An In-House provisioning profile is only available to organizations enrolled in the Apple Developer Enterprise Program. It signs builds that any iPhone or iPad in your organization can install, no UDID list, no TestFlight, no App Store review. It is also the most easily abused profile type, and Apple actively revokes Enterprise certificates from teams that distribute consumer apps outside their own employees.
What's in it
- An Apple Distribution certificate issued by the Enterprise account.
- An explicit App ID. Wildcards are no longer accepted for new In-House profiles.
- Entitlements approved for your Enterprise team.
- An expiration date, after which the profile stops launching builds on any device.
How Apple decides to revoke
- App installed on devices not belonging to the company's employees (the most common trigger).
- Public distribution through TestFlight-style sideloading services.
- Apps that duplicate consumer App Store apps, especially clones of restricted categories like gambling.
- Any indication that the certificate was sold or rented to third parties.