StartFragment
There are 2 versions of 3DS that we support. Based on what version of 3DS is offered by the issuing bank the authentication of the transaction goes through a different flow.
- v1.0 - the original version that relies on redirects to iFrame and popup to complete consumer authentication. The authentication process verifies the consumer via a challenge in a window.
- v2.1 - this is the newest version of the protocol. It's faster, less consumer obtrusive, and offers multiple ways to authenticate including passive, biometric, and two-factor authentication methods.
Verification process
The overall process can be summarized as follows. You initiate a Create that will return a unique id and an iframe that needs to be presented in the browser. The iframe can be either hidden or visible based on the 3DS version. After that, you initiate Check with the provided id. The result will either return a status which will indicate the outcome of the 3DS authentication. If the status is successful you will proceed in creating a Sale or an Auth using the provided id in threeds.id.
<p >The version will be included in the response to the Create command. </p>
StartFragment
v1.0 Flow
- Create a 3DS authentication request using card data
- We send the 3DS authentication request via form submission in an iframe in the browser
- If a challenge is required, it appears in the browser in the same iframe
- Utilizing the Check command will return
status for that 3DS authentication
- Proceed by creating a Sale or an Auth for this 3DS authentication
v2.2 Flow
- Create a 3DS authentication request using card data
- We send the 3DS authentication request via form submission in a hidden iframe in the browser
- Utilize the Check command to verify if authentication is successful or additional challenge is required
- If an additional challenge is required we present it in a new iframe that needs to be shown in the browser
- Utilizing the Check command will return
status for that 3DS authentication
- Proceed by creating a Sale or an Auth for this 3DS authentication
Always initiate Check for a specific id to verify the status before proceeding to a Sale or an Auth. Once a status changes from the initial Pending it will never change again. The acceptable statuses for proceeding to an Auth or Sale are Success, Attempted, and Not Enrolled.
EndFragment
EndFragmen