in my app i added keychain access group in capabilities, then i checked the entitlement file, the value of keychain-access-groups is 94KV3E626X.com.frank.keychainAccessGroup I turned on Automatically manage signing in xcode everything looks fine. i tested in simulator and device in debug environment, and it works fine. I could shared data across main app and app extension... but after I build the app thru pipeline and use adhoc environment and get the .app file, i run this command in terminal: codesign --display --entitlements :- myapp.app it shows the value of keychain-access-groups is NOT 94KV3E626X.com.frank.keychainAccessGroup that is defined before. it is replaced by the app id 94KV3E626X.com.frank.development.adhoc. Does anyone know why the value of keychain-access-groups is replaced? it supposes to be the one i defined in Xcode, which is 94KV3E626X.com.frank.keychainAccessGroup