“A Summary of the WWDC26 Group Lab”

System Integrity ProtectionQuestion:Will disabling SIP be available as a choices .XML at install time for the 10.11 OS? If not, what mechanism will be provided for automatic disabling of SIP for use with automated imaging processes for machines?Pain point: Not every environment will be able to access Internet Recovery. At the same time, straight cloning of existing disks is problematic.Answer:SIP is always off in the Recovery environment and the Installer environment. While booted from those environments, you will be able to make changes to a boot disk which is otherwise protected by SIP.SIP-protected files will still appear as restricted when listed with ls's -O, but they can be renamed, moved, deleted or changed.There will be a command line tool to disable SIP in the Recovery environment, separate from the current GUI tool. The GUI tool is in fact going to disappear in favor of the command line tool. This change will likely appear in Developer Beta 2 or Beta 3; check the release notes.Question:The /System/L

Does the ability to create groups for external testflight users no longer exisit? I was able to do in last week, but it does not exist this week.

I am working on two applications that provide complementary functionality - one is a main app with authentication flow and the other handles additional functionalities within my service. I would like to publish these as separate apps on the App Store but allow them to share data through an App Group, specifically to enable sign-in state to carry across. The flow would be: Main app authenticates the user and saves an authentication token to the shared App Group container Second app launches and checks the container for this token. If present, it signs the user in automatically. In this way the Main app handles all login functionality which enables certain features in the other app(s) when logged in state is present. My questions are: Would this violate any App Store guidelines around app functionality distribution or data sharing? I intend to provide a technical rationale during review on why two apps are necessary. Would Apple allow such an implementation? What best practices should I follow

We want to switch our subscription to subscription group but we can't find any way to testUpgrade.Downgrade.Crossgrade.When we try to purchase a product from the same group we get a message (from sandbox) You're currently subscribed to this. with [OK] and [Manage] options.However the [Manage] option is not working on the sandbox.How can we test this? Is it only testable on live environment and not sandbox?Thanks

An Application Group with Identifier 'group.com.aaa.aaa.onesignal' is not available. Please enter a different string. How can I Fix this error? I need to add it in this format.

Has anybody noticed that there is a typo in the watchOS 2 beta 1 Last Week's Acitivity Summary notification. I have included a screenshot of the typo. This is actually kind of funny. https://www.dropbox.com/s/tu14f34olgx43yk/IMG_0462.jpg?dl=0

I just seen a discussion that had to do with App Groups. What’s the difference between App Groups and iCloud? Thanks, Dan Uff

We have a cross platform App available on Mac, iOS & soon tvOS. We are adding a new App Group to be used by this app. We also have a as yet unpublished future Mac Catalyst app that will need access to the App Group. The Apple docs suggest prefixing app groups on Mac with the team ID but not on other platforms. We would like to avoid prefixing with the team ID because: my understanding is that Mac Catalyst apps don't use the team ID and we would like to support that use case to communicate between our current cross platform app and the future catalyst app. Having a single code base but different group container IDs per platform means a bunch of extra conditional logic in the project we would rather avoid. So with that context our aim is to have an app group that is named consistently across platforms and meets sandboxing requirements for App Store distribution. However when developing using the non-team prefixed app group name on macOS Sequioa I see the

We've got an in-house Swift macOS desktop app with a FileProvider extension, which has been working fine on various machines up through Sonoma (and still does). We've just installed it on a Sequoia machine, and on it the FileProvider extension has lost the ability to access the shared app group. It can neither log to the Group Containers folder under ~/Library, nor access the pipe to the main app. The group name is formatted as group.XXXXXXXXXX.com.orgname.appname in both targets. I'm not sure why it combines the iOS and macOS conventions, with both the group prefix and the teamIdentifier one -- it was first built some time before the point in 2025 when macOS supported iOS-style groups -- but again, it's been working. For the record, The provisioning profile for EMPFileProvider has the App Groups capability enabled, and the App Groups capability is present in both build targets in Xcode. The existing group identifier is registered on the

Is there a way to transfer an app goup from one developer account to another?We moved an app and to be able to read the old data on users devices we need access to the old app group, right?Would love is someone could help me out with this, thanks.

Hi, Can we hide a subscription group from a specific set of users? For example, I have two types of users saying type A and B. Also, we have two auto-renewable subscriptions belonging to different groups saying Investors Premium and General Premium. Can we hide the subscriptions belonging to the group Investors Premium from general users and subscriptions belonging to the group General Premium from investors?