Invalid Entitlement: Unknown ID

Question

ScottyBlades OP

Created 3d

Replies 4

Boosts 0

Participants 2

I am attempting to configure appclips, but I am getting this error in App Store Connect.

I created an app clips target in my project, I have checked the XCAsset files and it is included when archived and pushed to App Store Connect.
In both my parent and my app clips target I've added the associated domains capabilities, with the following associated same domains for both targets:

appclips:akin-server-side-staging.onrender.com appclips:akin-server-side.onrender.com applinks:akin-server-side-staging.onrender.com applinks:akin-server-side.onrender.com

My server is configured to serve the following json at all permutations of the staging endpoints and prod endpoints for both well known and aasa without well known. Here is one of them:

https://akin-server-side.onrender.com/.well-known/apple-app-site-association

Here is the JSON it is returning:

{"applinks":{"details":[{"appIDs":["8PJ28P9ZZ8.com.ElevatedUnderdogs.akin1"],"components":[{"\/":"\/appClips\/referral\/venueToUser\/*"}]}]},"appclips":{"apps":["8PJ28P9ZZ8.com.ElevatedUnderdogs.akin1.Clip"]}}

And yet I'm still getting Invalid Entitlement: Unknown ID in the store.

Boost

Answer 1

DTS Engineer OP

Apple

3d

@ScottyBlades

Thanks for the post and sorry for the delay. Please check your server settings as your server does not accept a user agent and that's required for AASA files:

 curl -I -A "Albert-Bot/1.0" https://akin-server-side.onrender.com/.well-known/apple-app-site-association
HTTP/2 200 
date: Wed, 18 Mar 2026 17:08:53 GMT
content-type: application/json; charset=utf-8
cf-ray: 9de5d789480c7e25-SJC
rndr-id: e8574d04-55fd-4b1d
vary: Accept-Encoding
x-render-origin-server: Render
cf-cache-status: DYNAMIC
server: cloudflare
alt-svc: h3=":443"; ma=86400

Everything explained in this well written Tech Note: TN3155: Debugging universal links | Apple Developer Documentation#Host-and-verify-your-AASA

Albert Pascual   Worldwide Developer Relations.

0

Answer 2

DTS Engineer OP

Apple

3d

Moving out of comment:

Yes, bad paste, and you can remove -i if you want and just do:

 curl -A "User-Agent: MyAwesome-Bot/*"  https://akin-server-side.onrender.com/.well-known/apple-app-site-association
{"appclips":{"apps":["8PJ28P9ZZ8.com.ElevatedUnderdogs.akin1.Clip"]},"applinks":{"details":[{"appIDs":["8PJ28P9ZZ8.com.ElevatedUnderdogs.akin1","8PJ28P9ZZ8.com.ElevatedUnderdogs.akin1.Clip"],"components":[{"\/":"\/appClips\/referral\/venueToUser\/*"}]}]}}%

I see the app clip is coming, is it now sync with the Apple servers?

Albert Pascual   Worldwide Developer Relations.

0

Answer 3

DTS Engineer OP

Apple

2d

Thanks for that, always hard to read XML as Xcode presents that pretty good. It looks completely clean and the com.apple.developer.associated-domains only contain keys that are allowed

https://developer.apple.com/documentation/BundleResources/Entitlements/com.apple.developer.associated-domains

Will be good to go over that: https://developer.apple.com/documentation/bundleresources/entitlements/com.apple.developer.associated-appclip-app-identifiers

So the string should start with applinks: and the section for app domains should only contain the app clips: https://developer.apple.com/documentation/xcode/supporting-associated-domains.

I'm going to post a way for us to connect and go over your project to review the project. Probably we will need to go over Xcode.

I'd like you to submit a code-level support request so we can discuss this further privately. When you create the request, indicate that you were referred by me at Apple and make sure to include a link to this thread.

Albert Pascual   Worldwide Developer Relations.

1

Answer 4

DTS Engineer OP

Apple

2d

@ScottyBlades Please select next week and put your availability on the email so I can send you an invite, thanks

0