# Token Activation
source: https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md

The token activation use case lists the tasks associated with activation, such as:

* [Activating a Token](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#activating-a-token)
  * [Activating a Reprovisioned Token](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#activating-a-reprovisioned-token)
* [Resending Token Activation Code](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#resending-token-activation-code)
* [Retrieving Token Activation Methods](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#retrieving-token-activation-methods)

## Activating a Token {#activating-a-token}

A cardholder is in the process of converting their physical card into a digital card or token. When the token is ready to be activated, the cardholder must authenticate themselves by calling the Customer Service.

To facilitate the token activation process, the issuer's Customer Service agents will first search for the token that needs to be activated, and then utilize the Token Activate API.
Diagram activate

### Steps: {#steps}

1. A cardholder contacts the issuer's customer service to request token activation and provides the last four digits of their PAN.
2. Issuer's Customer Service Representative searches for the token mapped to the PAN.
3. A list of tokens mapped to the PAN are returned with a unique identifier assigned to each token - Token Unique Reference (TUR).
4. This TUR is used to activate the token.
5. Once the token is activated, MDES notifies the issuer.
6. The issuer in turn notifies the cardholder that the token is ready to use.

### Endpoint {#endpoint}


API Reference: `GET /{id}/search`


API Reference: `GET /{id}/token/activate`

<br />

Refer to the [Integration Tutorial](https://developer.mastercard.com/mdes-customer-service/documentation/tutorials/tutorial-4/index.md) for details on how to use these endpoints for activating a token.
Note: Effective February 2025, the Token Activate API will return a [NOT_SUPPORTED](https://developer.mastercard.com/mdes-customer-service/documentation/error-codes/index.md#not-supported) error when the token has been provisioned more than 30 days prior to the activation attempt. This change replaces the previous HTTP 500 'INTERNAL_SERVICE_FAILURE' response. For further details, refer to [Inactive tokens](https://techdocs.mastercard.com/bundle/m_MIIG/page/MIIG_Inactive_token.html) section in the MDES Issuer Implementation Guide.

### Activating a Reprovisioned Token {#activating-a-reprovisioned-token}

If a cardholder deletes a token, and subsequently adds the same PAN to the same device within the number of days configured in the [Consumer delete days setting](https://techdocs.mastercard.com/bundle/m_MIIG/page/xph1726526943376.html), MDES will provision the same token back to the device. The device tokens that are deleted by consumers will remain active in MDES for 95^[1](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#fn:1)^ days. In this timeframe, the Search API can be used to identify such tokens in the API response containing `CurrentStatusCode` = "U - Unmapped" for a token that is going through reprovisioning and subsequent reactivation within 95^[1](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#fn:1)^ days.

Diagram reactivate-1
{#fnref1:1}

### Steps: {#steps-1}

1. Cardholder deletes the card from the device.
2. MDES updates deleted token status to unmapped.
3. Cardholder add the same card to the device and contacts the issuer's customer service to request token activation and provides the last four digits of their PAN.
4. Issuer's Customer Service Representative searches for the token mapped to the PAN that is awaiting activation.
5. MDES Search API can be used to identify consumer deleted tokens being reprovisioned as the API returns the unique identifier assigned to that token, Token Unique Reference (TUR), with
   * `CurrentStatusCode` = "U - Unmapped"
   * `TokenDeletedFromConsumerApp`=true
   * `ProvisioningStatusCode`=A (Awaiting Activation)
6. This TUR is used to activate the token.
7. Once the token is activated, MDES notifies the issuer.
8. The issuer in turn notifies the cardholder that the token is ready to use.


API Reference: `GET /{id}/search`

## Resending Token Activation Code {#resending-token-activation-code}

An issuer has requested MDES to generate and send a new activation code for a specific token. The Token Resend Activation Code API is used to trigger the process via the requested activation method. When successful, a new Activation Code Expiration Date Time period will begin, and a new Activation Code will be sent to the issuer using the Activation Code Notification (ACN) pre-digitization network message.
Diagram resend-activation

### Endpoint {#endpoint-1}


API Reference: `GET /{id}/search`

### Steps: {#steps-2}

1. Issuer requests MDES to to generate and resend the token activation code for a card.
2. Issuer's Customer Service Representative uses `/{id}/token/resendactivationcode` request to trigger the process of generating and sending a new Activation Code.
3. The `/{id}/token/resendactivationcode` response provides the TUR of the token for which the activation code is requested.
4. MDES sends the Activation Code Notification (ACN) to the issuer.
5. Issuer provides the activation code to the cardholder.

### Endpoint {#endpoint-2}


API Reference: `GET /{id}/search`


API Reference: `GET /{id}/token/resendactivationcode`

<br />

## Retrieving Token Activation Methods {#retrieving-token-activation-methods}

An issuer would like to retrieve the activation methods that were configured for a token belonging to one of their cardholders during the enablement process. Activation methods refer to the various ways in which a cardholder can authenticate themselves with the issuer, beyond the capabilities of MDES. The Token Activation Methods API is used to retrieve the available activation methods for a token that is awaiting activation.
Diagram obtain-activation

### Steps: {#steps-3}

1. Issuer requests the Customer Service Representative to retrieve the token activation methods for a card.
2. The TUR for that token is sent on the `/{id}/token/activationmethods` request to retrieve token activation methods.
3. The `/{id}/token/activationmethods` response returns the activation methods to the issuer.

### Endpoint {#endpoint-3}


API Reference: `GET /{id}/search`


API Reference: `GET /{id}/token/activationmethods`

<br />

Refer to the [integration tutorial](https://developer.mastercard.com/mdes-customer-service/documentation/tutorials/tutorial-8/index.md) for details on how to use these endpoints for retrieving activation methods enabled for a token during the card digitization process.

*** ** * ** ***

1. As configured in the Consumer Delete Days field. Refer to [Configuring Reuse of Tokens](https://techdocs.mastercard.com/bundle/m_MIIG/page/xph1726526943376.html). Refer to the announcement [GLB 9285.1 MDES Provisioning Enhancements for Device Wallets](https://techdocs.mastercard.com/bundle/m_an9285_en-us/page/ukm1709537822613.html) for further details on this functionality. [↩︎](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#fnref:1) [↩︎](https://developer.mastercard.com/mdes-customer-service/documentation/use-cases/tokenactivate-use-case/index.md#fnref1:1)

   {#fn:1}
{#fn:1}