What is 3D Secure?

the payment services directive (psd2), introduced a new regulatory requirement strong customer authentication (sca) the aim of sca is to add an increased layer of security for card not present transactions, when making mobile and online payments to be compliant with sca, 3d secure 2 transactions have additional authentication and transaction information within the payment flow this new version of 3d secure, offers a better user experience and helps to minimise some of the friction the authentication adds to the checkout flow we support all versions of the 3d secure protocol up to and including version 3ds2 2 under no circumstances should merchants store or log any credit card details unless they are fully pci dss compliant this falls under your responsibility to ensure you do not produce code which circumvents our toolkits we do not accept any liability for this authenticating requests each request to judopay’s transaction api requires authentication depending on how you integrate with judopay, the following methods are recommended to authenticate requests using our sdks /paymentsession calling directly to our transaction api /paymentsession , or tokensecretauth the token and secret pair for more information on authenticating requests, see authentication methods docid\ ylkw5coh5nqnfq3j wjk2 authenticating with payment session the following example takes you through the payment flow using /paymentsession to authenticate the transaction 3ds2 flow create a /paymentsession use the reference returned from the response to populate the request header in step 2 send the authorisation request with the /payments request header, populated with the reference received in the /paymentsession response this step checks if the card is enrolled to support 3d secure 2 gathers the device and card details the response will determine whether the consumer is challenged for additional information the consumer is not challenged, the transaction continues and the consumer is re directed to the outcome screen if the consumer is challenged in order to process the transaction, the 3d secure 2 challenge screen is presented to the consumer to enter a code or password you will be notified via your webhook url when the consumer has successfully completed the challenge screen resume the transaction flow by calling the /resume3ds endpoint authorisation complete the consumer is redirected to the outcome screen 3d secure pass through you can use your own 3d secure authentication provider to perform authentication outside of judopay pass the authentication data from your external provider to us, using the /preauths or /payments endpoint enter the authentication data into the threedsecurempi block and we will send the result to the gateway as part of the transaction payload threedsecure2paymentwithexternalmpi example { "cardnumber" "4111111111111111", "cv2" "123", "expirydate" "01/25", "cardaddress" { "address1" "cardholder house", "address2" "1 cardholder street", "town" "cardholder town", "postcode" "ab1 2cd", "countrycode" "826" }, "judoid" "100100100", "yourconsumerreference" "2b45fd3f cee5 4e7e 874f 28051db65408", "yourpaymentreference" "6482c678 cad3 4efd b081 aeae7a89a134", "yourpaymentmetadata" { "internallocationref" "example", "internalid" 99 }, "amount" 1 01, "currency" "gbp", "cardholdername" "john doe", "threedsecurempi" { "dstransid" "41aadf4c e73f 4bd1 a0c4 acb2615a32af", "cavv" "ajkbcwuyzwaaaabugmktdaaaaaa=", "eci" "02", "threedsecureversion" "2 3 0" } } for more information, see our api reference documentation complete payment flow the complete end to end 3d secure payment flow complete payment flow withi n the 3d secure 2 payment flow, once the 3d secure payment is initiated the issuer will make a decision on whether they have enough authentication data to proceed with the transaction the response will determine whether the consumer is not challenged , the authentication is successful and the transaction continues (frictionless flow) the consumer is challenged for additional information (challenge flow) for more information on the frictionless and challenge flows, see how 3d secure works docid\ nnhsdt3gbi4j2lntgnikc