com.apple.developer.payment-pass-provisioning missing in TestFlight build despite provisioning profile having it

Question

Created 3d

Replies 6

Boosts 0

Participants 2

In Xcode, under Signing & Capabilities (Release) for our bundle ID the selected provisioning profile does include the entitlement: com.apple.developer.payment-pass-provisioning

However, when we upload a new build to TestFlight, the Build Metadata → Entitlements section for the same bundle ID does not include com.apple.developer.payment-pass-provisioning. Because of this, PKAddPaymentPassViewController does not open in TestFlight builds. This suggests that while the entitlement is enabled for the App ID and visible in Xcode, it may not yet be propagated to App Store Connect’s signing service for TestFlight/App Store builds.

Please Note: The Wallet Entitlements team had confirmed that they had granted entitlements for our team and the apple IDs

Xcode : 26.0.1 Profile being used: Distribution Profile Screenshot 2026-02-04 at 8.36.28 AM.png

Boost

Answer 1

DTS Engineer OP

Apple

3d

Which Team ID is this? 9________X? Or 2________7?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 2

anantcred OP

2d

Hi eskimo,

Team ID is 2 _ _ _ _ _ _ _ _ 7 and Apple ID(s) for corresponding production : 6_ _ _ _ _ _ _ _ 8

Let me know if you need anything else. Thanks.

0

Answer 3

DTS Engineer OP

Apple

2d

Thanks for the confirmation.

My view of Team ID 2________7 indicates that it has access to In-App Provisioning capability (authorising the use of com.apple.developer.payment-pass-provisioning) for App Store distribution, and that’s the relevant thing for TestFlight. Please try this:

In Certificates, Identifiers, and Profiles > Identifiers, navigate to your App ID and check that the In-App Provisioning capability is enabled for your app’s App ID.
Certificates, Identifiers, and Profiles > Profiles, create a new Distribution > App Store Connect profile for that App ID.
Download that profile.

And dump its contents:

% security cms -D -i /path/to/profile | plutil -p -

Does the profile include com.apple.developer.payment-pass-provisioning in its entitlements allowlist?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

1

Answer 4

anantcred OP

2d

Hi Quinn,

I followed your steps and the profile dump is as below. It has "com.apple.developer.payment-pass-provisioning" => 1 :

{ "AppIDName" => "XC com s_ _ _ _ _ _ d" "ApplicationIdentifierPrefix" => [ 0 => "2 _ _ _ _ _ _ 7" ] "CreationDate" => 2026-02-05 15:09:44 +0000 "DER-Encoded-Profile" => {length = 3857, bytes = 0x30820f0d 06092a86 4886f70d 010702a0 ... 73b0c49b eb3ffec9 } "DeveloperCertificates" => [ 0 => {length = 1487, bytes = 0x308205cb 308204b3 a0030201 02021007 ... b474d99f 14730350 } ] "Entitlements" => { "application-identifier" => "2 _ _ _ _ _ _ 7.com.s _ _ _ _ _ _ d" "aps-environment" => "production" "beta-reports-active" => 1 "com.apple.developer.associated-domains" => "" "com.apple.developer.in-app-payments" => [ 0 => "merchant.com.s_ _ _ _ _ _ d" ] "com.apple.developer.networking.slicing.appcategory" => [ 0 => "communication-9000" 1 => "games-6014" 2 => "streaming-9001" ] "com.apple.developer.networking.slicing.trafficcategory" => [ 0 => "defaultslice-1" 1 => "video-2" 2 => "background-3" 3 => "voice-4" 4 => "callsignaling-5" 5 => "responsivedata-6" 6 => "avstreaming-7" 7 => "responsiveav-8" ] "com.apple.developer.payment-pass-provisioning" => 1 "com.apple.developer.team-identifier" => "2 _ _ _ _ _ _ _ 7" "get-task-allow" => 0 "keychain-access-groups" => [ 0 => "2_ _ _ _ _ _ _ _7." 1 => "com.apple.token" ] } "ExpirationDate" => 2027-01-14 03:49:44 +0000 "IsXcodeManaged" => 0 "Name" => "S_ _ _ _ _ _ d Distribution Profile with Wallet" "Platform" => [ 0 => "iOS" 1 => "xrOS" 2 => "visionOS" ] "PPQCheck" => 0 "TeamIdentifier" => [ 0 => "2 _ _ _ _ _ _ 7" ] "TeamName" => "S _ _ _ C_ _ D LLC" "TimeToLive" => 342 "UUID" => "7 _ _ d88-f496-4218-87e4-10fd6 _ _ _ _ _6" "Version" => 1 }

But still the app I uploaded again on testflight with above profile - 1.0.17 (20250205100) has missing entitlement: com.apple.developer.payment-pass-provisioning

Entitlements (under Build Metadata on testflight) S_ _ _ _ C_ D.app/S _ _ _ C_ D application-identifier: 2 _ _ _ _ _ _ 7.com.sirencard beta-reports-active: true get-task-allow: false com.apple.developer.associated-domains: ( "webcredentials:securewebview.s _ _ _ _ _ _ d.com", "applinks:secu_ _ _ _ _ _ _ w.s_ _ _ _ _ _ _ d.com", "applinks:apply.s_ _ _ _ _ _ _ d.com", "applinks:securewebview-rc-prod.s_ _ _ _ _ _ _ d.com", "applinks:go.s_ _ _ _ _ _ _ d.com" ) com.apple.developer.in-app-payments: ( "merchant.com.s_ _ _ _ _ _ _ d" ) com.apple.developer.team-identifier: 2_ _ _ _ _ _ _ _7 aps-environment: production

Why would that happen ? Appreciate your help in resolving this issue. Please let me know if you need anything else.

