XP Cloud:3D-Secure - Revision history

Dohtur at 22:50, 31 January 2022

2022-01-31T22:50:14Z

Dohtur at 22:45, 31 January 2022

2022-01-31T22:45:28Z

Dohtur at 22:16, 31 January 2022

2022-01-31T22:16:56Z

Dohtur at 22:14, 31 January 2022

2022-01-31T22:14:01Z

Dohtur at 22:02, 31 January 2022

2022-01-31T22:02:57Z

Dohtur: Dohtur moved page XP Cloud:3D-Secure Settings to XP Cloud:3D-Secure

2020-08-31T21:34:17Z

Dohtur moved page XP Cloud:3D-Secure Settings to XP Cloud:3D-Secure

Dohtur at 10:33, 2 March 2020

2020-03-02T10:33:52Z

Mouse: Mouse moved page X-Payments Cloud:3D-Secure Settings to XP Cloud:3D-Secure Settings: Test page move from API

2020-03-02T09:14:04Z

Mouse moved page X-Payments Cloud:3D-Secure Settings to XP Cloud:3D-Secure Settings: Test page move from API

Dohtur at 09:45, 14 February 2020

2020-02-14T09:45:55Z

Dohtur at 08:16, 14 February 2020

2020-02-14T08:16:53Z

@@ Line 32: / Line 32: @@
 * NMI (Network Merchants Inc.),
 * PSiGate XML API;
 * USA ePay - Transaction Gateway API;
 * WebXpress. <br />

@@ Line 20: / Line 20: @@
 * Bambora (Beanstream),
 * Beanstream (legacy API),
 * Blue Pay Canada (formerly Caledon),
 * Chase Paymentech Orbital,
 * CyberSource - SOAP toolkit API,

@@ Line 13: / Line 13: @@
 * Global Payments (formerly Realex);
 * Opayo Direct (formerly Sage Pay Go - Direct Interface);
 * Worldpay Corporate Gateway - Direct Model. <br />
 For many other payment solutions, it is possible to use the 3-D Secure authentication solution by CardinalCommerce (X-Payments Cloud has an integrated module for this purpose). Solutions that can be used with 3-D Secure authentication by CardinalCommerce include:

@@ Line 6: / Line 6: @@
 Some payment solutions supported by X-Payments Cloud provide their own built-in integrated 3-D Secure authentication systems. Such solutions include:
 * PayPal's Payflow Pro;
 * Cardinal Commerce Centinel;
 * Elavon (Realex API);

@@ Line 11: / Line 11: @@
 * Global Iris/HSBC - RealAuth Remote;
 * Global Payments (formerly Realex);
-* Sage Pay Go - Direct Interface;
+* Opayo Direct (formerly Sage Pay Go - Direct Interface);
 * Worldpay Corporate Gateway - Direct Model. <br />
 For many other payment solutions, it is possible to use the 3-D Secure authentication solution by CardinalCommerce (X-Payments Cloud has an integrated module for this purpose). Solutions that can be used with 3-D Secure authentication by CardinalCommerce include:

← Older revision	Revision as of 21:34, 31 August 2020
(No difference)

