Authentication Request

Requirement

Build the Authentication Request with the Mandatory and Optional fields as detailed in our specification

The Authentication Request is the primary method that you will use to establish a Frictionless Flow. It contains a large number of fields, many of them optional, that provide the Card Issuer’s software with additional mitigation criteria. The specific risk management criteria applied will never be transparent, however broadly it is expected that more data generally will lead to fewer Challenge Flows.

Optional Data Example

Customer 1	Customer 2
Has been registered on the site for several years Frequently makes purchases for delivery to the same address as the billing address Their password has not been changed recently	Is a newly registered customer Delivery address differs from the Billing address They have never purchased from here before

Customer 1 is much less likely to require the Challenge Flow than Customer 2.

By including this detail in your Authentication Request, you provide the card issuer's system with multiple additional data points to base the decision on.

As has already been seen, Frictionless Flow is significantly quicker for the cardholder, so throughout this guide we strongly recommend that the maximum amount of optional data is passed in where possible.

JSON

URL

https://ppe.optpg.com/PayerAuthEntryPoint/v1/PayerAuthEntryPoint.svc/rest/Authenticate

Method

HTTP POST containing the fields below

XML

URL

https://ppe.optpg.com/PayerAuthEntryPoint/v1/PayerAuthEntryPoint.svc/soap

Method

A well-formed and valid XML document using a properly encoded SOAP envelope in the following form: An XML Declaration A SOAP Envelope formed of: A SOAP Header A SOAP Body

Code examples of both formats can be seen at the end of this section.

Authentication Request

A full breakdown of the Authentication Request options are shown below.

Authentication Request
Field Name	State	Data Type	Description
Reference	Optional	String	Your payment reference for this request. The reference can be viewed in reporting and is useful for diagnostics. We recommend using a Globally Unique Identifier (GUID) Maximum of 50 Alphanumeric Characters.
AuthenticationDetails	Mandatory	Object	Data that the platform uses to authenticate this request. Mandatory for all requests. See AuthenticationDetails for more information.
SendAttempt	Mandatory	Integer	Sequential increment based upon number of attempts to send,starting at 1. You should iterate this following any unsuccessful attempts, and monitor excessive attempts.
AcquirerId	Mandatory	Integer	Optomany supplied identifier for the acquirer the request is being processed for.
CardDetails	Mandatory	Object	The Card Data being used in this request. Mandatory for all requests. See CardDetails for more information.
CustomerDetails	Mandatory	Object	The customer details for this request. Mandatory for all requests. See CustomerDetails for more information.
Decoupled Authentication is not currently supported so the following two fields can be omitted.
DecoupledMaxTimeout	Optional	Integer	Indicates the maximum amount of time that the 3DS Requestor will wait for an ACS to provide the results of a Decoupled Authentication transaction (in minutes). Values between 1 and 10080 accepted
DecoupleRequestIndicator	Optional	Boolean	true Decouple Authentication requested false Decouple Authentication NOT requested
MessageCategory	Mandatory	String	Identifies the category of the message for a specific use case. 01 Payment 02 Non-payment e.g. ID Check, Card Registration If the request Amount is zero, then 02 should be used, otherwise 01 should be used.
MethodCompletionIndicator	Conditional	String	Indicates whether the 3DS Method successfully completed. Y Successfully completed. N Did not successfully complete. Required if 3DS Method initiated, but should be omittied in an initial Authorisation Request.
MethodNotificationUrl	Mandatory	String	The URL that will receive the notification of 3DS Method completion from the ACS. This is included in the data sent to MethodUrl when executing the MethodUrl process.
OrderDetails	Mandatory	Object	The order details for this request. Mandatory for all requests. See OrderDetails for more information.
RequestorChallengeIndicator	Optional	String	Indicates whether a challenge is requested for this transaction. For example: For 01-Payment, you may have concerns about the transaction, and request a challenge. For 02-Non Payment, a challenge may be necessary when adding a new card to a wallet. You should confirm any requirements here with the merchant Acquirer. 01 No Preference. 02 No challenge requested. 03 Challenge requested (3DS Requestor preference). 04 Challenge requested (Mandate). 05 No challenge requested (transactional risk analysis is already performed). 06 No challenge requested (Data share only). 07 No challenge requested (strong consumer authentication is already performed). 08 No challenge requested (utilise whitelist exemption if no challenge required). 09 Challenge requested (whitelist prompt requested if challenge required).
RequestorDetails	Mandatory	Object	The requestor details for this request. Mandatory for all requests. See RequestorDetails for more information.
SdkDetails	Conditional	Object	The SDK details for this request. Not required for Browser Flow (`DeviceChannel`=`01`), so should be omitted.
ThreeDsServerTransactionId	Conditional	String	A unique identifier for the transaction that will be the same as the 3DS Server Transaction ID in the AReq message and will have the same format as specified in the Authentication Response This will be sent to the ACS in the 3DS Method HTTP POST and will be returned in the POST to the 3DS Method Notification URL. It is only required after you've followed the MethodUrl process.
ThreeRIIndicator	Conditional	String	Indicates the type of Authentication request. This data element provides additional information to the ACS to determine the best approach for handling an authentication request. 01 Payment Transaction. 02 Recurring Transaction. 03 Instalment transaction. 04 Add card. 05 Maintain card. 06 Cardholder verification as part of EMV Token ID & V. This field is considered Mandatory if using 3RI (Merchant Initiated) transactions.

