Card 3DSecure Enrollment

Cards must be registered with the 2 following methods to accept secure online payments:

Method	Description	Endpoint
SMS method	A one-time password (OTP) sent by SMS.	/v1/cards/Register3DS
Out of Band (OOB)	A strong customer authentication of the cardholder through their payment application.	/v1/cards/{cardId}/authentication-methods

Tip – Cards are enrolled with both methods at the same time

This allows you to request a FALLBACK to the SMS method if the Out of Band authentication is not possible during a card transaction.

Enrolling to Out of Band Authentication

When a User has an active (provisioned) SCA Wallet, you must enable the SCA for a Card using the following request.

CURL

curl -X POST {baseURL}/v1/cards/{cardId}/authentication-methods \
	--header 'Authorization: Bearer {accessToken}' \
	--header 'Content: application/json' \
	-d '{
		"method": "OOB"
	}'

Returns an HTTP 201 response.

JSON

{
    "publicToken": "103685666",
    "id": "b7478da6-4165-4c8c-xxx0-8e9200f5162a",
    "method": "OOB",
    "system": "GPS"
}

Retrieving a Card authentication methods

CURL

curl -X GET {baseURL}/v1/cards/{cardId}/authentication-methods \
	--header 'Authorization: Bearer {accessToken}' \
	--header 'Content: application/json' \

Returns the Card enrollments list.

JSON

[
    {
        "publicToken": "103685965",
        "id": "2739879",
        "method": "OTPSMS",
        "system": "GPS"
    },
    {
        "publicToken": "103685965",
        "id": "b7478da6-4165-4c8c-aaa0-8e9200f5162a",
        "method": "OOB",
        "system": "GPS"
    }
]

Endpoints

Find below the list of 3DSecure endpoints (SCA Mode).

Endpoint	Description
/v1/cards/{cardId}/authentication-methods	Define the authentication methods of a Card
/v1/cards/{cardId}/authentication-methods	Retrieve the authentication methods of a Card
/v1/cards/{cardId}/authentication-methods/{authMethodId}	Retrieve details regarding the authentication method of a Card
/v1/cards/{cardId}/authentication-methods/{authMethodId}	Delete the authentication method of a Card. Only available for OOB method.