Tokenisation Service Guide

This guide describes the parties and processes involved in implementing a tokenisation service and how Thredd supports tokenisation. It explains how to set up and process tokens on the Thredd system.

Topics covered: ClosedHow tokenisation works, token provisioning, push provisioning, Token Requestors, Visa Cloud Token Framework, Transactions on a token, Implementing a tokenisation project, Thredd tokenisation configuration options, Token provisioning message flows, managing your program, device scoring, EHI tokenisation fields, Visa and Mastercard tokenisation messages

Current Version

Click the links below to view the current version, available in both Online (HTML) and PDF format.

Online (HTML)

PDF

What's Changed?

Version

Tokenisation Service Guide

Updated the Tokenisation Configuration page, including updating guidance on Payment Token groups, removing the Visa/Mastercard Rules section, updating references on the Mastercard Portal, and adding new device binding logic.

New Click to Pay section added.

2.2

Older Versions

Older versions are available in PDF format only.

File Name

What's Changed?

Version

Tokenisation Service Guide 2.1

Updated the example request body for Apple In-App Provisioning. See Implementing In App Provisioning.

Added Orange Flow section to How Tokenisation Works page.

New Appendix H: Card Status Codes — lists card status changes that trigger calls to Token Service Provider (MDES/VDEP).

Corrections to JSON tokenisation examples: ACN, TCN and TEN messages should have Txn_Type = J. ACN messages should have an MTID = 0120, while TCN and TEN messages have an MTID = 0620. See Appendix C: EHI Tokenisation Fields.

Rewrite to section Managing your Program, introducing new use cases and details of how to implement using either SOAP API or REST API. New Appendix G: Realtime Token Status Change.

Revision to FAQ on using Thredd's In-app provisioning service.

Added a new section with important information on Configuring Token Sub-Bin Ranges.

Added section on implementing In-App provisioning. Updated Managing your Programme and How Tokenisation Works to support these changes.

Updated Managing your Programme to update Mastercard update file frequency.

Updated the company address.

2.1

Tokenisation Service Guide 2.0

Added examples of EHI 34000, 35000 and 36000 tokenisation messages in JSON format. See Appendix C: EHI Tokenisation Fields.

Updates to content to align with taxonomy updates on our Documentation Portal.

Added details of using Thred's REST-based Cards API to manage tokenised cards.

Correction to text in Scenario 1 in Appendix E: Mastercard Tokenisation Messages. The EHI ProcCode received in Green Flow should be "350000 (TCN)".

Updated Smart Client screen shot in Appendix B: View the OTP on Smart Client

Added details to clarify that the EHI field PaymentToken_creatorStatus can contain “ “ or be empty when no value has been provided. See Appendix C: EHI Tokenisation Fields.

New response codes table and details added to the section Changing the status of a Payment Token.

2.0

Tokenisation Service Guide 1.9

Correction to the list of Visa documents that must be completed when implementing a tokenisation project through Visa. See Implementing a Tokenisation Project.

Added a note to clarify that the Token Device Management web service (Ws_Token_Device_Management) is for use on the Visa (VDEP) service only. See Managing your Programme.

Guide rebrand to new company name and brand identity.

1.9

Tokenisation Service Guide 1.8

Revised wording around Apple Pay Orange flow support. See Appendix F: Apple Pay Tokens.

Added details of the real-time API for Mastercard clients. See Real-time Token Status Change (Mastercard) and FPAN Reissue and Replacement

Updated the Copyright Statement.

1.8

Tokenisation Service Guide 1.7

Correction: In the Visa Tokenisation yellow flow, the final message PaymentToken_creatorStatus status should be "I" when provisioning was unsuccessful.

Added a new section on Updating the Card Profile Linked to a Token.

New Payment-Token Transactions setting enables you to decide whether the Thredd card status should be checked or ignored during transaction authorisations. See Thredd Configuration Options.

1.7

Tokenisation Service Guide 1.6

New online version of the Tokenisation Service Guide is now available. Includes details of Mastercard Real-Time Token to Token and PAN Lifecycle Management. See Real-time Token Status Change (Mastercard).

1.6

Tokenisation Service Guide 1.5

Addition of Digiseq as a third-party push provisioning service provider.

Updates to description of use of the DPAN over FPAN setting.

1.5

Tokenisation Service Guide 1.4

Added information on the DPAN over FPAN Status option.

Added a note to clarify usage of cards status codes for temporary blocks.

Added details of MRCHTOKEN and Apple Pay Orange flow. Added a new Appendix on ApplePay Tokens. Added details of enabling Manual Key Entry in the Card Usage Groups used by tokenised cards.

1.4

Tokenisation Service Guide 1.3

New advice on Status Codes to use for Card Blocks.

Updates to the diagram and description in Section 7.1.4 Message flow for Visa Token Provisioning (Yellow Flow)

1.3

Tokenisation Service Guide 1.2

New Appendix E Mastercard Tokenisation Messages.

1.2

Tokenisation Service Guide 1.1

Changes to section 6.2 Thredd Configuration Options, and updates to Figures 9 and 10.

1.1

Tokenisation Service Guide 1.0

First version.

1.0