Manage identifiers

Enable app capabilities

You can view and enable capabilities for your App ID in Certificates, Identifiers & Profiles. Provisioning profiles that contain a modified App ID become invalid. You’ll need to regenerate the provisioning profiles that use that App ID.

Note:

  • In order to configure the capabilities an app uses, you need to add them to a target in the Xcode project.

Required role: Account Holder or Admin.

Enable a capability

  1. In Certificates, Identifiers & Profiles, click Identifiers in the sidebar.

  2. Select the App ID you want to update, then click Edit.

  3. Select the corresponding checkboxes to enable the app capabilities you want to allow.

  4. Click Save. If a warning dialog appears, click Confirm to finalize your changes.

Note:

  • The following app capabilities require additional steps: Sign in with Apple, App groups, Apple Pay, Data protection, iCloud, and push notifications.

  • Enabling a capability will affect provisioning profiles for all eligible platforms.

Enable app groups

  1. In Certificates, Identifiers & Profiles, enable the App Groups capability, then click Configure.

  2. In the App Groups table, select one or more groups you want to assign to the App ID, then click Continue.

  3. If there are no app groups, click Create App Group or learn more by visiting “Register an app group.”

  4. Review the changes, then click Assign.

  5. Click Done.

Alternatively, enable app groups in Xcode.

Note: App Groups for App Clips may only share data between the parent iOS app and the associated App Clip.

Enable Apple Pay

  1. In Certificates, Identifiers & Profiles, enable the Apple Pay capability, then click Edit.

  2. In the Merchant ID table, select the merchant identifiers you want to assign to the App ID, then click Continue.

    If there are no merchant identifiers, click Create Merchant ID or visit “Create a merchant identifier.” Then repeat these steps.

  3. Review the changes, then click Save.

  4. If a warning dialog appears, click Confirm to finalize your changes.

Alternatively, enable Apple Pay in Xcode.

Enable data protection

  1. In Certificates, Identifiers & Profiles, enable the Data Protection capability.

  2. Under Sharing and Permissions, select an option.

  3. Click Save. If a warning dialog appears, click Confirm to finalize your changes.

Enable iCloud

  1. In Certificates, Identifiers & Profiles, enable the iCloud capability.

  2. Under Compatibility, choose an Xcode version.

    If you’re not using CloudKit, you may choose “Compatible with Xcode 5”; otherwise, choose “Include CloudKit support.”

  3. Click Edit.

  4. In the table that appears, select the iCloud containers you want to assign to the App ID, then click Continue.

    If there are no container identifiers, click Create iCloud Container or visit Create an iCloud container. Then repeat these steps.

  5. Review the changes, then click Save.

  6. If a warning dialog appears, click Confirm to finalize your changes.

Alternatively, enable iCloud capabilities in Xcode.

Enable push notifications

If you communicate with the Apple Push Notification service (APNs) using a TLS certificate, push notifications aren’t fully enabled for development or production until you create a corresponding client TLS certificate. You can generate the required client TLS certificate when you enable push notifications for an App ID.

  1. In Certificates, Identifiers & Profiles, click Certificates in the side bar.

  2. Click the add button (+) on the top left to create a new certificate.

  3. Under Services, select the required APNs certificate, then click Continue.

  4. Click Choose File.

  5. In the dialog that appears, select the certificate request file (a file with a .certSigningRequest file extension), then click Choose.

  6. Click Continue.

  7. Click Download.

    The certificate file (a file with a .cer file extension) appears in your Downloads folder.

Alternatively, enable push notifications in Xcode, and generate an APNs client TLS certificate in the Certificates section where you choose the App ID.

Enable Sign in with Apple

  1. In Certificates, Identifiers & Profiles, enable the Sign in with Apple capability then click Configure.

  2. Choose whether your App ID should be configured as the primary or grouped with an existing primary App ID.

  3. Optionally provide a server-to-server notification endpoint URL. Only one URL can be provided per each Sign in with Apple app grouping and key.

  4. Click Save to record your configuration selection.

  5. Click Save on the top right to record the changes to your App ID.

Notes:

  • A server-to-server endpoint URL can only be registered on a primary App ID. The endpoint URL must be an absolute URI including the scheme, host, and path. Example: https://example.com/path/to/endpoint

  • Sign in with Apple must be enabled on the parent iOS App ID if you would like to use this feature on associated App Clips.

Enable WeatherKit

  1. In Certificates, Identifiers & Profiles, enable the WeatherKit capability and app service.

  2. Review the changes, then click Save.

  3. If a warning dialog appears, click Confirm to finalize your changes.