When should I use a wildcard App ID?
Q: When should I use a wildcard App ID vs. an explicit App ID?
A: You should use a Wildcard App ID for all apps and app targets that do not enable app-specific capabilities. However, because Xcode 8 offers to manage signing automatically, it prevents the need to create App IDs manually. Therefore, the explanations in this document are only useful to developers who find a need to opt out of Xcode's automatic signing.
If you do find a need to manually create an App ID, read on to learn about the difference between the two types. The first type is called a Wildcard App ID.
The wildcard portion of the string entered for Bundle ID is the asterisk character. All Wildcard App IDs must end with an asterisk, and an associated provisioning profile can be used to code sign any app whose Bundle ID is compatible with the wildcard string, such as:
... and so on.
The second type of App ID is called an Explicit App ID.
The Bundle ID specified for an Explicit App ID cannot contain a wildcard asterisk character, and its associated provisioning profile can be used to code sign one app only - the app that declares this bundle Identifier as its own.
How do I choose one or the other?
Because an App ID specifies a unique configuration of entitlements, Wildcard App IDs are for use with code signing all apps that do not enable app-specific capabilities. Those capabilities are pictured as follows:
Even when using a Wildcard App ID, remember to remove the asterisk and fully-qualify the string when entering the Bundle Identifier field in your Xcode project:
Using a Wildcard App ID is convenient for all apps that do not use capabilities, as they can reuse the same provisioning profile for code signing. For example, if App1's targets do not enable capabilities, they may reuse the provisioning profile associated to the Wildcard App ID in Figure 2 to code sign all targets.
In this example, App1 has four targets whose Bundle IDs are:
Since Explicit App IDs are for use with a single Bundle ID, it can be used to code sign only one app or app target.
Document Revision History
New document that describes the differences between wildcard and explicit App IDs