Iframe Requirements {#tms-iframe-mapping}
=========================================

This section describes the required credentials and field mappings for your iframe.

Token Requestor --- Token Service Provider Iframe Credentials
-------------------------------------------------------------

You must use Token Requestor --- Token Service Provider (TR-TSP) keys to communicate with the Visa Token Service (VTS) iframe. You can use these keys to create the session information for VTS and Passkey Service. For information on iframes and the Visa Token Service SDK, you must contact your account manager.

> IMPORTANT
> The API key values for the apikey credential will expire in September 2027.

|  Credential   |                        Value                        | Environment |
|---------------|-----------------------------------------------------|-------------|
| apikey        | `7FHE5LL5WUC6Y2B0TXJA21B552D9gwg-qst7xs6t7q93wnpO0` | Test        |
| apikey        | `5FYESOMP3P07E36BKCGM216UNY5DdJido3x8fJ2h43gpXeK4g` | Production  |
| externalAppId | `CybsSuperProfileTMS`                               | Test        |
| externalAppId | `CybsSuperProfileTMS`                               | Production  |
[TR-TSP Iframe Credentials]

`TMS` Iframe Mapping
--------------------

When you send tokenized card authentication requests with `TMS`, the fields in your `<iframe>` element must be mapped correctly to the corresponding `TMS` and Visa Token Service fields. This table lists the correct `TMS` to Visa Token Service field mappings.

|                  `TMS` Field                   |   Visa Token Service Iframe Field    |
|------------------------------------------------|--------------------------------------|
| action                                         | type                                 |
| authenticatedIdentities.data                   | fidoResponse.fidoBlob                |
| authenticatedIdentities.id                     | fidoResponse.identifier              |
| authenticatedIdentities.relyingPartyId         | fidoResponse.rpID                    |
| authenticationContext.endpoint                 | authenticationContext.endpoint       |
| authenticationContext.id                       | authenticationContext.identifier     |
| authenticationContext.payload                  | authenticationContext.payload        |
| authenticationContext.platformType             | authenticationContext.platformType   |
| deviceInformation.httpAcceptContent            | browserData.browserHeader            |
| deviceInformation.httpBrowserColorDepth        | browserData.browserColorDepth        |
| deviceInformation.httpBrowserJavaEnabled       | browserData.browserJavaEnabled       |
| deviceInformation.httpBrowserJavaScriptEnabled | browserData.browserJavascriptEnabled |
| deviceInformation.httpBrowserLanguage          | browserData.browserLanguage          |
| deviceInformation.httpBrowserScreenHeight      | browserData.browserScreenHeight      |
| deviceInformation.httpBrowserScreenWidth       | browserData.browserScreenWidth       |
| deviceInformation.httpBrowserTimeDifference    | browserData.browserTimeZone          |
| deviceInformation.ipAddress                    | browserData.ipAddress                |
| deviceInformation.platformType                 | platformType                         |
| deviceInformation.userAgentBrowserValue        | browserData.userAgent                |
| sessionInformation.secureToken                 | sessionContext.secureToken           |
[`TMS` to Visa Token Service Field Mapping]