Issuer Features

Explore Apple Pay features for issuers.
Discover the benefits, enablement steps,
and resources to get started.
Required

In-App Provisioning Extension

Expand app-driven provisioning —
from Apple Wallet or the Apple Pay payment sheet

Boost card enrollment by leveraging your iOS app to let cardholders easily and securely add eligible debit or credit cards directly from Apple Wallet or while checking out with Apple Pay across merchant apps. In‑App Provisioning Extension also helps drive card engagement by giving customers the ability to spend immediately, before their physical card arrives or if it is lost or stolen.

Cardholder experience

With authentication handled via the issuer’s In‑App Provisioning Extension, issuers stay in control of the provisioning process while offering cardholders two ways to add a card for Apple Pay.

From Apple Wallet

From the Apple Pay payment sheet

Fraud protection

Apple Pay is built with security and privacy at its core. Every step is designed to protect cardholders and reduce the impact of fraudulent activities for issuers.

  • Issuer‑controlled authentication: In‑App Provisioning Extension keeps authentication firmly in the issuer’s hands, defining which verification methods made available by Apple may be used by cardholders when adding a card to Apple Pay.
  • Secure APIs and device‑based tokenization: Provisioning cards with In‑App Provisioning Extension leverages Apple’s APIs, network tokenization, and fraud prevention processes. Apple Pay helps protect card numbers by storing the tokenized Device Primary Account Number (DPAN) inside iPhone’s Secure Element instead of the Funding Primary Account Number (FPAN).
  • Cryptographic validation: Each provisioning request is accompanied by a nonce signature generated on the iPhone’s Secure Element, which is used to validate the provisioning request. The issuer then sends a cryptographic one‑time password (OTP), which is verified by the card network or payment network operator (PNO). After validation is complete, the issuer can complete authentication and approve the cardholder’s provisioning request.

 

Learn more about Apple’s Fraud Protection for Issuers.

Get started.

Enable In‑App Provisioning Extension

  1. Partner with us.
  2. Review the requirements:
    • Existing In‑App Provisioning implementation
    • Private entitlement (com.apple.developer.payment-pass-provisioning) and Apple allow‑listing
    • Two extensions (UI and non‑UI)
    • Xcode 15 or later
  3. Review Apple Pay’s In‑App Provisioning Extension documentation.
  4. Add App Extensions targets (UI and non‑UI) to the issuer’s build in Xcode. Develop UI extension based on existing issuer app login. Implement card eligibility logic for non‑UI extension.
  5. Update PNO metadata to include UI and non‑UI bundle IDs.
  6. Test the integration across devices and iOS versions using TestFlight.
  7. Certify the solution through an approved Apple certification lab in your region and deploy an updated version of the issuer app via the App Store.
  8. For questions about Apple Pay, contact Apple Pay Partner Support.

Follow best practices 

Explore the resources

Requirements and guidelines

Documentation

Technical overview

Implementation overview

Wallet API

 

*Available after Apple Pay partner onboarding

Frequently asked questions

What is the In-App Provisioning Extension feature?

In‑App Provisioning Extension provides the cardholder with more ways to add a payment card to Apple Pay through the issuer’s iOS app — from Apple Wallet or within the Apple Pay payment sheet.

What are the benefits of the In-App Provisioning Extension feature for issuers?

By leveraging the issuer’s iOS app, In‑App Provisioning Extension allows issuers to offer easier provisioning, strengthen fraud protection, and encourage top‑of‑wallet consideration through prominent placements across Apple Wallet and the Apple Pay payment sheet.

Is the In-App Provisioning Extension feature a requirement for all issuers that have enabled Apple Pay?

Yes. Refer to the Issuer Functional Requirements (IFR) for details.

Is there an implementation fee for this feature?

This feature can be enabled as part of a new or existing Apple Pay implementation. As with other Apple Pay features, Apple does not charge implementation fees for its enablement.

How does Apple Wallet determine if an issuer has implemented the In-App Provisioning Extension feature into their iOS app?

A cardholder has to open and log in to the issuer app on their iPhone at least once for Apple Wallet to detect the In‑App Provisioning Extension integration.

Do issuers need to implement In-App Provisioning for the In-App Provisioning Extension feature to work?

Yes, issuers need to implement In‑App Provisioning before implementing the In‑App Provisioning Extension feature.

What does a cardholder need to do in order to provision a card through the In-App Provisioning Extension feature?

Cardholders can add a card to Apple Pay via the In‑App Provisioning Extension feature in two ways: from within Apple Wallet, or within the Apple Pay payment sheet during the in‑app checkout process.

From Apple Wallet:

  1. A cardholder taps Add Card (+) in the top right corner of Apple Wallet.
  2. The next screen displayed in Apple Wallet will include a From Apps on Your iPhone section. Issuer apps that have implemented the In‑App Provisioning Extension feature will appear in a list under the From Apps on Your iPhone section, as long as the issuer app has at least one available payment card that is not currently in Apple Wallet.
  3. A cardholder can then tap on a listed issuer app to begin the provisioning experience. The extension will return the cardholder to Apple Wallet automatically once the provisioning process is complete.

During checkout: Cardholders tap the Apple Pay button, choose Select Payment Method, and then select from the list of enabled issuer apps to add a card to Apple Pay.

What are the system requirements for the In-App Provisioning Extension feature?

Cardholder devices must be running the following software in order to add a card using the In‑App Provisioning Extension feature:

  • From Apple Wallet: iOS 14 or later
  • From the Apple Pay payment sheet: iOS 26.0+, iPadOS 26.0+, Mac Catalyst 26.0+, or visionOS 26.0+ or later
Are there specific card types or regions where the In-App Provisioning Extension feature is not supported?

