3D Secure Verification

info

3D Secure is a security protocol used to authenticate online card transactions. To learn more about 3D Secure, follow this link.

Implementation Methods

3D secure authorization with MPI can be implemented in two ways:

1. Using Hosted Payment Page

In addition to the regular workflow, 3D secure authorization will be incorporated in the process if the card is enrolled and the results of 3D secure verification will be used to process the transaction. In this case, 3D secure redirects will be handled by the system. No additional actions are needed. Appropriate API configurations must be set up within the system.

2. Without Hosted Payment Page

In this case, processing will happen in two phases:

1. After an API call is made, the system will verify whether 3D Secure is required
2. If 3D Secure is not required:
   • The submitter will get a regular API response - approval or decline
3. If 3D Secure is required:
   • The submitter receives X03 response code indicating that a subsequent redirect of the cardholder is necessary
   • The submitter needs to use the transaction ID from the response and execute the redirect (specifying callback URL)
   • The redirect leads the cardholder to the card issuer's website for 3D Secure verification
   • The result returns to the gateway which attempts to complete the transaction
   • The final result is posted to the URL supplied by the submitter within the redirect request

Verification Outcomes

note

There are several possible outcomes of the 3D Secure verification process. You can decide whether to complete authorization based on 3D Secure verification outcome and configure the system to act accordingly. For those cases when subsequent authorization is not desired, the transaction will be declined with E10 response code.

Status	Message
U or blank	Unable to Authenticate. Process transaction as Normal SSL.
N	Failed Authentication. Reject transaction.
Y	Authentication Successful. Proceed to authorization.

tip

You can choose to only proceed with transaction authorization if the status of 3D Secure verification is Y. You can also attempt to authorize regardless of the status.