Tokenize a card

Overview

Tokenization creates a digital card from a funding card (FPAN) and provisions it in your digital wallet application.

During Tokenization, you typically:

• Capture card credentials.
• Check card eligibility.
• Present the terms and conditions (T&C) and record the end user’s acceptance.
• Digitize the card to create a digital card.
• Start secure provisioning to provision the digital card.
• Set the CDCVM method (when the digital card profile supports CDCVM).

Depending on your program, the terms and conditions (T&C) might not be required.

Capture card credentials

Card credentials can be provided by:

• Issuer backend. For example, when the digital wallet application is an issuer application.
• End user, via manual entry or camera scan. For example, when your digital wallet application is an open wallet (supporting cards from multiple issuers).

Treat FPAN, expiry date, and CSC as sensitive data. Never log them. Only send them in encrypted form.

Issuer Tokenization decision

During digitization, the issuer approves or declines Tokenization.

The issuer Tokenization decision can be:

• Green: Approve Tokenization without step-up authentication.
• Yellow: Approve Tokenization with step-up authentication (ID&V).
• Red: Decline Tokenization.

When the end user enters card details manually, the issuer Tokenization decision is typically Yellow and requires step-up authentication (ID&V).

User experiences

Green flow

Typical flow:

1. End user selects a card to digitize.
2. End user accepts the terms and conditions (optional).
3. Issuer backend approves Tokenization with no conditions.
4. The digital wallet application shows the digital card, ready to pay.

Green flow user experience.

Yellow flow

Typical flow:

1. The end user enters card information (manual entry or camera scan).
2. The end user accepts the terms and conditions.
3. The issuer backend approves Tokenization with conditions (step-up authentication required).
4. The digital wallet application displays the available ID&V methods.
5. The end user selects an ID&V method and completes ID&V.
6. After successful ID&V, the digital wallet application displays the digital card, ready to pay.

Implementation guides

Before you start

Make sure you have:

• Initialized the NFC Wallet SDK. See Initialize the NFC Wallet SDK.
• Configured push notifications and retrieved a push token. See Push notifications.
• Enrolled your wallet instance when required. See Enroll wallet.
• Validated device support for CDCVM (recommended). See Handle CDCVM.

Implement Tokenization

Implement these steps in order:

1. Check card eligibility Check whether the card is eligible and retrieve the applicable T&C.
2. Digitize a card Digitize the card to create a digital card (support green flow, yellow flow, or both).
3. Trigger provisioning Start a provisioning session to provision the digital card in the application.
4. Set CDCVM method Set the CDCVM method for the wallet instance when required by the digital card profile.