Network Token Testing

Hellgate Cloud provides a built-in sandbox for testing network tokens. The sandbox serves as the default backend for network token provisioning and enables you to test network token functionality across both Commerce and Guardian products.

​

Overview

The Hellgate Cloud sandbox supports two modes of network token testing:

• Standard network token testing: Generates network tokens from PAN data and allows you to request cryptograms (payment data) for them
• Deterministic network tokens: Uses the FPAN (Fundamental PAN) of the underlying card as the TPAN (Token PAN) for transitive testing scenarios

Both modes work seamlessly on Commerce and Guardian, allowing you to test the complete network token lifecycle from provisioning through cryptogram generation and payment authorization.

​

Standard Network Token Testing

When you provision a network token using PAN data, the sandbox:

1. Accepts the FPAN and associated card data
2. Generates a network token (TPAN - Token PAN) from the FPAN
3. Associates the network token with your tokenized card
4. Enables cryptogram requests for payment authorization

This standard behavior allows you to test the complete network token lifecycle, from provisioning through cryptogram generation and payment authorization.

​

Deterministic Network Tokens

For advanced testing scenarios involving transitive testing with acquirers and processors, Hellgate Cloud provides deterministic network tokens.

​

How Deterministic Network Tokens Work

Deterministic network tokens use the FPAN (Fundamental PAN) of the underlying card as the TPAN (Token PAN). This means:

• The network token (TPAN) will be identical to the original card PAN (FPAN)
• Cryptograms can be deterministically generated for the same TPAN
• You can create predictable, reproducible testing scenarios

​

When to Use Deterministic Network Tokens

Deterministic network tokens are particularly useful for:

• Transitive testing: Testing integrations with connected sandboxes (e.g., acquirer or PSP sandboxes)
• Predictable scenarios: Creating reproducible test cases where the same PAN always generates the same network token
• Sandbox integration: Enabling access to sandbox behavior on connected third-party sandboxes

​

Benefits

With deterministic network tokens, you can:

• Provision network tokens and deterministically generate the TPAN with a cryptogram
• Test end-to-end flows through multiple systems (Hellgate Cloud → Acquirer → Processor)
• Maintain consistency across test runs
• Simplify integration testing with external sandbox environments

​

Testing Workflow

Follow these steps to test network tokens:

​

Test Cards

Use the test cards provided in our Test Cards documentation to test network token scenarios. These cards support various network tokenization scenarios including:

• Successful provisioning
• Eligibility failures
• Payment data request failures