I am getting almost the same issue about ElectronTeamID, did anyone knows the proper steps for this

[roshan00123]

my error is -
Could not automatically determine ElectronTeamID from identity:

[mmaietta]

https://github.com/electron/osx-sign

To run an app codesigned for distribution locally after codesigning, you may manually add ElectronTeamID in your Info.plist and com.apple.security.application-groups in the entitlements file, and set preAutoEntitlements: false for @electron/osx-sign to avoid this extra bit. Note that "certain features are only allowed across apps whose team-identifier value match"

You just need to add key-value ElectronTeamID to your Info.plist

[roshan00123]

@mmaietta Thanks for replying. We are not using osx-sing and we did not have Info.plist as of now. We tried by adding ElectronTeamID in the entitlements.mac.plist file still it was giving the same error.
Are you sure, mentioning ElectronTeamID in the Info.plist will solve the error? or need further modifications?

[helloworld2025]

the same issue with me

[helloworld2025]

if I add com.apple.security.app-sandbox in .plist, Could not automatically determine ElectronTeamID from identity

[ganeshmohanty]

@mmaietta same issue here as well.
If I add com.apple.security.app-sandbox in entitlements.mac.plist the build fails with the same error

Could not automatically determine ElectronTeamID from identity

entitlements.mac.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>com.apple.security.app-sandbox</key><true/>  
    <key>com.apple.security.cs.allow-jit</key>
    <true/>
    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
    <true/>
    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
    <true/>
  </dict>
</plist>

Note: I am using 3rd Party Mac Developer Application certificate to sign the app and the build target is set to MAS

[mmaietta]

I think you guys may have missed this part of the quote you may manually add ElectronTeamID in your Info.plist

Anyways, what version of electron-builder are you on? This issue seems a lot like this one: #7995

[roshan00123]

Currently we are using "electron-builder": "^25.1.8" version.
Where should we create the Info.plist file?
Or do we need to reference it to the electron-builder.yml file?
It generates the Info.plist file after building the application along with the MAS build. In that Info.plist file ElectronTeamID property is not present.

[helloworld2025]

@mmaietta same issue here as well. If I add com.apple.security.app-sandbox in entitlements.mac.plist the build fails with the same error

Could not automatically determine ElectronTeamID from identity

entitlements.mac.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>com.apple.security.app-sandbox</key><true/>  
    <key>com.apple.security.cs.allow-jit</key>
    <true/>
    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
    <true/>
    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
    <true/>
  </dict>
</plist>

Note: I am using 3rd Party Mac Developer Application certificate to sign the app and the build target is set to MAS

It does not work with me , still Could not automatically determine ElectronTeamID from identity

[roshan00123]

Currently we are using "electron-builder": "^25.1.8" version. Where should we create the Info.plist file? Or do we need to reference it to the electron-builder.yml file? It generates the Info.plist file after building the application along with the MAS build. In that Info.plist file ElectronTeamID property is not present.

@mmaietta could you please look at this? It's very urgent for us.

[mmaietta]

Add ElectronTeamId: <your team ID> to mac.extendInfo property https://www.electron.build/app-builder-lib.interface.macconfiguration#extendinfo

[roshan00123]

Add ElectronTeamId: <your team ID> to mac.extendInfo property https://www.electron.build/app-builder-lib.interface.macconfiguration#extendinfo

Yep we have tried this as well, and this giving the same error.

[mmaietta]

You're going to need to share much more debug info than you've done so far. Even just the various attempts you've tried and your electron-builder config would have been helpful.

Looking at osx-sign code: https://github.com/electron/osx-sign/blob/757fa60716efd7310006153c55172fdcec46452a/src/util-entitlements.ts#L17-L25

/**
 * This function returns a promise completing the entitlements automation: The
 * process includes checking in `Info.plist` for `ElectronTeamID` or setting
 * parsed value from identity, and checking in entitlements file for
 * `com.apple.security.application-groups` or inserting new into array. A
 * temporary entitlements file may be created to replace the input for any
 * changes introduced.
 */
export async function preAutoEntitlements (

Which is called here: https://github.com/electron/osx-sign/blob/757fa60716efd7310006153c55172fdcec46452a/src/sign.ts#L215-L226

So unless you have preAutoEntitlements: false, I'm not confident that ElectronTeamId is in your Info.plist. For instance, if you're targeting mas target, then it's mas.extendInfo

[roshan00123]

You're going to need to share much more debug info than you've done so far. Even just the various attempts you've tried and your electron-builder config would have been helpful.

Looking at osx-sign code: https://github.com/electron/osx-sign/blob/757fa60716efd7310006153c55172fdcec46452a/src/util-entitlements.ts#L17-L25

/**
 * This function returns a promise completing the entitlements automation: The
 * process includes checking in `Info.plist` for `ElectronTeamID` or setting
 * parsed value from identity, and checking in entitlements file for
 * `com.apple.security.application-groups` or inserting new into array. A
 * temporary entitlements file may be created to replace the input for any
 * changes introduced.
 */
export async function preAutoEntitlements (

Which is called here: https://github.com/electron/osx-sign/blob/757fa60716efd7310006153c55172fdcec46452a/src/sign.ts#L215-L226