AuthenticationDetails

Authentication Details
Field Name	State	Data Type	Description
MerchantSignatureKeyId	Mandatory	Integer	Gateway supports multiple signature keys to be stored against a merchants system. The ID for the required signature must be passed here. Most merchants will only have one signature key and this value will be 1
RequestDateTimeUtc	Mandatory	dateTime	Date and time of the transmission of the message, in UTC format. YYYY-MM-DDTHH:MM:SS format.
RequestType	Mandatory	String	Type of message being sent to the gateway. ThreeDSecureV2AuthenticationRequest should be used
MerchantStoreId	Mandatory	Integer	ID of the Merchant Store being used for this transaction. This will be provided as part of your test credentials.
SignatureType	Mandatory	String	Type of signature used. Hmac256 must be used.
Signature	Mandatory	String	The signature generated for this request.

CardDetails

Card Details
Field Name	State	Data Type	Description
CardCollectionId	Mandatory	Integer	Determines which set of card validation details to be used. Unless told otherwise by Optomany please set this to 1
CardSchemeId	Mandatory	Integer	ID of the card scheme being used in the transaction. See Scheme ID's for more details.
EncryptedCardData	Mandatory	String	Encrypted card data returned to the merchant as a result of the Card Encryption Request
EncryptedCardDataFormatType	Mandatory	String	Format of the encrypted card information. This should be Standard.
EncryptionKeyId	Mandatory	String	ID of the encryption key being used in the transaction. Default value is 1 but merchants may have multiple keys
EncryptionType	Mandatory	String	Encryption type used. The default should be Rsa.
IV	Mandatory	String	Not used

CustomerDetails

Customer Details
Field Name	State	Data Type	Description
AccountDetails	Optional	Object	The Account Details object contains optional information about the Cardholder Account.
AddressMatch	Optional	String	Indicates whether the Cardholder Shipping Address and Cardholder Billing Address are the same. Y Shipping Address matches Billing address. N Shipping Address does not match Billing address.
BillingAddress	Conditional	Object	Cardholder billing address associated with the card used for this purchase. Required unless market or regional mandate restricts sending this information.
BrowserDetails	Conditional	Object	Contains the cardholders browser information. Mandatory for browser based transactions where Device Channel is set to 02.
DeliveryDetails	Conditional	Object	Contains the cardholders specified delivery details. Required unless market or regional mandate restricts sending this information.
Email	Conditional	String	The email address associated with the account that is either entered by the Cardholder, or is on file with the 3DS Requestor. Shall meet requirements of Section 3.4 of IETF Required unless market or regional mandate restricts sending this information.
HomePhone	Conditional	String	The home phone number provided by the Cardholder. Phone numbers must be specified in the following format: CountryCode-Subscriber (e.g. 1-1234567899) CountryCode 1-3 characters Subscriber Variable, max 15 characters. Required unless market or regional mandate restricts sending this information.
MobilePhone	Conditional	String	The mobile phone number provided by the Cardholder. Phone numbers must be specified in the following format: CountryCode-Subscriber (e.g. 1-1234567899) CountryCode 1-3 characters Subscriber Variable, max 15 characters. Required unless market or regional mandate restricts sending this information.
Name	Conditional	String	Name of the Cardholder. Length: Variable, 2-45 Characters Alphanumeric & Special Characters as per ISO/IEC 8859 Common Character Set. Required unless market or regional mandate restricts sending this information.
WorkPhone	Conditional	String	The work phone number provided by the Cardholder. Phone numbers must be specified in the following format: CountryCode-Subscriber (e.g. 1-1234567899) CountryCode 1-3 characters Subscriber Variable, max 15 characters. Required unless market or regional mandate restricts sending this information.