@@ Line 42: / Line 42: @@
 For example, here is what we get in a demo X-Cart 5 store when making a test payment via an X-Payments Cloud enabled method with Cardinal Cruise 3-D Secure:
-:[[File:xpc_3d_secure_purchase_auth.png|740 px|border]]
+:[[File:xpc_3d_secure_purchase_auth.png|670 px|border]]
 (The screenshot above demonstrates payer authentication with 3DS2, so you can see that the customer stays on the store website without a redirect to the bank's site, and the authentication form is provided to them in a popup).
 <br /><br />
@@ Line 58: / Line 58: @@
 # In your X-Payments Cloud admin panel, go to the [[X-Payments_Cloud:General_Settings | General settings]] page ('''Settings''' -> '''General settings''') and scroll down to the [[X-Payments_Cloud:General_Settings#Services | Services]] section.
-# Check the status of CardinalCommerce 3-D Secure service. If you have not yet taken steps to configure and activate this service, you will find it not configured and inactive:<br />[[File:xpc_3dsecure_notconfigured.png| 740 px | border]].<br /> To proceed with the configuration, click on the ''Configure'' link:<br />[[File:xpc_3dsecure_configure.png| 740 px | border]].<br />This opens the CardinalCommerce 3-D Secure configuration page:<br />[[File:xpc_cardinalcommerce_3dsecure.png| 740 px | border]].<br />
+# Check the status of CardinalCommerce 3-D Secure service. If you have not yet taken steps to configure and activate this service, you will find it not configured and inactive:<br />[[File:xpc_3dsecure_notconfigured.png| 670 px | border]].<br /> To proceed with the configuration, click on the ''Configure'' link:<br />[[File:xpc_3dsecure_configure.png| 670 px | border]].<br />This opens the CardinalCommerce 3-D Secure configuration page:<br />[[File:xpc_cardinalcommerce_3dsecure.png| 670 px | border]].<br />
 # On the CardinalCommerce 3-D Secure configuration page, provide the following information:
 #* '''Test/Live mode''': The mode in which you will be using 3-D Secure (''Test'' or ''Live'').
@@ Line 68: / Line 68: @@
 #* '''API Key''': The API Key provided to you by CardinalCommerce.
 #* '''Org Unit ID''': The Org Unit ID provided to you by CardinalCommerce.<br />{{Note1|Setting the fields "Api Identifier", "API Key" and "Org Unit ID" is required for [https://cardinaldocs.atlassian.net/wiki/spaces/CC/overview Cardinal Cruise]. This type of integration supports both 3-D Secure v1 (3DS1) and v2 (3DS2) authentication protocols. If you do not have the respective credentials, simply leave these fields blank; in this case, your CardinalCommerce 3-D Secure integration will just use the 3-D Secure v1 protocol. 3-D Secure v2 is the newer version of 3-D Secure that is expected to eventually replace the 3DS1 protocol and become the main method for authenticating online card payments and meeting the new [https://www.x-cart.com/blog/strong-customer-authentication.html Strong Customer Authentication (SCA)] requirements. This newer version improves the purchase experience compared to 3DS1 by minimizing the friction that authentication brings into the checkout flow. (It eliminates the need for a full-page redirect to the bank's site for purchase authentication and introduces “frictionless authentication” ). With Cardinal Cruise, 3DS2 will be applied when it is supported by the cardholder’s bank, and 3DS1 will still be available as a fallback solution when the new version is not supported.<br />}}
-# When you are done adjusting all the fields, click '''Save''' to save the changes.<br />Your 3-D Secure system configuration will be saved:<br />[[File:xpc_3dsecure_configure_success.png| 740 px | border]]<br />(Note the success message at the top of the page.)
+# When you are done adjusting all the fields, click '''Save''' to save the changes.<br />Your 3-D Secure system configuration will be saved:<br />[[File:xpc_3dsecure_configure_success.png| 670 px | border]]<br />(Note the success message at the top of the page.)
-# Enable the 3-D Secure system configuration you have created: On the page with the configuration details, switch the configuration status to ''Enabled'' by clicking the '''Disabled''' button and selecting the action ''Enable'' from the button menu.<br />[[File:3dsecure_enable.png|740px |border]]<br />This will enable 3-D Secure payer authentication via CardinalCommerce.<br />[[File:3dsecure_enable_success.png|740px |border]]<br />(Note the success message at the top of the page and the status button showing as ''Enabled''.)
