in Xcode:
Select your target
Enable "App Groups" in the "Capabilities" tab
Tick the checkmark for the App Groups you want to use:
sometimes, X-code stuck. please use manually sign-in instead of auto sign-in.
it may help .
I am unable to add a new device in the Certificates, Identifiers, and Profiles section of the Apple Developer portal.
I have two developer accounts, one personal account and one account for a company. The account for the company, I am set as a 'member' for the team. This is the account that I am unable to add a new device for. (I am also not able to download the Distribution certificate, which I believe is a related issue that I need resolved too).
I have researched the other similar questions on SO, but neither of them applied to my scenario.
Here is a picture showing the + button disabled (greyed out)
From Apple documentation:
Team members can’t register devices and create development
provisioning profiles using their developer account.
Ask from someone who has Team admin or Team agent privileges to add you.
I figured it out. Team Members are unable to add a new device via the Developer Portal. However, they are allowed to add a new device to the provisioning file via XCode. I was working with Xamarin and didn't know that I needed to go back to XCode in order to add a new device to the provisioning file.
If you're working in Xamarin and experience this problem, you need to create a 'dummy app' in XCode with the same info as your Xamarin app. Then select your team and it should generate the correct provisioning file for you. After that, build and run your app on your device, then a pop up window should display telling you that the device is not in the provisioning file, then asks if you would like to add it. A simple click of 'Yes' will automatically add the device to the provisioning file which is then reflected on the Developer Account.
Hope that helps someone else! I spent many hours trying to figure this out.
I am an self-employed iOS developer and so have my own iOS distribution membership.
For a few days, I am working as a developer in a team. My apple account has been added in their iTunes Connect / Users and Roles. It works since I can access to the app details of the current app we develop.
However, I can't get it right on Xcode. And so Xcode says the bundle ID is not right because I don't have the provisioning profiles.
In 'Project>General>Identity>Team', I can only select my own account and I don't see the new team I am part of.
I don't see it neither in the Accounts page of Xcode preferences.
A provisioning profile has been created by the team leader for me. It didn't solve the problem.
Question: How to add new team we belong to in Xcode?
Note - at long last Apple will resolve this insanity,
They are finally fixing it in 2018:
Apple has now unified both AppStore Connect and developer.apple.com systems.
To add profile & certificates capabilities:
Navigate to App Store Connect > Users and Access
Select your user account. (You may need to be a team admin to do this.)
In section "Developer Resources", check the box "Access to Certificates, Identifiers & Profiles".
You will only see this option when your dev account is a 'Organization'
Update: This answer posted in February 2019 is still valid as of September 2021
Overwhelming issue here:
Apple have two totally different fundamental systems,
- the "developer.apple" system
and the
- iTunes connect system
They are completely different. As a rule you need to be in both.
It's the single most confusing (and ridiculous) thing in the whole software industry. It is a source of endless confusion.
When you suffer the problem on this page, 99% of the time the solution is "they added me on iTunes Connect, but they forgot to add me on Developer..." or "they forgot to make me an admin on one or the other."
If you are added to a existing team, Ask for an invitation as Admin
Go in apple developer center: https://developer.apple.com/account
Again, that's developer.apple,
NOT
itunesconnect.apple !!!
Once you are in at developer.apple.com/account, be sure you are in the correct team on the top right corner:
Go in section people
Be sure your are admin :
If everything it's ok here. So stop completelly Xcode and restart it.
Be sure your account is added to Xcode in Preference->Account
If not, click on the + on the bottom left corner and add your account.
Now, in your project, go on your target :
And in team, your new team must appear :
To repeat,
on Apple, there IS A DIFFERENCE BETWEEN 'DEVELOPER' AND 'ITUNES CONNECT' THINGS.
Your company has to invite you on the "developer thing" as shown in the images here. If you're "only" invited on the "itunes thing", nothing works. Really silly and bizarre, but that's how it is.