AccountDetails

Account Details
Field Name	State	Data Type	Description
AccountAgeIndicator	Optional	String	Length of time that the cardholder has had the account with the 3DS Requestor. 01 No account (guest check-out) 02 Created during this transaction 03 Less than 30 days 04 30-60 days 05 More than 60 days
AccountChangeDate	Optional	dateTime	Date that the cardholder's account with the 3DS Requestor was last changed, including Billing or Shipping address, new payment account, or new user(s) added. YYYY-MM-DDTHH:MM:SS format.
AccountChangeIndicator	Optional	String	Length of time since the cardholder’s account information with the 3DS Requestor was last changed, including Billing or Shipping address, new payment account, or new user(s) added. 01 Changed during this transaction 02 Less than 30 days 03 30-60 days 04 More than 60 days
AccountDate	Optional	dateTime	Date that the cardholder opened the account with the 3DS Requestor. YYYY-MM-DDTHH:MM:SS format.
AccountDayTransactions	Optional	Integer	Number of transactions (successful and abandoned) for this cardholder account with the 3DS Requestor across all payment accounts in the previous 24 hours.
AccountId	Optional	String	Additional information about the account optionally provided by the 3DS Requestor. Length: Variable, maximum 64 characters
AccountPasswordChangeDate	Optional	dateTime	Date that cardholder’s account with the 3DS Requestor had a password change or account reset. YYYY-MM-DDTHH:MM:SS format.
AccountPasswordChangeIndicator	Optional	String	Indicates the length of time since the cardholder's account with the 3DS Requestor had a password change or account reset. 01 No change 02 Changed during this transaction 03 Less than 30 days 04 30-60 days 05 More than 60 days
AccountProvisioningAttempts	Optional	Integer	Number of Add Card attempts in the last 24 hours.
AccountPurchaseCount	Optional	Integer	Number of purchases with this cardholder account during the previous six months.
AccountType	Conditional	String	Indicates the type of account. For example, for a multi-account card product. 01 Not applicable. 02 Credit 03 Debit
AccountYearTransactions	Optional	Integer	Number of transactions (successful and abandoned) for this cardholder account with the 3DS Requestor across all payment accounts in the previous year.
PaymentAccountAgeIndicator	Optional	String	Indicates the length of time that the payment account was enrolled in the cardholder's account with the 3DS Requestor. 01 No account (guest check-out) 02 Created during this transaction 03 Less than 30 days 04 30-60 days 05 More than 60 days
PaymentAccountDate	Optional	dateTime	Date that the payment account was enrolled in the cardholder's account with the 3DS Requestor. YYYY-MM-DDTHH:MM:SS format.
PriorAuthenticationData	Optional	String	Data that documents and supports a specific authentication process. In the current version of the specification this data element is not defined in detail, however the Intention is that for each 3DS Requestor Authentication Method, this field carry data that the ACS can use to verify the authentication process. In future versions of the specification, these details are expected to be included. Length: maximum 2048 characters
PriorAuthenticationMethod	Optional	String	Mechanism used by the Cardholder to previously authenticate to the 3DS Requestor. 01 Frictionless authentication occurred by ACS 02 Cardholder challenge occurred by ACS 03 AVS verified 04 Other issuer methods
PriorAuthenticationReference	Optional	String	This data element provides additional information to the ACS to determine the best approach for handing a request. Length: 36 characters This data element contains an ACS Transaction ID for a prior authenticated transaction (for example, the first recurring transaction that was authenticated with the cardholder).
PriorAuthenticationTimestamp	Optional	String	Date and time in UTC of the prior cardholder authentication. Length: 12 characters YYYYMMDDHHMM format.
SuspiciousAccountActivity	Optional	String	Indicates whether the 3DS Requestor has experienced suspicious activity (including previous fraud) on the cardholder account. 01 No suspicious activity has been observed 02 Suspicious activity has been observed

BillingAddress

Billing Address
Field Name	State	Data Type	Description
City	Conditional	String	The City of the Cardholder Length: Variable, max 50 characters. Required unless market or regional mandate restricts sending this information.
Country	Conditional	String	The country of the cardholder. Length: 3 characters. Shall be the ISO 3166-1 numeric three-digit country code i.e. 826 for United Kingdom Required if Cardholder BillingAddress State is present
Line1	Conditional	String	First line of the street address or equivalent local of the cardholder address. Length: Max 50 characters. Required (if available) unless market or regional mandate restricts sending this information.
Line2	Conditional	String	Second line of the street address or equivalent local of the cardholder address. Length: Max 50 characters. Required (if available) unless market or regional mandate restricts sending this information.
Line3	Conditional	String	Third line of the street address or equivalent local of the cardholder address. Length: Max 50 characters. Required (if available) unless market or regional mandate restricts sending this information.
PostalCode	Conditional	String	Zip or other Postal code of the cardholders billing address. Length: Max 16 characters. Required (if available) unless market or regional mandate restricts sending this information.
State	Optional	String	The state or province of the cardholder. Length: 3 characters. Should be the country subdivision code defined in ISO 3166-1

