App to App Redirection with universal link

Question

Abdullah_Althobetey OP

Created 2w

Replies 1

Boosts 0

Participants 2

Dear Team,

We are trying to implement universal linking app to app redirection for our banking application.

We have configured the associated domains in our application as can be seen below in the info plist of our IPA

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "https://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>application-identifier</key><string>2TK5X82C47.com.bankalbilad.NewRMB</string><key>aps-environment</key><string>production</string><key>beta-reports-active</key><true/><key>com.apple.developer.associated-domains</key><array><string>applinks:rob-auth.bankalbilad.com</string></array><key>com.apple.developer.icloud-container-identifiers</key><array></array><key>com.apple.developer.pass-type-identifiers</key><array><string>2TK5X82C47.*</string></array><key>com.apple.developer.payment-pass-provisioning</key><true/><key>com.apple.developer.team-identifier</key><string>2TK5X82C47</string><key>com.apple.developer.ubiquity-kvstore-identifier</key><string>2TK5X82C47.com.bankalbilad.NewRMB</string><key>com.apple.security.application-groups</key><array><string>group.com.NewRMB</string></array><key>get-task-allow</key><false/><key>keychain-access-groups</key><array><string>2TK5X82C47.com.bankalbilad.NewRMB.keychain</string></array></dict></plist>

We are unable to see the call made from IOS reaching the endpoint which is https://rob-auth.bankalbilad.com/.well-known/apple-app-site-association

We performed curl of our domain and get the below error.

curl -i https://app-site-association.cdn-apple.com/a/v1/rob-auth.bankalbilad.com
HTTP/1.1 404 Not Found
Server: AppleHttpServer/2caa77a6bc2e755fca0e0f63e4d67e53390f9184
Date: Thu, 14 May 2026 11:42:16 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 10
Apple-Failure-Details: {"cause":"Connection failed"}
Apple-Failure-Reason: SWCERR00305 Network error
Apple-From: https://rob-auth.bankalbilad.com/.well-known/apple-app-site-association
Apple-Try-Direct: false
Cache-Control: max-age=3600,public
Vary: Accept-Encoding
X-B3-TraceId: bfafe8fa87a6828f
Strict-Transport-Security: max-age=31536000
Age: 21
Via: https/1.1 defra2-vp-vst-017.ts.apple.com (acdn/302.16436), https/1.1 defra2-vp-vfe-006.ts.apple.com (acdn/302.16436), http/1.1 defra2-xdc-mx-023.ts.apple.com (acdn/302.16436), http/1.1 defra1-edge-fx-060.ts.apple.com (acdn/302.16436)
X-Cache: hit-stale, hit-stale, hit-fresh, hit-fresh
CDNUUID: 6fb88181-f58a-4059-a770-26a43e1f32d0-16071773867
Expires: Thu, 14 May 2026 11:42:26 GMT
Connection: keep-alive

Not Found

curl -v https://app-site-association.cdn-apple.com/a/v1/rob-auth.bankalbilad.com
* Host app-site-association.cdn-apple.com:443 was resolved.
* IPv6: (none)
* IPv4: 17.253.15.159, 17.253.63.204, 17.253.63.201, 17.253.29.140, 17.253.29.162, 17.253.39.133, 17.253.39.145, 17.253.15.162
*   Trying 17.253.15.159:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* ALPN: server accepted http/1.1
* Connected to app-site-association.cdn-apple.com (17.253.15.159) port 443
* using HTTP/1.x
> GET /a/v1/rob-auth.bankalbilad.com HTTP/1.1
> Host: app-site-association.cdn-apple.com
> User-Agent: curl/8.13.0
> Accept: */*
>
< HTTP/1.1 404 Not Found
< Server: AppleHttpServer/2caa77a6bc2e755fca0e0f63e4d67e53390f9184
< Date: Thu, 14 May 2026 11:42:16 GMT
< Content-Type: text/plain; charset=utf-8
< Content-Length: 10
< Apple-Failure-Details: {"cause":"Connection failed"}
< Apple-Failure-Reason: SWCERR00305 Network error
< Apple-From: https://rob-auth.bankalbilad.com/.well-known/apple-app-site-association
< Apple-Try-Direct: false
< Cache-Control: max-age=3600,public
< Vary: Accept-Encoding
< X-B3-TraceId: bfafe8fa87a6828f
< Strict-Transport-Security: max-age=31536000
< Age: 33
< Via: https/1.1 defra2-vp-vst-017.ts.apple.com (acdn/302.16436), https/1.1 defra2-vp-vfe-006.ts.apple.com (acdn/302.16436), http/1.1 defra2-xdc-mx-023.ts.apple.com (acdn/302.16436), http/1.1 defra1-edge-fx-058.ts.apple.com (acdn/302.16436)
< X-Cache: hit-stale, hit-stale, hit-fresh, hit-fresh
< CDNUUID: 77d7de5e-f827-44b1-bbf5-ae2d8e36e104-16053052830
< Expires: Thu, 14 May 2026 11:42:26 GMT
< Connection: keep-alive

We also don't see any blocks in our firewall or in WAF or any network level Load balancers.

Can you please help in troubleshooting the same.

Answer 1

DTS Engineer OP

Apple

2w

Thank you for the post.

Please check your SSL certificate as seems to have intermediate SSL errors.

curl -v https://rob-auth.bankalbilad.com/.well-known/apple-app-site-association

After you fix the SSL certificate you should read the Tech Note TN3155: Debugging universal links | Apple Developer Documentation#Use-universal-links-on-your-site

{"applinks":{"details":[{"appIDs":["2TK5X82C47.com.bankalbilad.NewRMB"],"components":[{"/":"/*","comment":""}]}]}}

As your AASA format is not correct neither. Look for an example of the AASA file.

If you go over the troubleshooting and still have issues, I'd like you to submit a code-level support request so we can discuss this further privately. When you create the request, indicate that you were referred by Albert Pascual at Apple and make sure to include a link to this thread.

Thanks

Albert   Worldwide Developer Relations.