I’m trying to distribute a macOS application outside the Mac App Store using Developer ID signing and notarization.
The Sensitive Content Analysis capability is enabled for this App ID in Certificates, Identifiers & Profiles. My application requires the following entitlement: com.apple.developer.sensitivecontentanalysis.client
However, when I create and download a new Developer ID provisioning profile for this App ID, the generated profile does not contain this entitlement. I have regenerated and downloaded the profile after confirming that Sensitive Content Analysis is enabled. I also decoded the newly generated .provisionprofile to inspect its entitlements. It contains the application identifier, team identifier, and keychain access groups, but does not contain com.apple.developer.sensitivecontentanalysis.client.
As a result, Xcode will not export the Developer ID build because the application requests the Sensitive Content Analysis entitlement but the provisioning profile does not authorize it.
Does anyone know the answers to these questions:
- Is com.apple.developer.sensitivecontentanalysis.client supported for macOS applications distributed outside the Mac App Store using Developer ID?
- If it is supported, why is the entitlement not being included in newly generated Developer ID provisioning profiles for this App ID?
- Is there an additional approval, agreement, or configuration required for this entitlement to be included in a Developer ID profile?
Sensitive Content Analysis is a required feature of this application, so removing the entitlement is not an option for our distribution build.