Skip to content

Card 3DSecure Enrollment

Cards must be registered with the 2 following methods to accept secure online payments:

MethodDescriptionEndpoint
SMS methodA one-time password (OTP) sent by SMS./v1/cards/Register3DS
Out of Band (OOB)A strong customer authentication of the cardholder through their payment application./v1/cards/{cardId}/authentication-methods
Bulb icon

Tip – Cards are enrolled with both methods at the same time

This allows you to request a FALLBACK to the SMS method if the Out of Band authentication is not possible during a card transaction.

Enrolling to Out of Band Authentication

When a User has an active (provisioned) SCA Wallet, you must enable the SCA for a Card using the following request.

bash
curl -X POST {baseURL}/v1/cards/{cardId}/authentication-methods \
	--header 'Authorization: Bearer {accessToken}' \
	--header 'Content: application/json' \
	-d '{
		"method": "OOB"
	}'

Returns an HTTP 201 response.

json
{
    "publicToken": "103685666",
    "id": "b7478da6-4165-4c8c-xxx0-8e9200f5162a",
    "method": "OOB",
    "system": "GPS"
}

Retrieving a Card authentication methods

bash
curl -X GET {baseURL}/v1/cards/{cardId}/authentication-methods \
	--header 'Authorization: Bearer {accessToken}' \
	--header 'Content: application/json' \

Returns the Card enrollments list.

json
[
    {
        "publicToken": "103685965",
        "id": "2739879",
        "method": "OTPSMS",
        "system": "GPS"
    },
    {
        "publicToken": "103685965",
        "id": "b7478da6-4165-4c8c-aaa0-8e9200f5162a",
        "method": "OOB",
        "system": "GPS"
    }
]

Endpoints

Find below the list of 3DSecure endpoints (SCA Mode).

EndpointDescription
/v1/cards/{cardId}/authentication-methodsDefine the authentication methods of a Card
/v1/cards/{cardId}/authentication-methodsRetrieve the authentication methods of a Card
/v1/cards/{cardId}/authentication-methods/{authMethodId}Retrieve details regarding the authentication method of a Card
/v1/cards/{cardId}/authentication-methods/{authMethodId}Delete the authentication method of a Card. Only available for OOB method.