Xcode does not see your development team(it is not a personal team) until admin check in the next setting in AppStoreConnect even if your role is Developer
Access to Certificates, Identifiers & Profiles
SOLUTION : My account was not added in the certificates page of the member center of the development team leader.
He just added me and I received an invitation to join. It solved the problem since I can now select my team in Xcode.
For those who live in 2021 but are simply lost, here is where the "Team" button moved !
You’ll simply find it under the section “Signing and Capabilities” instead of “Main”. See the image below:
In addition of what #opyh said, your user must have checked the option "Access to certificates, identifiers and profiles." in https://itunesconnect.apple.com/access/users to see your own team.
After that, you have to add your account in xcode > target > team, and you will show your user is assigned to a team.
For this you have to do following things:
Check whether your apple ID is added into the team on Apple
Developer portal with specific role. If not then it should be added.
After that you have to add your apple account in the
settings of the Xcode at following path. If added then remove and add again
Xcode -> Preferences ->
Accounts -> Add the account by clicking on 'Plus' (+) button on the
left botttom section
If this is done and still have a issue then regenerate the provisioning profile, install and use it.
It seems when Apple merged App Store Connect and Developer accounts, some accounts have been missed, like mine – In my case (I am part of a team, but not the account holder), I had to use a different solution:
Check if your team shows up on https://appstoreconnect.apple.com (as entry in the menu in the top right corner)
Check if your team shows up on https://developer.apple.com/account (as entry in the menu in the top right corner)
If the team is missing in one of the menus, let the account owner remove your membership in App Store Connect and re-invite you. After accepting your new invitation, the missing team should be displayed on both App Store Connect and the Developer portal. Now you can also use it in Xcode.
You may also need the appropriate certificate. without the need to have full access to certifications or to be full admin
you can email the creator of the signing certificate. Ask the creator to export the signing certificate on their Mac so you can install it on your Mac.
Please see the link below for more information:
Apple's documentation of what app signing is
https://help.apple.com/xcode/mac/current/#/dev3a05256b8
Apple's documentation on how to "Create, export, and delete signing certificates"
https://help.apple.com/xcode/mac/current/#/dev154b28f09
I faced into the same issue, after 1 hour trying many ways, they showed your developer program was expired :D. Why don't it show at the first time to save my time.
For me I had to go build settings under Signing -> Code signing identity then changed it to iOS Developer and went under Development team -> select others then add the team key.
I had this same issue. I needed my admin to additionally grant me 'Access to Certificates, Identifiers & Profiles'. The solution was given here by user bruno887 https://developer.apple.com/forums/thread/117098
If you recently signed into the account, ensured you have the correct permissions in Apple Developer + App Store Connect, and still can't get a new team to show up, I've had to restart my computer or log out / log in order to get it to appear. Sounds crazy but this has been the only resolution for me on multiple occasions.
Removing the user in App Store Connect, Mac Settings, and re-login the user that worked for me.
When I first built my app & Watchkit app, I had the "Associated Domains" capability enabled. I've disabled it in the "Capabilities" panel of both the watchkit extension and the companion app, and confirmed that the key is gone from each info.plist.
I have gone to Apples' "Certificates, Identifiers and Profiles" page, selected the App ID for each the Watchkit App, The Extension, and the App, unticked "Associated Domains", regenerated the provisioning profiles for each, downloaded and installed them.
I've done a Ctrl-Shift-Command-K complete clean, reboot, and rebuild. On sumbission to the appstore I get the error message below.
I have done a project search within xcode and cannot find a com.apple.developer.associated-domains key. I've searched the build directory, nada. I don't believe this key actually exists in my code, and yet iTunesConnect seems to think its there and set to '*'.
To fix this issue:
log into Apple Deveveloper Center
Go to Certificates, Identifiers & Profiles.
Go to Identifiers/App IDs.