BrowserDetails

Browser Details
Field Name	State	Data Type	Description
AcceptHeader	Mandatory	String	Exact content of the HTTP accept headers as sent to the 3DS Requestor from the Cardholder's browser. Length: Variable, maximum 2048 characters. If the total length of the accept header sent by the browser exceeds 2048 characters, the 3DS Server truncates the excess portion.
ChallengeWindowSize	Mandatory	Integer	Dimensions of the challenge window that has been displayed to the Cardholder. The ACS shall reply with content that is formatted to appropriately render in this window to provide the best possible user experience. Preconfigured sizes are width x height in pixels of the window displayed in the Cardholder browser window. 01 250 x 400 04 600 x 400 02 390 x 400 05 Full Screen 03 500 x 600
IpAddress	Conditional	String	IP address of the browser as returned by the HTTP headers to the 3DS Requestor. Length: Variable, maximum 45 characters. IPv4 address is represented in the dotted decimal format of 4 sets of decimal numbers separated by dots. The decimal number in each and every set is in the range 0 to 255. Example IPv4 address: 1.12.123.255 IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets. The groups are separated by colons (:). Example IPv6 address: 2011:0db8:85a3:0101:0101:8a2e:0370:7334 Required unless market or regional mandate restricts sending this information.
JavaEnabled	Conditional	Boolean	Confirms whether JavaScript is enabled in the cardholder's browser. true JavaScript enabled. false JavaScript not enabled. Required when JavaEnabled = true, otherwise Optional.
Language	Mandatory	String	Value representing the browser language as defined in IETF BCP47. Returned from navigator.language property. Length: Variable, 1-8 Characters.
ScreenColorDepth	Conditional	String	Value representing the bit depth of the colour palette for displaying images, in bits per pixel. Obtained from Cardholder browser using the screen.colorDepth property. 1 1 bit. 16 16 bit. 4 4 bit. 24 24 bit. 8 8 bit. 32 32 bit. 15 15 bit. 48 48 bit. Required when JavaEnabled = true, otherwise Optional.
ScreenHeight	Conditional	String	Total height of the Cardholder's screen in pixels. Value is returned from the screen.height property. Length: Variable, 1-6 numeric characters. Required when JavaEnabled = true, otherwise Optional.
ScreenWidth	Conditional	String	Total width of the cardholder's screen in pixels. Value is returned from the screen.width property. Length: Variable, 1-6 numeric characters. Required when JavaEnabled = true, otherwise Optional.
TimeZone	Conditional	String	Time-zone offset in minutes between UTC and the Cardholder browser local time. Note that the offset is positive if the local time zone is behind UTC and negative if it is ahead. Length: Variable, 1-5 characters. Value is returned from the getTimezoneOffset() method. Examples: UTC -5 Hours 300 or +300 UTC +5 Hours -300 Required when JavaEnabled = true, otherwise Optional.
userAgent	Mandatory	String	Exact content of the HTTP user-agent header. Length: Variable, maximum 2048 characters. Note: If the total length of the User-Agent sent by the browser exceeds 2048 characters, the 3DS Server truncates the excess portion.

DeliveryDetails

Delivery Details
Field Name	State	Data Type	Description
DeliveryAddress	Conditional	Object	The shipping address associated with this purchase. Required unless market or regional mandate restricts sending this information.
DeliveryAddressUsageDate	Optional	String	Date when this shipping address used for this transaction was first used with the 3DS Requestor.
DeliveryAddressUsageIndicator	Optional	String	Indicates when the shipping address used for this transaction was first used with the 3DS Requestor. 01 This transaction 02 Less than 30 days ago 03 30-60 days ago 04 More than 60 days ago
DeliveryEmailAddress	Optional	String	For Electronic delivery, the email address to which the merchandise was delivered. Length: maximum 254 characters.
DeliveryIndicator	Optional	String	Indicates shipping method chosen for the transaction. Merchants must choose the Shipping Indicator code that most accurately describes the cardholder’s specific transaction, not their general business. If one or more items are included in the sale, use the Shipping Indicator code for the physical goods, or if all digital goods, use the Shipping Indicator code that describes the most expensive item. 01 Ship to cardholder’s billing address 02 Ship to another verified address on file with merchant 03 Ship to address that is different than the cardholder’s billing address 04 “Ship to Store” / Pick-up at local store (Store address shall be populated in shipping address fields) 05 Digital goods (includes online services, electronic gift cards and redemption codes) 06 Travel and Event tickets, not shipped 07 Other (for example, Gaming, digital services not shipped, emedia subscriptions, etc.)
DeliveryNameIndicator	Optional	String	Indicates if the Cardholder Name on the account is identical to the shipping Name used for this transaction. 01 Account Name identical to shipping Name 02 Account Name different from shipping Name
DeliveryTimeFrame	Optional	String	Indicates the merchandise delivery timeframe. 01 Electronic Delivery 02 Same day shipping 03 Overnight shipping 04 Two-day or more shipping

