Eons ago we were approved in the older entitlement method where we had to apply an Entitlement to our provisioning profile via a dropdown.
We'd basically attach "Local Push Provider (Dist)" to our profile. That broke in May of 2025 when our fastlane process could no longer automate the creation of a provisioning profile with that profile attached.
We learned the future was the capabilities so we submitted a request to migrate our Local Push Provider to a capability - https://developer.apple.com/contact/request/entitlement-migration-requests/
Meanwhile a new client wanted a white-labeled iteration of our app. So a new client requested the capability of Local Push via https://developer.apple.com/contact/request/local-push-connectivity and it worked in roughly 4 weeks. Their account now has "Network Extensions (additional values)" on the identifier which grants access to app-push-provider. Our build is fully automated - everything works.
So we waited on our migration request and after months passed, we submitted in October of 2025 a new entitlement request for Local Push as our submit to migrate went stale.
It never arrived again. So I started a case in 2026 roughly 6 months later - 102869206062.
After many escalations I've been told:
- I wanted to provide an update to you regarding your entitlement request. It appears that your entitlement no longer requires a request.
- The channel you’ve reached is actually set up to provide administrative support to Apple Developers and those enrolled in the Apple Developer Program
- I just wanted to follow-up with you and ask you to please request the Network Extensions Entitlement again (19627183)
It seems the overarching point is Network Extensions are no longer required for approval, but it seems app-push-provider (LocalPush) is.
I don't want a random forum post to be a support thread. So looking for clarity on 2 points.
- Can you obtain
app-push-provider(network extension) without Apple approval? - Is this doc out of date? https://developer.apple.com/documentation/networkextension/local-push-connectivity
To use the Local Push Connectivity API, your app must have the Network Extensions Entitlement with the app-push-provider value. Request this entitlement from the Entitlement Request Page. After you receive the entitlement, apply it to both your app target and your provider extension target.
tldr;
➜ Desktop security cms -D -i match_ClientApp.mobileprovision| plutil -p - | grep 'push'
0 => "app-push-provider"
➜ Desktop security cms -D -i match_OurApp.mobileprovision| plutil -p - | grep 'push'
➜ Desktop
