Card 3DSecure Enrollment
Cards must be registered with the 2 following methods to accept secure online payments:
Method | Description | Endpoint |
---|---|---|
SMS method | A one-time password (OTP) sent by SMS. | /v1/cards/Register3DS |
Out of Band (OOB) | A strong customer authentication of the cardholder through their payment application. | /v1/cards/{cardId}/authentication-methods |
Tip – Cards are enrolled with both methods at the same time
This allows you to request a FALLBACK to the SMS method if the Out of Band authentication is not possible during a card transaction.
Enrolling to Out of Band Authentication
When a User has an active (provisioned) SCA Wallet, you must enable the SCA for a Card using the following request.
bash
curl -X POST {baseURL}/v1/cards/{cardId}/authentication-methods \
--header 'Authorization: Bearer {accessToken}' \
--header 'Content: application/json' \
-d '{
"method": "OOB"
}'
Returns an HTTP 201 response.
json
{
"publicToken": "103685666",
"id": "b7478da6-4165-4c8c-xxx0-8e9200f5162a",
"method": "OOB",
"system": "GPS"
}
Retrieving a Card authentication methods
bash
curl -X GET {baseURL}/v1/cards/{cardId}/authentication-methods \
--header 'Authorization: Bearer {accessToken}' \
--header 'Content: application/json' \
Returns the Card enrollments list.
json
[
{
"publicToken": "103685965",
"id": "2739879",
"method": "OTPSMS",
"system": "GPS"
},
{
"publicToken": "103685965",
"id": "b7478da6-4165-4c8c-aaa0-8e9200f5162a",
"method": "OOB",
"system": "GPS"
}
]
Endpoints
Find below the list of 3DSecure endpoints (SCA Mode).
Endpoint | Description |
---|---|
/v1/cards/{cardId}/authentication-methods | Define the authentication methods of a Card |
/v1/cards/{cardId}/authentication-methods | Retrieve the authentication methods of a Card |
/v1/cards/{cardId}/authentication-methods/{authMethodId} | Retrieve details regarding the authentication method of a Card |
/v1/cards/{cardId}/authentication-methods/{authMethodId} | Delete the authentication method of a Card. Only available for OOB method. |