DeliveryDetails.DeliveryAddress

note

This object contains the same data fields as BillingAddress but may differ if the two addresses do not match.

Delivery Address
Field Name	State	Data Type	Description
City	Conditional	String	The City of the delivery address Length: Variable, max 50 characters. Required unless market or regional mandate restricts sending this information.
Country	Conditional	String	The country of the delivery address. Length: 3 characters. Shall be the ISO 3166-1 numeric three-digit country code i.e. 826 for United Kingdom Required if Delivery Address State is present
Line1	Conditional	String	First line of the street address or equivalent local of the delivery address. Length: Max 50 characters. Required (if available) unless market or regional mandate restricts sending this information.
Line2	Conditional	String	Second line of the street address or equivalent local of the delivery address. Length: Max 50 characters. Required (if available) unless market or regional mandate restricts sending this information.
Line3	Conditional	String	Third line of the street address or equivalent local of the delivery address. Length: Max 50 characters. Required (if available) unless market or regional mandate restricts sending this information.
PostalCode	Conditional	String	Zip or other Postal code of the delivery address. Length: Max 16 characters. Required (if available) unless market or regional mandate restricts sending this information.
State	Optional	String	The state or province of the delivery address. Length: 3 characters. Should be the country subdivision code defined in ISO 3166-1

OrderDetails

OrderDetails
Field Name	State	Data Type	Description
Amount	Mandatory	String	Purchase amount in minor units of currency with all punctuation removed. When used in conjunction with the Purchase Currency Exponent field, proper punctuation can be calculated. Length: Variable, maximum 48 characters. Example: purchase amount is GBP 123.45 Example values accepted: 12345 012345 0012345
AmountCurrencyId	Mandatory	String	Currency in which purchase amount is expressed. Length: 3 characters, numeric. ISO 4217 three-digit currency code e.g. 826 for GBP.
AmountExponent	Mandatory	String	Minor units of currency as specified in the ISO 4217 currency exponent. Example: GBP = 2
AuthenticationIndictor	Mandatory	String	Indicates the type of Authentication request. This data element provides additional information to the ACS to determine the best approach for handing an authentication request. 01 Payment transaction 02 Recurring transaction 03 Instalment transaction 04 Add card 05 Maintain card 06 Cardholder verification as part of EMV token ID & V
deviceChannel	Mandatory	String	Indicates the type of channel interface being used to initiate the transaction. 01 App-based (APP) 02 Browser (BRW) 03 3DS Requester Initiated (3RI) Default value 02
giftCardAmount	Optional	Integer	For prepaid or gift card purchase, the purchase amount total of prepaid or gift card(s) in major units (for example, GBP 123.45 is 123).
giftCardCount	Optional	Integer	For prepaid or gift card purchase, total count of individual prepaid or gift cards/codes purchased.
giftCardCurrencyId	Optional	String	For prepaid or gift card purchase, ISO 4217 three-digit currency code of the gift card.
InstallmentsCount	Conditional	Integer	Indicates the maximum number of authorisations permitted for instalment payments. Length: Variable, maximum 3 characters Required if the Merchant and Cardholder have agreed to instalment payments, i.e. if 3DS Requestor AuthenticationIndicator is 03 - Instalment. Omitted if not an instalment payment authentication.
PreOrderDate	Optional	Datetime	For a pre-ordered purchase, the expected date that the merchandise will be available.
PreOrderPurchaseIndicator	Optional	String	Indicates whether the Cardholder is placing an order for merchandise with a future availability or release date. 01 Merchandise available 02 Future availability
PurchaseDate	Conditional	Datetime	Date and time of the purchase expressed in UTC. Required for 02-NPA if 3DS Requestor AuthenticationIndicator = 02 or 03.
RecurringExpiryDate	Conditional	Datetime	Date after which no further authorisations shall be performed. Required if 3DS Requestor AuthenticationIndicator = 02 or 03.
RecurringFrequency	Conditional	String	Indicates the minimum number of days between authorisations. Length: Variable, max. 4 characters e.g. 28 028 0028 Required if 3DS Requestor AuthenticationIndicator = 02 or 03.
ReOrderItemsIndicator	Optional	String	Indicates whether the cardholder is reordering previously purchased merchandise. 01 First time ordered 02 Reordered
reorderItemsIndicator	Optional	String	Indicates whether the cardholder is reordering previously purchased merchandise. 01 First time ordered 02 Reordered
transactionType	Conditional	String	Identifies the type of transaction being authenticated. 01 Goods/service purchase 03 Check acceptance 10 Account funding 11 Quasi-Cash transaction 28 Prepaid activation and load This field is required in some regions or markets, but is otherwise optional.