So unless you have preAutoEntitlements: false, I'm not confident that ElectronTeamId is in your Info.plist. For instance, if you're targeting mas target, then it's mas.extendInfo

this is our electron-builder.yml file

productName: name
directories:
  buildResources: build

files:
  - '!**/.vscode/*'
  - '!src/*'
  - '!electron.vite.config.{js,ts,mjs,cjs}'
  - '!{.eslintignore,.eslintrc.cjs,.prettierignore,.prettierrc.yaml,dev-app-update.yml,CHANGELOG.md,README.md}'
  - '!{.env,.env.*,.npmrc,pnpm-lock.yaml}'

asarUnpack:
  - resources/**
win:
  executableName: name
  extraFiles:
  - from: "publish/win"
    to: "resources/publish/win"
    filter:
      - "**/*"
nsis:
  artifactName: ${name}-${version}-setup.${ext}
  shortcutName: ${productName}
  uninstallDisplayName: ${productName}
  createDesktopShortcut: always
  deleteAppDataOnUninstall: true
mac:
  target:
    # - dmg
    # - pkg
    - mas
    # - zip 
  # identity: "Name (teamID)"
  entitlementsInherit: build/entitlements.mac.inherit.plist
  extendInfo:
    - NSCameraUsageDescription: Application requests access to the device's camera.
    - NSMicrophoneUsageDescription: Application requests access to the device's microphone.
    - NSDocumentsFolderUsageDescription: Application requests access to the user's Documents folder.
    - NSDownloadsFolderUsageDescription: Application requests access to the user's Downloads folder.
  notarize: false
  hardenedRuntime: true
  gatekeeperAssess: false
  entitlements: build/entitlements.mac.plist
  extraFiles:
  - from: "publish/mac"
    to: "resources/publish/mac"
    filter:
      - "**/*"
dmg:
  artifactName: ${name}-${version}.${ext}
pkg:
  artifactName: ${name}-${version}.${ext}
mas:
  preAutoEntitlements: false
  minimumSystemVersion: "12.0"
  # extendInfo:
  #   - ElectronTeamID: teamID
linux:
  target:
    - AppImage
    - snap
    - deb
  maintainer: electronjs.org
  category: Utility
appImage:
  artifactName: ${name}-${version}.${ext}
npmRebuild: false

we tried giving ElectronTeamID here and it generated the build successfully, but while delivering through transporter it thrown as error as -
Validation failed (409) Invalid Code Signing Entitlements. Your application bundle's signature contains code signing entitlements that are not supported on macOS. Specifically, key 'ElectronTeamID' in 'io.name.test.pkg/Payload/Appname.app/Contents/MacOS/App' is not supported. (ID: 7981e302-xxxx-4518-xxxx-4c09c192c043)

[roshan00123]

You're going to need to share much more debug info than you've done so far. Even just the various attempts you've tried and your electron-builder config would have been helpful.
Looking at osx-sign code: https://github.com/electron/osx-sign/blob/757fa60716efd7310006153c55172fdcec46452a/src/util-entitlements.ts#L17-L25

/**
 * This function returns a promise completing the entitlements automation: The
 * process includes checking in `Info.plist` for `ElectronTeamID` or setting
 * parsed value from identity, and checking in entitlements file for
 * `com.apple.security.application-groups` or inserting new into array. A
 * temporary entitlements file may be created to replace the input for any
 * changes introduced.
 */
export async function preAutoEntitlements (

Which is called here: https://github.com/electron/osx-sign/blob/757fa60716efd7310006153c55172fdcec46452a/src/sign.ts#L215-L226
So unless you have preAutoEntitlements: false, I'm not confident that ElectronTeamId is in your Info.plist. For instance, if you're targeting mas target, then it's mas.extendInfo

this is our electron-builder.yml file

productName: name
directories:
  buildResources: build

files:
  - '!**/.vscode/*'
  - '!src/*'
  - '!electron.vite.config.{js,ts,mjs,cjs}'
  - '!{.eslintignore,.eslintrc.cjs,.prettierignore,.prettierrc.yaml,dev-app-update.yml,CHANGELOG.md,README.md}'
  - '!{.env,.env.*,.npmrc,pnpm-lock.yaml}'

asarUnpack:
  - resources/**
win:
  executableName: name
  extraFiles:
  - from: "publish/win"
    to: "resources/publish/win"
    filter:
      - "**/*"
nsis:
  artifactName: ${name}-${version}-setup.${ext}
  shortcutName: ${productName}
  uninstallDisplayName: ${productName}
  createDesktopShortcut: always
  deleteAppDataOnUninstall: true
mac:
  target:
    # - dmg
    # - pkg
    - mas
    # - zip 
  # identity: "Name (teamID)"
  entitlementsInherit: build/entitlements.mac.inherit.plist
  extendInfo:
    - NSCameraUsageDescription: Application requests access to the device's camera.
    - NSMicrophoneUsageDescription: Application requests access to the device's microphone.
    - NSDocumentsFolderUsageDescription: Application requests access to the user's Documents folder.
    - NSDownloadsFolderUsageDescription: Application requests access to the user's Downloads folder.
  notarize: false
  hardenedRuntime: true
  gatekeeperAssess: false
  entitlements: build/entitlements.mac.plist
  extraFiles:
  - from: "publish/mac"
    to: "resources/publish/mac"
    filter:
      - "**/*"
dmg:
  artifactName: ${name}-${version}.${ext}
pkg:
  artifactName: ${name}-${version}.${ext}
mas:
  preAutoEntitlements: false
  minimumSystemVersion: "12.0"
  # extendInfo:
  #   - ElectronTeamID: teamID
linux:
  target:
    - AppImage
    - snap
    - deb
  maintainer: electronjs.org
  category: Utility
appImage:
  artifactName: ${name}-${version}.${ext}
npmRebuild: false

we tried giving ElectronTeamID here and it generated the build successfully, but while delivering through transporter it thrown as error as - Validation failed (409) Invalid Code Signing Entitlements. Your application bundle's signature contains code signing entitlements that are not supported on macOS. Specifically, key 'ElectronTeamID' in 'io.name.test.pkg/Payload/Appname.app/Contents/MacOS/App' is not supported. (ID: 7981e302-xxxx-4518-xxxx-4c09c192c043)

@mmaietta could you please address this issue if possible?