+# Enable the 3-D Secure system configuration you have created: On the page with the configuration details, switch the configuration status to ''Enabled'' by clicking the '''Disabled''' button and selecting the action ''Enable'' from the button menu.<br />[[File:3dsecure_enable.png|670px |border]]<br />This will enable 3-D Secure payer authentication via CardinalCommerce.<br />[[File:3dsecure_enable_success.png|670px |border]]<br />(Note the success message at the top of the page and the status button showing as ''Enabled''.)
 Now that you have configured 3-D Secure payer authentication via CardinalCommerce, it will be used for all your active payment configurations.
 <br />
 Besides the status button on the CardinalCommerce 3-D Secure configuration page, the status of your 3-D Secure payer authentication service is visible in the following locations:
-* on the General settings page (Settings -> General):<br />[[File:xpc_3dsecure_status1.png|740px|border]]<br />
+* on the General settings page (Settings -> General):<br />[[File:xpc_3dsecure_status1.png|670px|border]]<br />
-* on the list of payment configurations (Settings -> Payment processing):<br />[[File:xpc_3dsecure_status2.png|740px|border]]<br />
+* on the list of payment configurations (Settings -> Payment processing):<br />[[File:xpc_3dsecure_status2.png|670px|border]]<br />
-* on the details page of any payment configuration:<br />[[File:xpc_3dsecure_status3.png|740px|border]]<br />
+* on the details page of any payment configuration:<br />[[File:xpc_3dsecure_status3.png|670px|border]]<br />
 You can change the status at any time by going to the 3-D Secure configuration details page via the ''CardinalCommerce'' link in any of the above-mentioned locations and re-adjusting the status button.
@@ Line 83: / Line 83: @@
 ==Testing 3-D Secure==
 Once you have everything configured to start using 3-D Secure, it is a good idea to run a couple of test transactions to make sure it works as expected. To run transactions through 3-D Secure in test mode, some preparation will be needed:
-# Check with the documentation or customer service of your payment gateway as to what needs to be done to run transactions in test mode. Depending on the payment system, you may have to set up a separate testing account, or adjust some settings in your existing account. Make sure 3-D Secure is enabled for the account you will use for testing.
+# Check with the documentation or customer service of your payment gateway as to what needs to be done to run transactions in test mode. Depending on the payment system, you may have to set up a separate testing account or adjust some settings in your existing account. Make sure 3-D Secure is enabled for the account you will use for testing.
-# In X-Payments Cloud, set your payment method to work in test mode. For some payment gateways this means that you will just need to switch the test/live setting on the respective payment configuration details page; for others, you will have to use a testing account (different from your production account), so the settings with your account access details will need to be changed as well.
+# In X-Payments Cloud, set your payment method to work in test mode. For some payment gateways, this means that you will just need to switch the test/live setting on the respective payment configuration details page; for others, you will have to use a testing account (different from your production account), so the settings with your account access details will need to be changed as well.
 # Check with the documentation or customer service of your payment gateway whether you will need to use any test mode specific data for your test transactions. For example, some payment gateways may require that you use a special credit card number, have a certain transaction total or use some other information that will allow the gateway to identify the transaction as being run for testing purposes. Some payment gateways will have additional requirements for the use of 3-D Secure in test mode (like Worldpay Corporate - which requires you to specify the cardholder name for your test transactions as "3D" to enable 3-D Secure for them). It is always best to check with the customer service what data is required.
 <br /><br />
 [[Category:X-Payments Cloud User Manual]]