RequestorDetails

note

'3DS Requestor' is broadly equivalent to the merchant, but may differ in your solution.

RequestorDetails
Field Name	State	Data Type	Description
MerchantCategoryCode	Mandatory	String	DS-specific code describing the Merchant’s type of business, product or service. Length: 4 characters.
MerchantCountryCode	Mandatory	String	Country Code of the Merchant, as defined by their Acquirer or Payment System. Length: 3 characters. SO 3166-1 numeric country code.
MerchantName	Mandatory	String	Merchant name assigned by the Acquirer or Payment System Length: Variable, max 40 characters.
MerchantNumber	Mandatory	String	Acquirer-assigned Merchant identifier. Length: Variable, maximum 35 characters.
NotificationUrl	Mandatory	String	Fully qualified URL of the system that receives the CRes message or Error Message. The CRes message is posted by the ACS through the Cardholder browser at the end of the challenge and receipt of the RRes message. Length: Variable, maximum 256 characters. Mandatory for Browser based payments.
requestorAuthenticationData	Optional	String	Data that documents and supports a specific authentication process. In the current version of the specification, this data element is not defined in detail, however the intention is that for each 3DS Requestor Authentication Method, this field carry data that the ACS can use to verify the authentication process. For example, if the 3DS Requestor Authentication Method is: 03 then this element can carry information about the provider of the federated ID and related information. 06 then this element can carry the FIDO attestation data (including the signature). 07 then this element can carry FIDO Attestation data with the FIDO assurance data signed. 08 then this element can carry the SRC assurance data. Length: Maximum 20,000 characters.
requestorAuthenticationMethod	Optional	String	Mechanism used by the Cardholder to authenticate to the 3DS Requestor. 01 No 3DS Requestor authentication (e.g. guest). 02 Login to the cardholder account at the 3DS Requestor system using 3DS Requestor system using 3DS Requestor’s own credentials. 03 Login to the cardholder account at the 3DS Requestor system using federated ID. 04 Login to the cardholder account at the 3DS Requestor system using issuer credentials. 05 Login to the cardholder account at the 3DS Requestor system using third-party authentication. 06 Login to the cardholder account at the 3DS Requestor system using FIDO Authenticator. 07 Login to the cardholder account at the 3DS Requestor system using FIDO Authenticator (FIDO assurance data signed). 08 SRC Assurance Data.
requestorAuthenticationTimeStamp	Optional	Datetime	Date and time in UTC of the cardholder authentication. Format: YYYYMMDDHHMM
RequestorId	Mandatory	String	DS assigned 3DS Requestor identifier. Each DS will provide a unique ID to each 3DS Requestor on an individual basis. Length: Variable, maximum 35 characters.
RequestorName	Mandatory	String	DS assigned 3DS Requestor name. Each DS will provide a unique name to each 3DS Requestor on an individual basis. Length: Variable, max 40 characters.
RequestorUrl	Optional	String	Fully qualified URL of 3DS Requestor website or customer care site. This data element provides additional information to the receiving 3-D Secure system if a problem arises and should provide contact information. Length: Variable, maximum 2048 characters. For example: http://server.domainname.com

