Issuer Features
Discover the benefits, enablement steps,
and resources to get started.
In-App Provisioning Extension
Expand app-driven provisioning —
from Apple Wallet or the Apple Pay payment sheet
Boost card enrollment by leveraging your iOS app to let cardholders easily and securely add eligible debit or credit cards directly from Apple Wallet or while checking out with Apple Pay across merchant apps. In‑App Provisioning Extension also helps drive card engagement by giving customers the ability to spend immediately, before their physical card arrives or if it is lost or stolen.
Cardholder experience
With authentication handled via the issuer’s In‑App Provisioning Extension, issuers stay in control of the provisioning process while offering cardholders two ways to add a card for Apple Pay.
From Apple Wallet
From the Apple Pay payment sheet
Fraud protection
Apple Pay is built with security and privacy at its core. Every step is designed to protect cardholders and reduce the impact of fraudulent activities for issuers.
- Issuer‑controlled authentication: In‑App Provisioning Extension keeps authentication firmly in the issuer’s hands, defining which verification methods made available by Apple may be used by cardholders when adding a card to Apple Pay.
- Secure APIs and device‑based tokenization: Provisioning cards with In‑App Provisioning Extension leverages Apple’s APIs, network tokenization, and fraud prevention processes. Apple Pay helps protect card numbers by storing the tokenized Device Primary Account Number (DPAN) inside iPhone’s Secure Element instead of the Funding Primary Account Number (FPAN).
- Cryptographic validation: Each provisioning request is accompanied by a nonce signature generated on the iPhone’s Secure Element, which is used to validate the provisioning request. The issuer then sends a cryptographic one‑time password (OTP), which is verified by the card network or payment network operator (PNO). After validation is complete, the issuer can complete authentication and approve the cardholder’s provisioning request.
Learn more about Apple’s Fraud Protection for Issuers.
Get started.
Enable In‑App Provisioning Extension
- Partner with us.
- Review the requirements:
- Existing In‑App Provisioning implementation
- Private entitlement (
com.apple.developer.payment-pass-provisioning) and Apple allow‑listing - Two extensions (UI and non‑UI)
- Xcode 15 or later
- Review Apple Pay’s In‑App Provisioning Extension documentation.
- Add App Extensions targets (UI and non‑UI) to the issuer’s build in Xcode. Develop UI extension based on existing issuer app login. Implement card eligibility logic for non‑UI extension.
- Update PNO metadata to include UI and non‑UI bundle IDs.
- Test the integration across devices and iOS versions using TestFlight.
- Certify the solution through an approved Apple certification lab in your region and deploy an updated version of the issuer app via the App Store.
- For questions about Apple Pay, contact Apple Pay Partner Support.
Explore the resources
Requirements and guidelines
Issuer Functional Requirements (IFR)*
Apple Pay Fraud Guidelines*
Documentation
*Available after Apple Pay partner onboarding
Frequently asked questions
In‑App Provisioning Extension provides the cardholder with more ways to add a payment card to Apple Pay through the issuer’s iOS app — from Apple Wallet or within the Apple Pay payment sheet.
By leveraging the issuer’s iOS app, In‑App Provisioning Extension allows issuers to offer easier provisioning, strengthen fraud protection, and encourage top‑of‑wallet consideration through prominent placements across Apple Wallet and the Apple Pay payment sheet.
Yes. Refer to the Issuer Functional Requirements (IFR) for details.
This feature can be enabled as part of a new or existing Apple Pay implementation. As with other Apple Pay features, Apple does not charge implementation fees for its enablement.
A cardholder has to open and log in to the issuer app on their iPhone at least once for Apple Wallet to detect the In‑App Provisioning Extension integration.
Yes, issuers need to implement In‑App Provisioning before implementing the In‑App Provisioning Extension feature.
Cardholders can add a card to Apple Pay via the In‑App Provisioning Extension feature in two ways: from within Apple Wallet, or within the Apple Pay payment sheet during the in‑app checkout process.
From Apple Wallet:
- A cardholder taps Add Card (+) in the top right corner of Apple Wallet.
- The next screen displayed in Apple Wallet will include a From Apps on Your iPhone section. Issuer apps that have implemented the In‑App Provisioning Extension feature will appear in a list under the From Apps on Your iPhone section, as long as the issuer app has at least one available payment card that is not currently in Apple Wallet.
- A cardholder can then tap on a listed issuer app to begin the provisioning experience. The extension will return the cardholder to Apple Wallet automatically once the provisioning process is complete.
