AutoFill extension loading woes

Question

Created 2h

Replies 2

Boosts 0

Participants 2

I'm trying to diagnose some issues with my AutoFill credential provider not loading on macOS. As far as I can tell I have all the entitlements and provisioning profiles correct, and

ASSettingsHelper.requestToTurnOnCredentialProviderExtension()

returns true with the Credential Provider showing up enabled in System Settings. However all other attempts to call into AuthenticationServices fail, and

ASCredentialIdentityStore.shared.getState()

always returns false for

state.isEnabled

Looking at the logs I don't see anything that stands out but I am not sure I've got the correct filter on the logs. I see discovery taking place

2026-05-29 08:43:09.389967-0700 0xd7d00    Default     0x83c0b1             26490  0    CredentialProviderExtensionHelper: (PlugInKit) [com.apple.PlugInKit:discovery] [d 88616305-672E-4143-81A6-832522BCD790] <PKHost:0x7e6c24900> Beginning discovery for flags: 0, point: com.apple.authentication-services-credential-provider-ui
2026-05-29 08:43:09.390070-0700 0xd7d00    Info        0x83c0b1             26490  0    CredentialProviderExtensionHelper: (PlugInKit) [com.apple.PlugInKit:discovery] [d 88616305-672E-4143-81A6-832522BCD790] <PKHost:0x7e6c24900> Query: {
    "LS:ExtensionPlatforms" =     (
        1,
        6,
        2
    );
    NSExtensionPointName = "com.apple.authentication-services-credential-provider-ui";
    NSUserElection = 1;
}
2026-05-29 08:43:09.392893-0700 0xd79ee    Debug       0x83c0b1             487    0    pkd: (PlugInKit) [com.apple.PlugInKit:sandbox] issued file extension for [/Applications/test.app/Contents/PlugIns/testIDCredentialProvider.appex]
2026-05-29 08:43:09.392936-0700 0xd79ee    Debug       0x83c0b1             487    0    pkd: (PlugInKit) [com.apple.PlugInKit:ls] [u C85BFC1E-25E1-4917-A1D8-0123013482EE] [com.myapp.test.App.testid-credential-provider(7.35)] info [CFBundleIdentifier] => [com.myapp.test.App.testid-credential-provider]
2026-05-29 08:43:09.392947-0700 0xd79ee    Debug       0x83c0b1             487    0    pkd: (PlugInKit) [com.apple.PlugInKit:sandbox] issued mach extension for [com.myapp.test.App.testid-credential-provider]

And I see it being discovered correctly:

2026-05-29 08:43:09.394535-0700 0xd7d00    Default     0x83c0b2             26490  0    CredentialProviderExtensionHelper: (ExtensionFoundation) [com.apple.extensionkit:NSExtension] discovered extensions: attributes {
    "LS:ExtensionPlatforms" =     (
        1,
        6,
        2
    );
    NSExtensionPointName = "com.apple.authentication-services-credential-provider-ui";
    NSUserElection = 1;
}, extensionSet {(
    <EXConcreteExtension: 0x7e71b41c0> {id = com.myapp.test.App.testid-credential-provider}
)}

I don't see any errors related to security or provisioning that I can tell.

Any tricks I can use to see why I can't use my Credential Provider?

Answer 1

boilerla220 OP

2h

This is all being done on macOS 26.5, but I should quantify and say I am using a virtual machine which I am wondering if it's part of the problem.

Answer 2

DTS Engineer OP

Apple

29m

Interesting post about extension for autofill please with CredentialProviderExtensionHelper confirm that the system's extension subsystem sees and registers your extension correctly. I haven’t work in those extensions is such a long time. So I hope that an engineer from that team jumps into that thread and give you better suggestions than me to look for the possible issue here.

However, first thing I would recommend to look as the fact that ASCredentialIdentityStore.shared.getState() returns false (and other AuthenticationServices calls fail) indicates that is rejecting your authorization to interact with the credential store?

ASCredentialIdentityStore.shared.getState provides an Error? If state.isEnabled is false when it shouldn't be, the error object is almost never nil. Print the error.debugDescription.

I believe your Main App and your Credential Provider Extension must have the com.apple.developer.authentication-services.autofill-credential-provider entitlement set. If the Main App is missing this entitlement, the system will allow the user to enable the extension in System Settings. https://developer.apple.com/documentation/bundleresources/entitlements/com.apple.developer.authentication-services.autofill-credential-provider

Look for errors like rejecting client, missing entitlement, or signature validation failed originating from AuthenticationServicesAgent in your sysdiagnose. macOS is very strict about the relationship between the host app and the extension.

Albert   Worldwide Developer Relations.