As we explain before, in this step, you will receive an access token that should be use to secure the connection and a URL that behind the scene we will be capturing the data.
Using the session ID obtained, in the capture process, and the data obtained in Setup step, we check the enroll of the transaction, and returns the risk level of it. In this case will be Challenge required
After the modal for One time password is showed and the customer enter the one-time password, a unique identification is created and you can validate the information to resend the enrollment request for update the status.
This authorization is the same endpoint used in Payments API (Simple Authorization), the difference is that a new object is sent in the request, the authorization object:
This JSON object is part of the security measures taken to authenticate online transactions and protect against fraud. Each field contributes to ensuring that the person making the transaction is the legitimate cardholder.
Additional attributes of the request
eci: string
Required: false
Stands for "Electronic Commerce Indicator." The value "05" indicates that the transaction was processed using 3D Secure authentication
eci_raw: string
Required: false
This is likely the raw Electronic Commerce Indicator value
token: string
Required: false
A unique token generated for the transaction, used to create a secure channel with the merchant.
commerce_indicator: string
Required: false
Indicates the type of transaction. "vbv" refers to "Verified by Visa"
pares_status: string
Required: false
The status returned by the Payer Authentication Response (PaRes). "Y" means that the authentication was successful.
veres_enrolled: string
Indicates whether the card is enrolled in the 3D Secure program. "Y" means yes.
acs_transaction_id: string
Required: false
A unique identifier for the transaction provided by the Access Control Server (ACS)
authentication_transaction_id: string
Required: false
Another unique identifier for the authentication transaction.
cavv: string
Required: false
Cardholder Authentication Verification Value. A value generated during the 3D Secure process that helps verify the cardholder's identity
specificationVersion: string
Required: false
The version of the 3D Secure protocol used, which in this case is "2.2.0."
ree_dss_server_transaction_id: string
Required: false
Likely an identifier for the transaction as recorded by the 3D Secure server
xid: string
Required: false
A transaction identifier used in the 3D Secure 1.0 protocol, similar to the CAVV
directory_server_transaction_id: string
Required: false
A unique identifier for the transaction as recorded by the directory server.
acs_reference_number: string
Required: false
A reference number for the Access Control Server, which in this case is "Cardinal ACS/"