No. All cards and payment networks are supported by the In‑App Provisioning and the In‑App Provisioning Extension features.

Can issuers request additional verification from cardholders during the provisioning process?

Yes. Issuers can choose from various verification methods (such as email, SMS, or call center support) to validate card ownership by the cardholders. This validation happens before issuers approve a card provisioning request. Learn more about Card Verification Methods here.

Is data shared with Apple when using the In-App Provisioning Extension feature? How is data protected?

Data used during the provisioning flow — card art, the last four digits of the card number, and the card name — is not shared with Apple. It is passed directly to Apple Wallet for display purposes only and does not leave the device. Issuer-controlled verification and Apple Pay security measures, including end-to-end encryption, provide additional protection throughout the process.

Can cardholders provision their card to more than one device, after the initial provisioning request is approved?

Yes. Issuers can enhance the provisioning experience by enabling Multi-Device Provisioning, which allows cardholders to easily add their cards to all applicable devices logged in with the same Apple Account.

How does the In-App Provisioning Extension feature work with existing loyalty programs or rewards cards?

In‑App Provisioning Extension works with issuer‑supported payment reward cards (for example, a credit card linked to an airline for accruing miles), but not with general loyalty program cards (such as a grocery store rewards card).

What kind of testing should issuers perform to ensure a smooth user experience when integrating In-App Provisioning Extension?

Issuers should test In‑App Provisioning Extension by writing unit tests in Xcode and releasing beta builds of an iOS issuer app to TestFlight. Review the testing guidance for more information.

What is the average duration for an In-App Provisioning Extension integration?

The integration length of In‑App Provisioning Extension will depend on the issuer’s development resources and skill set to manage Apple Wallet code. The issuer must also have access to the existing mobile banking app code base and have ability to test the app. In‑App Provisioning Extension by nature is a rebuild of the existing app to include the app extension. The new app must be installed and the user must login at least once to invoke the extension.

How do I get started with adding the In-App Provisioning Extension feature into my iOS app?

First implement In‑App Provisioning. Next, review In‑App Provisioning Extension documentation, add app extensions targets, develop UI extension, implement card eligibility logic, and update PNO metadata. Finally, test and certify. For more details, refer to the steps in Enable In‑App Provisioning Extension (above).

Do issuers need to request any entitlements for the In-App Provisioning Extension feature?

Issuers who have already implemented In‑App Provisioning successfully do not need to request additional entitlements for the In‑App Provisioning Extension feature.

Does the In-App Provisioning Extension feature work in merchant apps?

The In‑App Provisioning Extension update, released with iOS 26, allows the Apple Pay payment sheet within a merchant app to automatically detect an issuer app on a cardholder’s device for direct card provisioning to Apple Pay — without the need to leave the shopping experience.

Does a cardholder need to take additional steps to add a card from the Apple Pay payment sheet using an issuer app?

No, a cardholder doesn’t need to take additional steps to add a card through In‑App Provisioning Extension within the Apple Pay payment sheet. If a compatible issuer app is detected on their device, the extension will prompt them to add their card directly to Apple Pay without leaving the Apple Pay payment sheet.

Can cardholders manage which cards are added to Apple Pay through the In-App Provisioning Extension feature?

Yes, cardholders will have control over which cards are added to Apple Pay, with prompts ensuring they consent to the setup of each card.

What if a cardholder has multiple issuer apps on their device?

A cardholder can choose which card to add from any of the detected issuer apps. Prompts will guide the cardholder through this process.

Can a cardholder select and set up multiple cards using the In-App Provisioning Extension feature?

Yes. Cardholders can select multiple cards from a specific issuer to add to Apple Pay. Each card will be provisioned in sequence.

Can a cardholder add a card to multiple devices connected with their Apple account through the In-App Provisioning Extension feature?

Depending on iOS version and regional availability, a cardholder may be offered the ability to add a card to other devices where the card is not yet added.

What should a cardholder do if their issuer app doesn’t appear in the From Apps on Your iPhone section in Apple Wallet?

A cardholder must open and log in to the issuer app on their iPhone at least once for Apple Wallet to detect the In‑App Provisioning Extension integration. Also check the PNO metadata and the identifiers of the extensions.

Join the Apple Pay platform.

Best practices

  • Ensure In‑App Provisioning Extension is displayed by following the latency requirements outlined in the enablement steps (above).
  • Keep the user authentication UI similar to the App Login UI, to ensure familiarity for cardholders.
  • Display an error message that is similar to the App login behavior if a cardholder fails authentication.
  • Follow the card art requirements (size and resolution) in the Issuer Functional Requirements (IFR).*
  • Surface all eligible cards.

*Available after Apple Pay partner onboarding

More resources

Apple Pay Demo

Test and debug your integration
in an interactive playground.
Learn more

Apple Developer

Get the resources to design and
build apps for Apple platforms.
Learn more

Apple Business

Manage your company’s digital
presence across Apple apps.
Learn more
  1. In the US, Apple Pay is a service provided by Apple Payments Services LLC, a subsidiary of Apple Inc. Neither Apple Inc. nor Apple Payments Services LLC is a bank. Any card used in Apple Pay is offered by the card issuer.

  2. Apple Pay is not available in all markets. View Apple Pay countries and regions.

  3. Features are subject to change. Some features, applications, and services may not be available in all regions or all languages and may require specific hardware and software.