Get Started

Instant issuance lets you produce a physical card instantly in a branch or kiosk.

Use D1 to orchestrate personalization and return production status to your issuer backend.

What you build

You integrate:

• Your issuer backend, to request card production using the D1 API.

• The Thales Instant Issuance Agent, running in your branch or kiosk environment.

• A personalization station identifier (persoStation), to route production to the right station.

End-to-end flow (high level)

1. The end user requests a card (for example, from the issuer application or at a kiosk).

2. Your issuer backend requests production using the Physical issuance API with distributionChannel=INSTANT.

3. The D1 backend prepares production data.

4. The D1 backend routes production data to the Thales Instant Issuance Agent.

5. D1 sends production status updates to your issuer backend (recommended).

Before you start

• Complete D1 onboarding.

• Configure card products and personalization templates.

• Install and register the Thales Instant Issuance Agent in your branch or kiosk environment.

• Register at least one personalization station and get its persoStation identifier.

• Integrate your issuer backend with the Physical issuance API.

• Set up inbound connectivity and authorization to call D1 APIs.

• Set up outbound connectivity to receive production status notifications.

Integrate instant issuance

1

Set up connectivity and authorization

Configure mutual TLS and OAuth 2.0 access tokens for calls from your issuer backend to the D1 backend.

• Set up TLS mutual authentication

• Get OAuth2.0 access token

2

Encrypt sensitive data

Encrypt card data fields using JWE before sending them to D1.

• Encrypt sensitive data

3

Request card production

Call the Produce physical card operation.

Set distributionChannel to INSTANT.

Provide the instant issuance required fields:

• persoStation: the personalization station identifier

• encryptedData: JWE-encrypted card data fields

• services: issuance options configured during D1 onboarding

• paymentApplication: EMV configuration reference configured during D1 onboarding

persoStation is defined during D1 onboarding.

Use it to route production to a specific branch or kiosk station.

• Physical Issuance API

Example (key parameters only):

{
  "distributionChannel": "INSTANT",
  "persoStation": "KIOSK-PS-101"
}

4

Receive production status updates

Handle production status updates in your issuer backend.

Configure backend notifications for the physical card issuance status update events (for example, Produce).

• Integrate D1 Notification

Next steps

• Implement Instant Issuance

• Card order

• D1 API reference