Content

3DS Payment in direct mode

3D Secure payment is done in two steps:

Verification of the enrollment of the card to the 3D Secure system and authentication of the bearer.
Payment request.

Integration

You must use the verifyEnrollment and doAuthorization web services of the Payline API.

draw.io

Erreur d'accès à la page source : la page associée au lien ci-dessous existe-t-elle?
/pages/viewpage.action?pageId=1121355152

Steps :

The consumer validates his basket and informs his payment data so that Payline verifies the enrollment on merchand request with the verifyEnrollment service;
The merchant redirects the consumer to the bank's authentication page;
The merchant can then make a payment request with the authentication information with the service doAuthorization;
The merchant must retrieve transaction information with the getTransactionDetails service.

1. Verification Request for Card Enrollment with VerifyEnrollment Service

You must first request verification of the credit card registration with Payline with the verifyEnrollement service:

verifyEnrollment
Request		Response
version	18	version	18
card.number	497010XXXXXX1646	result.code	03000
card.expirationDate	1222	result.shortMessage	ACCEPTED
card.cvx	123	result.longMessage	Transaction accepted
payment.amount	10000	termurlName*	TermUrl
payment.action	101	termurlValue*	NULL
payment.mode	CPT	mdFieldName*	MD
payment.contractNumber	VAD3DS	mdFieldValue*	2KJw5rL1N7pZRsfS8Xiw
orderRef	PHP1544091439	pareqFieldName*	PaReq
		pareqFieldValue*	eJxVkW9vgjAQxr+K8QPQ8k/AnE10bJlZ1MXpsr0yTbkMohQsMMVPvxZxbq96v+fa691zsEkVYvyGolHIYIFVxb9wkCWT..
		actionMethod	POST
		ActionUrl	https://3ds-acs.test.modirum.com/mdpayacs/pareq
		token	4970zSIkspmH5670

* Attention values are generated dynamically and will be renewed for each request.

2. Consumer Redirection for Authentication

You must fulfill the consumer's 3DS authentication request.

To do it, you must redirect the consumer to ActionUrl URL with the parameters that you find in verifyEnrollementResponse service.

Check the method used POST or GET of actionMethod.

in POST you post a method form with the names and values of the fields: name and value, adding the termUrl on which the user will be redirected;
in GET you will be able to transmit the names and the values in parameters of the URL.

The parameters are indicated by the fields and the values dynamically: with each call, they can be modified.

pareqFieldName	parameter name
pareqFieldValue	parameter value pareqFieldName
termUrlName	parameter name
termUrlValue	parameter value termUrlName
midFieldName	parameter name
midFieldName	parameter value midFieldName

3. The payment request with the service doAuthorization

You must retrieve the MD information and pares back from the 3DS authentication to transmit them in the payment request to Payline:

doAuthorization
Request		Response
version		result.code	00000
payment.amount		result.shortmessage	ACCPTED
payment.action	101	result.longmessage	Transaction approved
payment.mode	CPT	transaction.id	28340115745009
payment.contractNumber	VAD3DS	transaction.date	07/04/2018 11:27:45
card.number	4970100012345670	authorization.number	ACCOR0
card.expirationDate	1222	authorization.date	07/04/2018 11:27:45
card.cvx	123	card.number	497010XXXXXX5670
order.ref	PHP1544091439	card.type	CB
buyer.customerId	ID12654895	card.expirationDate	1222
3DSecure.md	2KJw5rL1N7pZRsfS8Xiw	card.token	4970zSIkspmH5670
3DSecure.pares	eJxVkW9vgjAQxr+K8QPQ8k/AnE10bJlZ1MXpsr0yTbkMohQsMMVPvxZxbq96v+fa691zsEkVYvyGolHIYIFVxb9wkCWT..	contractNumber	VAD3DS

4. Retrieving the details of the transaction with the service getTransactionDetails

You must retrieve all information by calling the getTransactionDetails service:

Example of the transaction detail screen