During checkout: Cardholders tap the Apple Pay button, choose Select Payment Method, and then select from the list of enabled issuer apps to add a card to Apple Pay.
Cardholder devices must be running the following software in order to add a card using the In‑App Provisioning Extension feature:
- From Apple Wallet: iOS 14 or later
- From the Apple Pay payment sheet: iOS 26.0+, iPadOS 26.0+, Mac Catalyst 26.0+, or visionOS 26.0+ or later
No. All cards and payment networks are supported by the In‑App Provisioning and the In‑App Provisioning Extension features.
Yes. Issuers can choose from various verification methods (such as email, SMS, or call center support) to validate card ownership by the cardholders. This validation happens before issuers approve a card provisioning request. Learn more about Card Verification Methods here.
Data used during the provisioning flow — card art, the last four digits of the card number, and the card name — is not shared with Apple. It is passed directly to Apple Wallet for display purposes only and does not leave the device. Issuer-controlled verification and Apple Pay security measures, including end-to-end encryption, provide additional protection throughout the process.
Yes. Issuers can enhance the provisioning experience by enabling Multi-Device Provisioning, which allows cardholders to easily add their cards to all applicable devices logged in with the same Apple Account.
In‑App Provisioning Extension works with issuer‑supported payment reward cards (for example, a credit card linked to an airline for accruing miles), but not with general loyalty program cards (such as a grocery store rewards card).
Issuers should test In‑App Provisioning Extension by writing unit tests in Xcode and releasing beta builds of an iOS issuer app to TestFlight. Review the testing guidance for more information.
The integration length of In‑App Provisioning Extension will depend on the issuer’s development resources and skill set to manage Apple Wallet code. The issuer must also have access to the existing mobile banking app code base and have ability to test the app. In‑App Provisioning Extension by nature is a rebuild of the existing app to include the app extension. The new app must be installed and the user must login at least once to invoke the extension.
First implement In‑App Provisioning. Next, review In‑App Provisioning Extension documentation, add app extensions targets, develop UI extension, implement card eligibility logic, and update PNO metadata. Finally, test and certify. For more details, refer to the steps in Enable In‑App Provisioning Extension (above).
Issuers who have already implemented In‑App Provisioning successfully do not need to request additional entitlements for the In‑App Provisioning Extension feature.
The In‑App Provisioning Extension update, released with iOS 26, allows the Apple Pay payment sheet within a merchant app to automatically detect an issuer app on a cardholder’s device for direct card provisioning to Apple Pay — without the need to leave the shopping experience.
No, a cardholder doesn’t need to take additional steps to add a card through In‑App Provisioning Extension within the Apple Pay payment sheet. If a compatible issuer app is detected on their device, the extension will prompt them to add their card directly to Apple Pay without leaving the Apple Pay payment sheet.
Yes, cardholders will have control over which cards are added to Apple Pay, with prompts ensuring they consent to the setup of each card.
A cardholder can choose which card to add from any of the detected issuer apps. Prompts will guide the cardholder through this process.
Yes. Cardholders can select multiple cards from a specific issuer to add to Apple Pay. Each card will be provisioned in sequence.
Depending on iOS version and regional availability, a cardholder may be offered the ability to add a card to other devices where the card is not yet added.
A cardholder must open and log in to the issuer app on their iPhone at least once for Apple Wallet to detect the In‑App Provisioning Extension integration. Also check the PNO metadata and the identifiers of the extensions.
Join the Apple Pay platform.
Best practices
- Ensure In‑App Provisioning Extension is displayed by following the latency requirements outlined in the enablement steps (above).
- Keep the user authentication UI similar to the App Login UI, to ensure familiarity for cardholders.
- Display an error message that is similar to the App login behavior if a cardholder fails authentication.
- Follow the card art requirements (size and resolution) in the Issuer Functional Requirements (IFR).*
- Surface all eligible cards.
*Available after Apple Pay partner onboarding
More resources
Apple Pay Demo
in an interactive playground.
Apple Developer
build apps for Apple platforms.
Apple Business
presence across Apple apps.
-
In the US, Apple Pay is a service provided by Apple Payments Services LLC, a subsidiary of Apple Inc. Neither Apple Inc. nor Apple Payments Services LLC is a bank. Any card used in Apple Pay is offered by the card issuer.
-
Apple Pay is not available in all markets. View Apple Pay countries and regions.
-
Features are subject to change. Some features, applications, and services may not be available in all regions or all languages and may require specific hardware and software.