3DS2 allows you to authenticate your transactions to reduce fraud and shift liability
3DS2 is a payments industry standard that promotes secure, frictionless consumer authentication for online payments. 3DS2 allows you to reduce fraud by providing methods to verify the authenticity of online payments.
The steps required to implement 3DS2 using NoahPay will depend on:
- If you have already have an MPI (Merchant Plug-in) or require NoahPay to act as your MPI
- Your PCI level
- Your preferred integration method
MPI
I already have an MPI
If you have an existing MPI integration you will need to follow your MPI's instructions in order to authenticate a payment transaction. After authentication your MPI will provide you with 3DS data which may include:
- Cryptogram, CAV, CAVV or AAV
- Ecommerce Indicator (ECI) or Security Level Indicator (SLI)
- PARes
- VERes
You will then need to set the 3D Secure fields on your NoahPay Purchase or Refund API calls in order to complete a 3DS2 transaction.
I don't have an MPI
NoahPay can act as your MPI. Please contact your NoahPay representative for more information on how to add NoahPay's 3DS2 MPI to your account.
Using NoahPay's MPI, there are various integration methods to choose from depending on your PCI level:
| Integration Method | Description | 3DS Integration Guide |
|---|---|---|
| Hosted Payments Page | PCI SAQ A required Your website uses NoahPay’s payment form through the NoahPay Hosted Payments Page iframe. Payment processing is entirely outsourced to NoahPay, meaning you do not need to handle any raw card data. | Using Hosted Payments Page |
| Direct Post | PCI A-EP required Your website hosts the payment form and you are responsible for collecting card details on front end code you host. Card data exchange with NoahPay will take place via an AJAX call from your frontend directly to NoahPay. | Using Custom Payments Form |
| API | PCI SAQ D required Your website hosts the payment form and you are responsible for collecting card details in both your backend and frontend. Card data exchange with NoahPay will take place via API calls from your backend system to NoahPay. | Using Custom Payments Form |