Set Up Subscription Revenue Measurement

When you’re done, you’ll have three things to add in Tenjin: your Issuer ID, Key ID, and In-App Purchase key file (.p8). This takes about 5 minutes. You’ll need the Account Holder or Admin role in App Store Connect.

1. Sign in to App Store Connect #

Go to appstoreconnect.apple.com and sign in.

2. Open the In-App Purchase keys page #

1. Click Users and Access in the top navigation.
2. Select the Integrations tab.
3. Click In-App Purchase in the left sidebar.

Important: Use In-App Purchase, not the “App Store Connect API” section. The App Store Connect API key is a different key and won’t work for subscription tracking. This is the most common setup mistake.

3. Copy your Issuer ID #

At the top of the page you’ll see your Issuer ID. It looks like this: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx. Copy it and save it. It’s the same for every key in your team.

4. Generate a new In-App Purchase key #

1. Click the + button next to Active.
2. Give the key a name you’ll recognize, for example Tenjin Subscription Tracking.
3. Click Generate.

5. Download the key file (.p8) #

Click Download API Key. The file will be named SubscriptionKey_XXXXXXXXXX.p8.

You can only download this file once. Save it somewhere safe and don’t share it over email or chat. If you lose it, revoke the key and generate a new one.

6. Copy your Key ID #

In the keys list, the Key ID column shows a 10-character code (for example AB12CD34EF). It’s also part of the file name: SubscriptionKey_<KEY_ID>.p8.

You now have everything you need. Add the Issuer ID, Key ID and .p8 file in the Subscriptions Tracking section above.

When you’re done, you’ll have one thing to add in Tenjin: a service account key file (.json). This takes about 10–15 minutes. You’ll need access to Google Cloud and Admin access in Google Play Console.

Plan ahead: Google can take 24–36 hours to activate new Play Console permissions. It’s normal for things not to work right away.

1. Create a Google Cloud project #

1. Open Google Cloud: Create project. You can also reuse an existing project.
2. Enter a Project name, choose your organization, and click Create.
3. Make sure the new project is selected in the project picker at the top of the page.

2. Turn on the Google Play Android Developer API #

Open the Google Play Android Developer API page and click Enable.

3. Create a service account #

1. Go to IAM & Admin → Service Accounts → Create service account.
2. Enter a name. The ID fills in automatically.
3. Copy the email address that ends in .iam.gserviceaccount.com. You’ll need it in step 5.
4. Click Create and close. You don’t need to add any Google Cloud roles.

4. Create the JSON key #

1. Open the service account you just created and go to the Keys tab.
2. Click Add key → Create new key.
3. Select JSON and click Create. The key file downloads to your computer.

Keep this file safe. It can’t be downloaded again, so don’t share it over email or chat. If Add key is greyed out, your organization blocks key creation. Ask your Google Cloud admin to allow it for this project.

5. Give the service account access in Google Play Console #

1. In Google Play Console, go to Users and permissions. This is at the account level, not inside an app (click Home first if you don’t see it).
2. Click Invite new users and paste the service account email from step 3.
3. Under App permissions, click Add app, select your app(s), and click Apply.

4. Turn on only the permissions below, then click Apply → Invite user → Send invite.

When you’re done, the service account shows as Active – Never expires.

Now upload the JSON file in the Subscriptions Tracking section above. Remember, Google can take up to 36 hours to activate the permissions.

To replace the key later: create a new key in the Keys tab, upload it in Tenjin, then delete the old one. To remove access: remove the service account from Play Console, or delete it in Google Cloud.