Provisioning

With provisioning, users can securely create and add passes to their iPhone. Apple provides several provisioning options:

  • In-App Provisioning initiates provisioning from the iOS app or App Clip provided by the Participating Provider or the Credential Manager on behalf of the Participating Provider.
  • Web Provisioning initiates provisioning from a webpage hosted by the Participating Provider or the Credential Manager on behalf of the Participating Provider.
  • Easy Provisioning initiates reprovisioning from Apple Wallet for an eligible active pass (for example, to add a previously provisioned pass on a new device).

For In-App Provisioning and Web Provisioning, if the user has an Apple Watch paired with their iPhone, an additional pass is automatically provisioned onto the Apple Watch with a distinct credential to allow the user to access locations or services with either device.

Note
Credential Managers can set device limits to restrict the number of devices that can be provisioned to carry a single pass.

At a high level, provisioning consists of the following steps:

Diagram of platform component interactions for provisioning.

  1. The User performs an action* to add a pass to Apple Wallet and initiates the credential provisioning process. The Credential Manager generates and passes the provisioning information** to the Apple Access Platform.
  2. The Apple Access Platform uses the provisioning information to make a request to the Credential Manager for the pass data (for example, the attributes specific to the pass type).
  3. The Apple Access Platform makes a request to the Credential Provider for the credential data to be stored on the device.***
  4. The Apple Access Platform prepares and delivers the pass and the credential to Apple Wallet on the device.
  5. The Apple Access Platform sends a notification to the Credential Manager to indicate whether the provisioning has succeeded or failed.

*The action to add a pass to Apple Wallet varies for each provisioning method. For In-App Provisioning, the User taps Add to Apple Wallet from the iOS App or App Clip. For Easy Provisioning, the User taps the Add button (+) in Apple Wallet to provision an existing pass. For Web Provisioning, the User clicks the Add to Apple Wallet button from the Website provided by the Credential Manager or Participating Provider.

**During Easy Provisioning, the provisioning information is obtained from an existing pass.

***If your organization is acting as both the Credential Manager and Credential Provider, the Apple Access Platform makes the request in step 3 directly to your organization in its role as the Credential Provider.