Secure Acceptance Hosted Checkout Integration Guide

1 Title Page Secure Acceptance Hosted Checkout Integration Guide Cybersource Contact Information For general information about our company, products, and services, go to For sales questions about any Cybersource service, email or call 650-432-7350 or 888- 330-2300 (toll free in the United States). For support information about any Cybersource service, visit the Support Center: Copyright 2021. Cybersource Corporation. All rights reserved. Cybersource Corporation ("Cybersource") furnishes this document and the software described in this document under the applicable agreement between the reader of this document ("You") and Cybersource ("Agreement"). You may use this document and/or software only in accordance with the terms of the Agreement. Except as expressly set forth in the Agreement, the information contained in this document is subject to change without notice and therefore should not be interpreted in any way as a guarantee or warranty by Cybersource.

2 Cybersource assumes no responsibility or liability for any errors that may appear in this document. The copyrighted software that accompanies this document is licensed to You for use only in strict accordance with the Agreement. You should read the Agreement carefully before using the software. Except as permitted by the Agreement, You may not reproduce any part of this document, store this document in a retrieval system, or transmit this document, in any form or by any means, electronic, mechanical, recording, or otherwise, without the prior written consent of Cybersource. Restricted Rights Legends For Government or defense agencies: Use, duplication, or disclosure by the Government or defense agencies is subject to restrictions as set forth the Rights in Technical Data and Computer Software clause at DFARS.

3 And in similar clauses in the FAR and NASA FAR Supplement. For civilian agencies: Use, reproduction, or disclosure is subject to restrictions set forth in subparagraphs (a). through (d) of the Commercial Computer Software Restricted Rights clause at and the limitations set forth in Cybersource Corporation's standard commercial agreement for this software. Unpublished rights reserved under the copyright laws of the United States. Trademarks , , and The Power of Payment are registered trademarks of Cybersource Corporation. Cybersource, Cybersource Payment Manager, Cybersource Risk Manager, Cybersource Decision Manager, and Cybersource Connect are trademarks and/or service marks of Cybersource Corporation. Visa, Visa International, Cybersource, the Visa logo, and the Cybersource logo are the registered trademarks of Visa International in the United States and other countries.

4 All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Revision: 2. CONTENTS. Contents Recent Revisions to This Document 7. About This Guide 9. Audience and Purpose 9. Web Site Requirements 9. Conventions 10. Important and Warning Statements 10. Text and Command Conventions 10. Related Documents 11. Customer Support 12. Chapter 1 Secure Acceptance Hosted Checkout 13. Required Browsers 14. Secure Acceptance Profile 14. Secure Acceptance Transaction Flow 15. Payment Tokens 16. Tokens That Represent a Card or Bank Account Only 17. One-click Checkout 17. Subscription Payments 17. Level II and III Data 18. BIN Lookup 19. Requirement 19. Request BIN Lookup 19. Payouts Payment Tokens 19. Go-Live with Secure Acceptance 20.

5 Chapter 2 Payment Configuration 21. Creating a Hosted Checkout Profile 21. Payment Method Configuration 22. Adding Card Types and Currencies 23. Payer Authentication Configuration 24. Configuring Payer Authentication 24. Secure Acceptance Hosted Checkout Integration Guide | 3. Contents Enabling Automatic Authorization Reversals 25. Enabling Echecks 26. Visa Click to Pay Configuration 26. Configuring Visa Click to Pay 27. Enabling the Payment Method for Visa Click to Pay 27. Enabling PayPal Express Checkout 28. Security Keys 29. Creating Security Keys 30. Checkout Configuration 31. Configuring the Payment Form 31. Configuring Billing Information Fields 32. Configuring Shipping Information Fields 33. Configuring Echeck Information Fields 34. Configuring Order Review Details 34. Merchant Notifications 35.

