The issue was that, when Xcode creates the extension’s template, it added the latest iOS version as the baseline. So it didn’t get installed on my iPhone which was a patch version older. Changing that fixed it.

I was wondering, is there a way to print for how long the token is valid? or is it always 30 seconds after its creation?

Hi, I wonder if there is a similar functionality for macOS. I see that macOS account configurations (in this case, ExchangeWebServices) lack VPN UUID.