← Older revision	Revision as of 09:14, 2 March 2020
(No difference)

@@ Line 2: / Line 2: @@
 ==3-D Secure Payer Authentication in X-Payments Cloud==
-X-Payments Cloud allows you to use 3-D Secure Payer Authentication for a number of payment methods that support it. 3-D Secure provides an additional layer of security for payment transactions via your store by implementing Verified by Visa and MasterCard SecureCode.
+X-Payments Cloud allows you to use 3-D Secure Payer Authentication for a number of payment methods that support it. 3-D Secure provides an additional layer of security for payment transactions via your store.
 Some payment solutions supported by X-Payments Cloud provide their own built-in integrated 3-D Secure authentication systems. Such solutions include:
@@ Line 33: / Line 33: @@
 (Since the list of payment gateway integrations supported by X-Payments Cloud tends to change with time, we recommend to check with the document [[X-Payments_Cloud:Supported_payment_gateways|X-Payments Cloud:Supported Payment Gateways]] for information on the type of 3-D Secure system supported by specific payment integrations as it may be more up-to-date than the list above.) <br />
-When a customer pays using a payment method with 3-D Secure enabled, in addition to providing their payment card details they also have to go through an additional authentication step validating that they are actually the cardholder. Depending on the bank and the payment method used, the process will have slight variations. For example, here is what we get in a demo X-Cart 5 store using X-Payments Cloud when attempting to pay using a 3-D Secure enabled payment method:
+When a customer pays you using a payment method with 3-D Secure enabled, in addition to providing their payment card details they also have to go through an additional authentication step validating that they are actually the cardholder. Depending on the bank and the payment method used, the process will have slight variations.
-:[[File:xpc_.png|740 px|border]]
-Once we are redirected, we get a page for user authentication like the following:
+The traditional method to authenticate a purchase with the 3-D Secure v1 protocol (3DS1) involves redirecting the buyer who has provided their payment card details to a page on the bank's site where their bank asks them for a code or password to approve the purchase.
-:[[File:xpc_.png|740 px|border]]
-On this page, we have to submit a password to continue with our payment.
+Recently, another method has been introduced based on 3-D Secure v2 (3DS2). The new method addresses many of the shortcomings of 3-D Secure v1 by introducing less disruptive authentication and improved customer experience. This method allows the business and the payment provider to send more data elements on each transaction to the cardholder’s bank (like the shipping address, the customer’s device ID, previous transaction history, etc). The cardholder’s bank uses this information to assess the risk level of the transaction. If the data is enough for the bank to trust that the real cardholder is making the purchase, it performs "frictionless" authentication without any additional input from the cardholder. If the bank decides it needs further proof, the customer is asked to provide additional input to authenticate the payment. In this case, however, the customer does not have to be redirected off the store website, which creates a more positive experience for them.
 <br /><br />
@@ Line 61: / Line 67: @@
 #* '''Api Identifier''': The Api Identifier provided to you by CardinalCommerce.
 #* '''API Key''': The API Key provided to you by CardinalCommerce.
-#* '''Org Unit ID''': The Org Unit ID provided to you by CardinalCommerce.<br />{{Note1|Setting the fields "Api Identifier", "API Key" and "Org Unit ID" is required for [https://cardinaldocs.atlassian.net/wiki/spaces/CC/overview Cardinal Cruise]. This type of integration supports both 3-D Secure v1 and v2 authentication protocols. If you do not have the respective credentials, simply leave these fields blank; in this case, your CardinalCommerce 3-D Secure integration will just use the 3-D Secure v1 protocol. 3-D Secure v2 (3DS2) is the newer version of 3-D Secure that is expected to be the main method for authenticating online card payments and meeting the new [https://www.x-cart.com/blog/strong-customer-authentication.html Strong Customer Authentication (SCA)] requirements. This newer version improves the purchase experience compared to 3-D Secure v1 by minimizing the friction that authentication brings into the checkout flow. (It eliminates the need for a full-page redirect to the bank's site for purchase authentication and introduces “frictionless authentication” ). With Cardinal Cruise, 3-D Secure v2 will be applied when it is supported by the cardholder’s bank, and 3D Secure v1 will still be available as a fallback solution when the new version is not supported.<br />}}
+#* '''Org Unit ID''': The Org Unit ID provided to you by CardinalCommerce.<br />{{Note1|Setting the fields "Api Identifier", "API Key" and "Org Unit ID" is required for [https://cardinaldocs.atlassian.net/wiki/spaces/CC/overview Cardinal Cruise]. This type of integration supports both 3-D Secure v1 (3DS1) and v2 (3DS2) authentication protocols. If you do not have the respective credentials, simply leave these fields blank; in this case, your CardinalCommerce 3-D Secure integration will just use the 3-D Secure v1 protocol. 3-D Secure v2 is the newer version of 3-D Secure that is expected to eventually replace the 3DS1 protocol and become the main method for authenticating online card payments and meeting the new [https://www.x-cart.com/blog/strong-customer-authentication.html Strong Customer Authentication (SCA)] requirements. This newer version improves the purchase experience compared to 3DS1 by minimizing the friction that authentication brings into the checkout flow. (It eliminates the need for a full-page redirect to the bank's site for purchase authentication and introduces “frictionless authentication” ). With Cardinal Cruise, 3DS2 will be applied when it is supported by the cardholder’s bank, and 3DS1 will still be available as a fallback solution when the new version is not supported.<br />}}
 # When you are done adjusting all the fields, click '''Save''' to save the changes.<br />Your 3-D Secure system configuration will be saved:<br />[[File:xpc_3dsecure_configure_success.png| 740 px | border]]<br />(Note the success message at the top of the page.)
 # Enable the 3-D Secure system configuration you have created: On the page with the configuration details, switch the configuration status to ''Enabled'' by clicking the '''Disabled''' button and selecting the action ''Enable'' from the button menu.<br />[[File:3dsecure_enable.png|740px |border]]<br />This will enable 3-D Secure payer authentication via CardinalCommerce.<br />[[File:3dsecure_enable_success.png|740px |border]]<br />(Note the success message at the top of the page and the status button showing as ''Enabled''.)