FBR IRIS Setup

Before TaxConnect can submit invoices, you must complete setup in the FBR IRIS portal. This guide walks you through the required steps: whitelisting technical details, retrieving your sandbox token, and preparing for production access.

Step 1 — Log in to IRIS

Begin by navigating to the official FBR IRIS portal and signing in with your taxpayer credentials.

1. Open your browser and go to iris.fbr.gov.pk.
2. Sign in using your FBR taxpayer credentials (your NTN-linked username and password).
3. From the main dashboard menu, locate and click Digital Invoicing. If you do not see this option, your account may not yet be enrolled in the e-invoicing programme — contact FBR or your tax practitioner to request enrolment.

Once you are inside the Digital Invoicing section, you will see the integration management area where the remaining steps take place.

Step 2 — Submit technical / whitelisting details

Before the FBR sandbox environment accepts connections from TaxConnect, you must whitelist the system by submitting your technical details through the IRIS portal.

1. Inside Digital Invoicing, open API Integration. Depending on your IRIS portal version, this may also appear as PRAL Integration.
2. If prompted, select PRAL as your licensed integrator. This tells the system that you are using a PRAL-authorised solution rather than building a custom integration.
3. Fill in the technical details form with the following values:
   • IP address: 72.60.196.141
   • System / application name: TaxConnect
   • Server hosting location / country: Malaysia
4. Review the information for accuracy and submit the form.

After submission, the IRIS portal processes your request. Sandbox access typically becomes available within a few business days once FBR or PRAL approves the whitelisting. You can check the status by returning to the API Integration page.

Step 3 — Get your sandbox token

Once your technical details are approved, the sandbox environment becomes accessible. You can now retrieve your sandbox security token and enter it into TaxConnect.

1. In the IRIS portal, navigate to the Sandbox Environment section within Digital Invoicing.
2. Click Web API Details to view your sandbox credentials.
3. Copy the sandbox token (also labelled as security token or API token depending on the portal version). Store it somewhere safe — you will not see the full token again after navigating away.
4. Open TaxConnect and go to Invoices → select your organisation → click the settings cog → Integrations tab.
5. Paste the token into the Sandbox Token field and click Save.

Once saved, TaxConnect will use this token for all sandbox communication with the FBR API. You can verify the connection by running a sandbox test — see the Sandbox Testing guide for details.

Step 4 — Prepare for production

Sandbox testing must be completed before production tokens are issued. FBR and PRAL require evidence that your integration works correctly in the sandbox before they release production credentials.

1. Complete sandbox testing through TaxConnect (see the Sandbox Testing guide). All scenarios must pass before proceeding.
2. Return to the IRIS portal and navigate to Digital Invoicing → API Integration → Production Environment.
3. Open Web API Details and copy the production token shown there.
4. In TaxConnect, go to Invoices → select your organisation → settings cog → Integrations tab, paste the production token into the Production Token field, and save.

Your production token is now stored in TaxConnect. Refer to the Sandbox Testing guide and the Production Go-Live documentation for the next steps — including switching your organisation from sandbox-only to active mode and submitting your first live invoice.