Set up a JWT Provider

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Configure a JWT Provider to enable secure token-based authentication for Card Data Security by setting up signing configurations and claim values. This provider generates JSON Web Tokens that authenticate requests to the tokenizer service using credentials from your tokenizer service JSON file.

    Before you begin

    Role required: admin

    This task needs the following:
    Table 1. Set up requirements
    Card network (Visa, Mastercard)
    • A JWT key created for Card Data Security. See Set up a JWT key for more information.
    • The credentials JSON file obtained from the tokenizer service.
    Verifi A JWT key created for Card Data Security. See Set up a JWT key for more information.

    See Set up Verifi integration for a list of required values.

    Procedure

    1. Navigate to All > System OAuth > JWT Providers.
    2. Select New.
    3. For card network integrations, enter the following field values.
      FieldValue
      Name <Name of the JWT provider>
      Expiry interval <Life time of the token (in seconds)>
      Signing configuration <The JWT key created for Card Data Security>
      For a Verifi integration, enter the following field values.
      FieldValue
      Name <Name of the JWT provider>
      Expiry interval <Token expiry duration in seconds, as provided by Verifi>
      Signing configuration <The Verifi JWT key created for Card Data Security>
    4. Select Save.
    5. Do the following in the Standard Claims related list.
      OptionDescription
      Card network (Visa, Mastercard)
      1. In the aud record, update the Claim Value with the tokenURI value from the tokenizer service credentials JSON file.
      2. In the iss record, update the Claim Value with the clientID value from the tokenizer service credentials JSON file.
      3. In the sub record, update the Claim Value with a descriptive name.
      Verifi In the iss record, update the value to the Issuer ID provided by Verifi.
    6. For card network integrations, insert a new row in the Custom Claims related list and enter the following field values.
      FieldValue
      Claim Name key
      Claim Value Type string
      Claim Value <The keyID value from the tokenizer service credentials JSON file>
    7. Select Update.

    Result

    A JWT provider record is created with updated claim values.

    What to do next

    For card network integrations, see Set up an OAuth Provider.

    For Verifi integrations, see Set up the Connection & Credential records.