Select your App ID and Edit
Uncheck Associated Domains
Save
You will have to regenerate any provisioning files associated with the App ID. For some reason the "Associated Domains" got checked for my app.
Deselecting it made the AppStore submission work.
I think this is a bug.
I managed a workaround by simply inserting a new Array item in the Entitlements.plist of both the companion app and the Watchkit extension: "com.developer.apple.associated-domains" and a valid domain for the webcredentials: string. While this will have no practical effect as neither my provisioning files nor the Capabilities tab of the app or extension are enabled for associated domains, it stopped whatever code scanner at itunesconnect was tripping over an invalid value of "*" for the non-existent key.
If you want to use associated-domains, make sure each entry in Entitlements.plist > com.developer.apple.associated-domains uses the following format:
<service>:<fully qualified domain>[:port number]
eg.
webcredentials:www.example.com
applinks:www.example.com
activitycontinuation:www.example.com
Keep in mind [:port number] is optional, but <service> and <fully qualified domain> are required!
From the App submission failed errors what I understand is possibly your provisioning profile still have the "associated-domains" enabled and its missing in your application "entitlements" file.
So obviously there will be two scenarios.
Scenario 1: Do you want to support "associated-domains". This should be enabled for features like "Universal Links".
Please refer the following link:
https://developer.apple.com/library/content/documentation/IDEs/Conceptual/AppDistributionGuide/AddingCapabilities/AddingCapabilities.html
In this case please don't manually edit your "entitlement" file. Instead follow the steps.
1. Select your project file in Xcode.
2. Select appropriate Target under "Targets"
3. Select "Capabilities" which is next to "General"
4. You can see an option for "Associated Domains" as given below.
5. Enable "Associated Domains". If you enable "Associated Domains" Xcode will ask you to login to the Developer account and it will be in sync with your AppId and Provisioning profile.
As mentioned in the above screenshot it will do two things while enabling "Associated Domains"
Add the Associated Domain entitlement to your entitlements file.
Add the associated Domain feature into your App ID.
If there is any issue in syncing your settings from Xcode and Developer account , please check the following checkbox is enabled.
Also make sure that your , In House and App Distributions provisioning profiles are properly updated and in sync.
Most the work will do by Xcode itself, we just needs to listen and understand.
Scenario 2: Your App don't need the "Associated-Domain" capability.
In this case , Please follow the Answer given by #Ciprian Rarau. Its well explained.
As other stated in ERROR ITMS-90164/90046: Invalid Code Signing Entitlements I was able to solve the issue by performing Clean build.
For the record, I was getting error code ITMS-90164.
Was getting: "The executable was signed with invalid entitlements"
messages
Searching with Google gave some useful hints, but the ^ message did
not stop
Went to: Xcode > Window > Devices
Then: At the lower left-hand corner of the Devices Window I selected
the "Show the device console" button
Starting from the button of the log I scanned the information and
found the problem and fixed it in a short amount of time
In my case it involved com.apple.developer.associated-domains
entitlements, and I needed to keep associated-domains
I will use the device console in the future whenever there are device error messages, what a time saver
Solved the problem in a short amount of time
BTW, THANK YOU all for your help
How do I delete old App IDs?
How do you make the iOS Team Provisioning Profile select a specific App ID?
Additional: Can anyone explain you need to code sign 4 times with the selected profile when Distributing for Ad-Hoc Deployment?
As far as I'm aware, there is currently no way to delete App ID's.
I use Simon Whitaker's plug-in for Chrome, which allows you to have a little more control over your App IDs and how they appear.
It might be worth checking out:
https://github.com/simonwhitaker/app-id-sanity/
-EDIT-
Just realised it works with Safari too.
-EDIT2-
Regarding your follow up, in the provisioning portal, after choosing to create a new App ID, you can select the App ID you want from a list:
Once you've completed it and downloaded it, drop it into the Xcode organiser and then select it from the Code signing section of the Build Settings of your Xcode project: