Introduction
Connecting your POS or ERP to FBR looks intimidating from the outside — API tokens, sandbox environments, JSON payloads — but the actual process follows a fixed sequence: register, choose an integrator, test, then go live. Here’s each step in order.
Before You Start: What You’ll Need
- Your NTN (National Tax Number) or CNIC linked to your business
- Your STRN (Sales Tax Registration Number)
- IRIS portal login credentials
- Basic business details (sector, nature of business)
- A POS or ERP system capable of connecting to an API — if you’re still on manual/spreadsheet invoicing, you’ll need compliant software first
Step 1: Log In to IRIS and Find Digital Invoicing
Go to the official IRIS portal (iris.fbr.gov.pk) and log in using your CNIC or NTN as the username, along with your password. From the dashboard, navigate to the Digital Invoicing option in the main menu — this is where your business registers for e-invoicing and connects to FBR’s system.
Step 2: Choose Your Integration Mode
On the Integration Mode screen, select how your invoices will reach FBR:
- API Integration — your POS/ERP connects directly to FBR and transmits invoices automatically in real time. This is the standard choice for most businesses.
- Manual entry — typically only practical for very low invoice volumes.
For any business processing regular sales, API integration is what you want.
Step 3: Select Your Licensed Integrator
IRIS will ask who handles your technical integration. You have two routes:
- PRAL — FBR’s own licensed integrator, offering integration services free of cost, with your team handling the technical setup.
- A private licensed integrator — a paid vendor that manages the integration for you.
(For a fuller comparison of these two paths, see our earlier post on in-house integration vs. a licensed integrator — link to that post once it’s published on your site.)
Step 4: Get Your API Credentials
Once your integration mode and integrator are set, IRIS issues the credentials your software needs: an API token, username, password, and a separate sandbox token for testing. Keep these secure — share them only with your licensed integrator or authorized personnel, never publicly.
Step 5: Set Up and Verify the Sandbox Environment
Navigate to the Sandbox Environment tab and confirm your API access tokens are active — check that both the Sandbox API and Sandbox Invoice Detail API show a valid, active token and security token. Based on your business nature and sector, FBR generates a set of eligible tax scenarios you’ll need to test against — often 9 to 12 or more, depending on what you sell.
Step 6: Run Sandbox Testing
Using your sandbox token, send sample invoices in the required JSON format covering each of your eligible tax scenarios. This step exists specifically to catch formatting errors, tax mismatches, and missing fields before they become rejected live invoices. Don’t skip it, and don’t rush it — sandbox testing is the difference between a smooth go-live and a stream of rejected invoices in week one.
Step 7: Go Live
Once all sandbox scenarios pass and your setup is approved, generate your production token from the Production Environment tab. Update your POS/ERP software with this new token as its authentication key — from this point, your software is submitting real, live invoices to FBR.
Step 8: Confirm Real-Time Invoicing End to End
Run a live test sale and confirm the full loop works: your POS sends the invoice data to FBR, FBR validates it, and returns a unique FBR Invoice Number (IRN) and QR code within a second or two, printed on the customer’s receipt. If that round trip completes cleanly, you’re fully integrated.
A Faster Path Through These Steps
Every step above is manageable, but steps 3 through 7 in particular require ongoing technical attention — credential management, sandbox scenario coverage, and monitoring for rejected invoices don’t stop once you go live. FBR Digital Invoices handles this layer for you: connecting to your existing POS or ERP, managing real-time FBR validation, and generating IRNs and QR codes automatically, so you’re not maintaining the technical integration yourself after go-live.
FAQ
How long does the whole process usually take? It depends on how quickly sandbox testing passes and how many tax scenarios apply to your business — straightforward setups can go live in days, while businesses with more complex product/tax scenarios may need longer testing.
Can I skip sandbox testing if I’m confident my setup is correct? It’s strongly discouraged — sandbox testing is what catches formatting and tax-rate errors before they turn into rejected live invoices and potential FBR notices.
What happens if my production token stops working later? Treat this urgently — an expired or misconfigured token silently blocks invoice transmission, which from FBR’s side looks like unreported sales.
Do I need a developer to do this myself? If you’re going the PRAL/self-integration route, yes, some technical capability is needed. If you use a private licensed integrator or a platform like FBR Digital Invoices, the technical implementation is handled for you.
Conclusion
Connecting your POS or ERP to FBR is a defined, repeatable process — register on IRIS, choose your integrator, get your credentials, test thoroughly in sandbox, then go live. The steps themselves aren’t the hard part; keeping the integration correctly maintained afterward is. That ongoing piece is exactly what FBR Digital Invoices is built to take off your plate.