Example Code Requests

JSON

{
    "Reference":"TestTransaction",
    "AuthenticationDetails":{
        "MerchantSignatureKeyId":32767,
        "RequestDateTimeUtc":"\/Date(928146000000+0100)\/",
        "RequestType":"String content",
        "MerchantStoreId":2147483647,
        "SignatureType":0,
        "Signature":"String content"
    },
    "SendAttempt":32767,
    "AcquirerId":2147483647,
    "CardDetails":{
        "CardCollectionId":2147483647,
        "CardSchemeId":2147483647,
        "EncryptedCardData":"String content",
        "EncryptedCardDataFormatType":0,
        "EncryptionKeyId":"String content",
        "EncryptionType":0,
        "IV":"String content"
    },
    "CustomerDetails":{
        "AccountDetails":{
            "AccountAgeIndicator":"String content",
            "AccountChangeDate":"\/Date(928146000000+0100)\/",
            "AccountChangeIndicator":"String content",
            "AccountDate":"\/Date(928146000000+0100)\/",
            "AccountDayTransactions":2147483647,
            "AccountId":"String content",
            "AccountPasswordChangeDate":"\/Date(928146000000+0100)\/",
            "AccountPasswordChangeIndicator":"String content",
            "AccountProvisioningAttempts":2147483647,
            "AccountPurchaseCount":2147483647,
            "AccountType":"String content",
            "AccountYearTransactions":2147483647,
            "PaymentAccountAgeIndicator":"String content",
            "PaymentAccountDate":"\/Date(928146000000+0100)\/",
            "PriorAuthenticationData":"String content",
            "PriorAuthenticationMethod":"String content",
            "PriorAuthenticationReference":"String content",
            "PriorAuthenticationTimestamp":"String content",
            "SuspiciousAccountActivity":"String content"
        },
        "AddressMatch":"String content",
        "BillingAddress":{
            "City":"String content",
            "Country":"String content",
            "Line1":"String content",
            "Line2":"String content",
            "Line3":"String content",
            "PostalCode":"String content",
            "State":"String content"
        },
        "BrowserDetails":{
            "AcceptHeader":"String content",
            "ChallengeWindowSize":2147483647,
            "IpAddress":"String content",
            "JavaEnabled":true,
            "JavaScriptEnabled":true,
            "Language":"String content",
            "ScreenColorDepth":"String content",
            "ScreenHeight":"String content",
            "ScreenWidth":"String content",
            "TimeZone":"String content",
            "UserAgent":"String content"
        },
        "DeliveryDetails":{
            "DeliveryAddress":{
                "City":"String content",
                "Country":"String content",
                "Line1":"String content",
                "Line2":"String content",
                "Line3":"String content",
                "PostalCode":"String content",
                "State":"String content"
            },
            "DeliveryAddressUsageDate":"\/Date(928146000000+0100)\/",
            "DeliveryAddressUsageIndicator":"String content",
            "DeliveryEmailAddress":"String content",
            "DeliveryIndicator":"String content",
            "DeliveryNameIndicator":"String content",
            "DeliveryTimeFrame":"String content"
        },
        "Email":"String content",
        "HomePhone":"String content",
        "MobilePhone":"String content",
        "Name":"String content",
        "WorkPhone":"String content"
    },
    "DecoupledMaxTimeout":2147483647,
    "DecoupledRequestIndicator":true,
    "MessageCategory":"String content",
    "MethodCompletionIndicator":"String content",
    "MethodNotificationUrl":"String content",
    "OrderDetails":{
        "Amount":"String content",
        "AmountCurrencyId":"String content",
        "AmountExponent":"String content",
        "AuthenticationIndicator":"String content",
        "DeviceChannel":"String content",
        "GiftCardAmount":2147483647,
        "GiftCardCount":2147483647,
        "GiftCardCurrencyId":"String content",
        "InstallmentsCount":2147483647,
        "PreOrderDate":"\/Date(928146000000+0100)\/",
        "PreOrderPurchaseIndicator":"String content",
        "PurchaseDate":"\/Date(928146000000+0100)\/",
        "RecurringExpiryDate":"\/Date(928146000000+0100)\/",
        "RecurringFrequency":"String content",
        "ReorderItemsIndicator":"String content",
        "TransactionType":"String content"
    },
    "RequestorChallengeIndicator":"String content",
    "RequestorDetails":{
        "MerchantCategoryCode":"String content",
        "MerchantCountryCode":"String content",
        "MerchantName":"String content",
        "MerchantNumber":"String content",
        "NotificationUrl":"String content",
        "RequestorAuthenticationData":"String content",
        "RequestorAuthenticationMethod":"String content",
        "RequestorAuthenticationTimeStamp":"\/Date(928146000000+0100)\/",
        "RequestorId":"String content",
        "RequestorName":"String content",
        "RequestorUrl":"String content"
    },
    "SdkDetails":{
        "ClientAuthRequest":"String content",
        "EncryptedDeviceInfo":"String content",
        "SdkAppId":"String content",
        "SdkEphemeralPublicKey":"String content",
        "SdkReferenceNumber":"String content",
        "SdkTransId":"String content"
    },
    "ThreeDsServerTransactionId":"String content",
    "ThreeRIIndicator":"String content"
}

