> OK, I think I am still a bit confused about this. It sounds like you are> saying that there is no way for the phone and watch to share a keychain with> accessGroup.>Yes, that's correct.> This would seem to imply that the user would have to log into each the> watch and the phone separately for the same app, that seems wrong.>Yes, that's correct. The phone and watch apps can now be completelyindependant entities with their own login credentials. You can leverage thephone app to improve the onboard-ing process for the watch app, butfundamentally they are independant devices with their own data stores.> However, I don't see any other way to securely do this if the keychain> can't be shared. Am I missing something? Sorry for the confusion....>You'll need to build your own authentication infrastructure here. My firstpass advice would be to have your phone app log into your service and generateyour authentication token to use for future communication (the same way mostmodern