Associated Domains Entitlement

The associated domains for specific services, such as shared web credentials, universal links, and App Clips.

Discussion

This key specifies a list of domains for each enabled service. Add an associated domain to the list in the following format:

<service>:<fully qualified domain>

Services include:

webcredentials: Use this service for shared web credentials.
applinks: Use this service for universal links.
activitycontinuation: Use this service for Handoff.
appclips: Use this service for an App Clip.

If you use a private web server, which is unreachable from the public internet, while developing your app, enable the alternate mode feature to bypass the CDN and connect directly to your server. To do this, add a query string to your associated domains entitlement, as shown in the following example:

<service>:<fully qualified domain>?mode=<alternate mode>

Where alternate mode is one of the following:

developer: Specifies that only devices in developer mode can access the domain. In this mode, you can use any valid SSL certificate on your web server, including a certificate that the system doesn’t trust. Make sure you don’t expose your users to security issues, such as machine-in-the-middle attacks. As an additional precaution, only apps that you sign with a development profile can use developer mode, and users must opt-in on any device they use.
managed: Specifies that only devices using a mobile device management (MDM) profile can access the domain. This mode requires consent from the MDM administrator.
developer+managed: Specifies that only devices that are in both developer and managed modes can access the domain.

To enable associated domains, add the Associated Domains capability to your target in Xcode. For more information, see Adding capabilities to your app.

Associated Domains Entitlement

Discussion

See Also

Related Documentation

Networking