I work on an app that uses 2FA as part of the user login. The 2FA success or failure is handled by the app’s func application(_ app: UIApplication, open url: URL, options: [UIApplication.OpenURLOptionsKey : Any] = [:]) -> Bool implementation in AppDelegate.
Prior to iOS 17.2 this process worked fine, but when running on 17.2 that method is only called if the app is in the foreground. If the app is backgrounded, such as when the user is entering info in their 2FA app, that method is never called. Instead a message is printed to the console containing the following error:
Failed to open URL [2FA callback url]. The request to open [app bundle
id] failed. The request was denied by service delegate
(SBMainWorkspace) for reason: Security ("Application [app bundle id]
is neither visible nor entitled, so may not perform un-trusted user
actions").}
As I said, this exact code worked in 17.1 without that error. The 2FA callback URL is listed in URL Types in Project Info. Is there some step I need to make the app entitled to receive the 2FA callback?




