Network Token Provisioning for Partners

This workflow shows the process of network token provisioning for partners.

Figure:

Network Token Provisioning for Partners: Tokenizing PAN
Tokenizing PAN
  1. The customer enters their card data and sends the PAN to the merchant.
  2. The merchant sends the PAN to
    Token Management Service
    .
  3. Token Management Service
     generates a
    TMS
     token and synchronously provisions a network token from the card brand.
  4. Token Management Service
     sends the merchant the
    TMS
     token, expiration date, suffix, and payment account reference (PAR).
  5. The merchant stores the
    TMS
     token ID and network token flag and sends the customer the masked card number.

Figure:

Network Token Provisioning for Partners: Cryptogram Retrieval
Cryptogram Retrieval
  1. The merchant requests the payment credentials using a
    TMS
     token from
    Token Management Service
    .
  2. Token Management Service
    looks up the network token and sends the token metadata to the card brand.
  3. The card brand generates the cryptogram and sends it to
    Token Management Service
    .
  4. Token Management Service
     sends the network token and cryptogram to the merchant.
  5. The merchant uses the network token along with the cryptogram to start the authorization.

Figure:

Network Token Provisioning for Partners: PAR Retrieval
PAR Retrieval
  1. The merchant retrieves
    TMS
     token and sends it to
    Token Management Service
    .
  2. Token Management Service
     looks up the token and retrieves the PAR.
  3. Token Management Service
     sends the PAR to the merchant.
  4. The merchant stores the PAR.