Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Set up a JWT Provider

Configure a JWT Provider to enable secure token-based authentication for Card Data Security by setting up signing configurations and claim values. This provider generates JSON Web Tokens that authenticate requests to the tokenizer service using credentials from your tokenizer service JSON file.

Before you begin

Role required: admin

This task needs the following:

Card network \(Visa, Mastercard\)- A JWT key created for Card Data Security. See Set up a JWT key for more information. - The credentials JSON file obtained from the tokenizer service.
VerifiA JWT key created for Card Data Security. See Set up a JWT key for more information.See Set up Verifi integration for a list of required values.

Procedure

  1. Navigate to All > System OAuth > JWT Providers.

  2. Select New.

  3. For card network integrations, enter the following field values.

    FieldValue
    Name<Name of the JWT provider>
    Expiry interval<Life time of the token (in seconds)>
    Signing configuration<The JWT key created for Card Data Security>

    For a Verifi integration, enter the following field values.

    FieldValue
    Name<Name of the JWT provider>
    Expiry interval<Token expiry duration in seconds, as provided by Verifi>
    Signing configuration<The Verifi JWT key created for Card Data Security>
  4. Select Save.

  5. Do the following in the Standard Claims related list.

Card network (Visa, Mastercard)
  1. In the aud record, update the Claim Value with the tokenURI value from the tokenizer service credentials JSON file.
  2. In the iss record, update the Claim Value with the clientID value from the tokenizer service credentials JSON file.
  3. In the sub record, update the Claim Value with a descriptive name.
VerifiIn the `iss` record, update the value to the Issuer ID provided by Verifi.
  1. For card network integrations, insert a new row in the Custom Claims related list and enter the following field values.

    FieldValue
    Claim Namekey
    Claim Value Typestring
    Claim Value<The keyID value from the tokenizer service credentials JSON file>
  2. Select Update.

Result

A JWT provider record is created with updated claim values.

What to do next

For card network integrations, see Set up an OAuth Provider.

For Verifi integrations, see Set up the Connection & Credential records.