6 Configuring Merchant Notifications 35. Customer Receipts 36. Configuring Customer Notifications 36. Customer Response Page 37. Configuring a Cybersource Hosted Response Page 38. Configuring a Custom Hosted Response Page 38. Configuring a Custom Cybersource Hosted Response Page 39. Configuring a Custom Cancel Response Page 39. Custom Checkout Appearance 40. Changing Header Content 40. Changing Body Color and Font Settings 40. Changing Background and Text Color of the Total Amount 41. Changing the Progress Bar Color 42. Changing Color and Text on Pay or Finish Button 42. Changing Footer Color and Uploading a Small Logo or Image 43. Checkout Language Localization 43. Activating a Profile 45. Additional Profile Options 46. Samples in Scripting Languages 46. Sample Transaction Process Using JSP 46.

7 Chapter 3 Portfolio Management for Resellers 48. Creating a Hosted Checkout Profile 48. Payment Method Configuration 49. Adding Card Types and Currencies 50. Payer Authentication Configuration 51. Configuring Payer Authentication 51. Enabling Automatic Authorization Reversals 52. Secure Acceptance Hosted Checkout Integration Guide | 4. Contents Enabling Echecks 53. Visa Click to Pay Configuration 53. Configuring Visa Click to Pay 54. Enabling PayPal Express Checkout 55. Service Fees 55. Enabling Service Fees 56. Security Keys 56. Creating Security Keys 57. Checkout Configuration 58. Configuring the Payment Form 58. Configuring Billing Information Fields 59. Configuring Shipping Information Fields 60. Configuring Echeck Information Fields 61. Configuring Order Review Details 61. Merchant Notifications 62.

8 Configuring Merchant Notifications 62. Customer Receipts 63. Configuring Customer Notifications 63. Customer Response Page 64. Configuring a Cybersource Hosted Response Page 65. Configuring a Custom Hosted Response Page 65. Configuring a Custom Cybersource Hosted Response Page 66. Configuring a Custom Cancel Response Page 66. Custom Checkout Appearance 67. Changing Header Content 67. Changing Body Color and Font Settings 68. Changing Background and Text Color of the Total Amount 68. Changing the Progress Bar Color 69. Changing Color and Text on Pay or Finish Button 69. Changing Footer Color and Uploading a Small Logo or Image 70. Activating a Profile 71. Additional Profile Options 71. Chapter 4 Payment Transactions 72. Endpoints and Transaction Types 72. Required Signed Fields 74. Payment Tokens 74.

9 Creating a Payment Card Token 74. Creating an Echeck Token 77. Payment Token Transactions 79. One-Click 79. Requesting an Echeck Transaction with a Token 81. Recurring Payments 83. Secure Acceptance Hosted Checkout Integration Guide | 5. Contents Installment Payments 85. Payment Token Updates 87. Updating a Payment Card Token 87. Updating an Echeck Token 89. Chapter 5 Decision Manager 91. Chapter 6 Test and View Transactions 93. Testing Transactions 93. Viewing Transactions in the Business Center 94. Appendix A API Fields 95. Data Type Definitions 95. Request Fields 96. Response Fields 137. Reason Codes 175. Types of Notifications 178. AVS Codes 179. International AVS Codes 179. Domestic AVS Codes 180. CVN Codes 182. Appendix B American Express SafeKey Response Codes 183. Appendix C Iframe Implementation 184.

10 Clickjacking Prevention 185. Endpoints 185. Appendix D Visa Secure Response Codes 186. Secure Acceptance Hosted Checkout Integration Guide | 6. REVISIONS. Recent Revisions to This Document Release Changes Added the request field cryptocurrency_purchase, page 104. Changed the name of Visa Checkout to Visa Click to Pay and removed Visa Secure Remote Commerce. Updated the first important note in " Secure Acceptance Hosted Checkout ," page 13. Updated the request field payer_authentication_challenge_code. Added the profile_id and req_profile_id fields. See Chapter 4, "Payment Transactions," on page 72, and Appendix A, "API Fields," on page 95. Added the following healthcare request fields. See "Request Fields," page 96. health_care_#_amount health_care_#_amount_type industry_datatype Updated the first Important note in Appendix C, "Iframe Implementation," on page 184.