0

Answer 5

DTS Engineer OP

Apple

1d

Hmmm, that’s really hard to read )-: Please repost it using code blocks for the preformatted text. See tip 5 in Quinn’s Top Ten DevForums Tips for info on how to do that.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 6

anantcred OP

11h

Hi Quinn,

Profile dump with preformed text for your reference is as below. It has "com.apple.developer.payment-pass-provisioning" => 1:

anantpatel@BLR-WS-004 Downloads % security cms -D -i Si_ _ _c_ _d_Distribution_Profile_with_Wallet.mobileprovision| plutil -p -
{
  "AppIDName" => "XC com s_ _ _ _ _ _ _ _d”
  "ApplicationIdentifierPrefix" => [
    0 => "2_ _ _ _ _ _ _ _7"
  ]
  "CreationDate" => 2026-02-05 15:09:44 +0000
  "DER-Encoded-Profile" => {length = 3857, bytes = 0x30820f0d 06092a86 4886f70d 010702a0 ... 73b0c49b eb3ffec9 }
  "DeveloperCertificates" => [
    0 => {length = 1487, bytes = 0x308205cb 308204b3 a0030201 02021007 ... b474d99f 14730350 }
  ]
  "Entitlements" => {
    "application-identifier" => “2_ _ _ _ _ _ _ _7.com.si_ _ _c_ _d"
    "aps-environment" => "production"
    "beta-reports-active" => 1
    "com.apple.developer.associated-domains" => "*"
    "com.apple.developer.in-app-payments" => [
      0 => "merchant.com.si_ _ _c_ _d"
    ]
    "com.apple.developer.networking.slicing.appcategory" => [
      0 => "communication-9000"
      1 => "games-6014"
      2 => "streaming-9001"
    ]
    "com.apple.developer.networking.slicing.trafficcategory" => [
      0 => "defaultslice-1"
      1 => "video-2"
      2 => "background-3"
      3 => "voice-4"
      4 => "callsignaling-5"
      5 => "responsivedata-6"
      6 => "avstreaming-7"
      7 => "responsiveav-8"
    ]
    "com.apple.developer.payment-pass-provisioning" => 1
    "com.apple.developer.team-identifier" => "2_ _ _ _ _ _ _ _7"
    "get-task-allow" => 0
    "keychain-access-groups" => [
      0 => "2_ _ _ _ _ _ _ _7.*"
      1 => "com.apple.token"
    ]
  }
  "ExpirationDate" => 2027-01-14 03:49:44 +0000
  "IsXcodeManaged" => 0
  "Name" => “Si_ _ _c_ _d Distribution Profile with Wallet"
  "Platform" => [
    0 => "iOS"
    1 => "xrOS"
    2 => "visionOS"
  ]
  "PPQCheck" => 0
  "TeamIdentifier" => [
    0 => "2_ _ _ _ _ _ _ _7"
  ]
  "TeamName" => “S_ _ _ _ C_ _ _D LLC"
  "TimeToLive" => 342
  "UUID" => "7a926d88-f496-4218-87e4-10fd62f0d926"
  "Version" => 1
}

But still the app I uploaded on testflight with above profile - 1.0.17 (20250205100) has missing entitlement: com.apple.developer.payment-pass-provisioning

Entitlements under testflight on appstoreconnect for 1.0.17 (20250205100) are uploaded in the image (with team and other Ids redacted for security):

S_ _ _ _ _ _ _D.app/S_ _ _ _ _ _D
    application-identifier: 2_ _ _ _ _ _ _ _7.com.si_ _ _c_ _d
    beta-reports-active: true
    get-task-allow: false
    com.apple.developer.associated-domains: ( "webcredentials:securewebview.si_ _ _ _ _ _d.com", "applinks:securewebview.si_ _ _c_ _d.com", "applinks:apply.si_ _ _c_ _d.com", "applinks:securewebview-rc-prod.si_ _ _c_ _d.com", "applinks:go.si_ _ _c_ _d.com" )si_ _ _ _ _ _d
    com.apple.developer.in-app-payments: ( "merchant.com.si_ _ _ _ _ _d" )
    com.apple.developer.team-identifier: 2_ _ _ _ _ _ _ _7
    aps-environment: production

Please let me know if you need anything more from my end in order to help resolve this issue. Thanks.

Screenshot 2026-02-07 at 10.47.20 AM.png

0