XML

<ThreeDSecureV2AuthenticationRequest>
  <Reference>String content</Reference>
  <AuthenticationDetails>
    <MerchantSignatureKeyId>32767</MerchantSignatureKeyId>
    <RequestDateTimeUtc>1999-05-31T11:20:00</RequestDateTimeUtc>
    <RequestType>String content</RequestType>
    <MerchantStoreId>2147483647</MerchantStoreId>
    <SignatureType>Hmac256</SignatureType>
    <Signature>String content</Signature>
  </AuthenticationDetails>
  <SendAttempt>1</SendAttempt>
  <AcquirerId>2147483647</AcquirerId>
  <CardDetails>
    <CardCollectionId>2147483647</CardCollectionId>
    <CardSchemeId>2147483647</CardSchemeId>
    <EncryptedCardData>String content</EncryptedCardData>
    <EncryptedCardDataFormatType>Standard</EncryptedCardDataFormatType>
    <EncryptionKeyId>String content</EncryptionKeyId>
    <EncryptionType>Dukpt</EncryptionType>
    <IV>String content</IV>
  </CardDetails>
  <CustomerDetails>
    <AccountDetails>
      <AccountAgeIndicator>String content</AccountAgeIndicator>
      <AccountChangeDate>1999-05-31T11:20:00</AccountChangeDate>
      <AccountChangeIndicator>String content</AccountChangeIndicator>
      <AccountDate>1999-05-31T11:20:00</AccountDate>
      <AccountDayTransactions>2147483647</AccountDayTransactions>
      <AccountId>String content</AccountId>
      <AccountPasswordChangeDate>1999-05-31T11:20:00</AccountPasswordChangeDate>
      <AccountPasswordChangeIndicator>String content</AccountPasswordChangeIndicator>
      <AccountProvisioningAttempts>2147483647</AccountProvisioningAttempts>
      <AccountPurchaseCount>2147483647</AccountPurchaseCount>
      <AccountType>String content</AccountType>
      <AccountYearTransactions>2147483647</AccountYearTransactions>
      <PaymentAccountAgeIndicator>String content</PaymentAccountAgeIndicator>
      <PaymentAccountDate>1999-05-31T11:20:00</PaymentAccountDate>
      <PriorAuthenticationData>String content</PriorAuthenticationData>
      <PriorAuthenticationMethod>String content</PriorAuthenticationMethod>
      <PriorAuthenticationReference>String content</PriorAuthenticationReference>
      <PriorAuthenticationTimestamp>String content</PriorAuthenticationTimestamp>
      <SuspiciousAccountActivity>String content</SuspiciousAccountActivity>
    </AccountDetails>
    <AddressMatch>String content</AddressMatch>
    <BillingAddress>
      <City>String content</City>
      <Country>String content</Country>
      <Line1>String content</Line1>
      <Line2>String content</Line2>
      <Line3>String content</Line3>
      <PostalCode>String content</PostalCode>
      <State>String content</State>
    </BillingAddress>
    <BrowserDetails>
      <AcceptHeader>String content</AcceptHeader>
      <ChallengeWindowSize>2147483647</ChallengeWindowSize>
      <IpAddress>String content</IpAddress>
      <JavaEnabled>true</JavaEnabled>
      <JavaScriptEnabled>true</JavaScriptEnabled>
      <Language>String content</Language>
      <ScreenColorDepth>String content</ScreenColorDepth>
      <ScreenHeight>String content</ScreenHeight>
      <ScreenWidth>String content</ScreenWidth>
      <TimeZone>String content</TimeZone>
      <UserAgent>String content</UserAgent>
    </BrowserDetails>
    <DeliveryDetails>
      <DeliveryAddress>
        <City>String content</City>
        <Country>String content</Country>
        <Line1>String content</Line1>
        <Line2>String content</Line2>
        <Line3>String content</Line3>
        <PostalCode>String content</PostalCode>
        <State>String content</State>
      </DeliveryAddress>
      <DeliveryAddressUsageDate>1999-05-31T11:20:00</DeliveryAddressUsageDate>
      <DeliveryAddressUsageIndicator>String content</DeliveryAddressUsageIndicator>
      <DeliveryEmailAddress>String content</DeliveryEmailAddress>
      <DeliveryIndicator>String content</DeliveryIndicator>
      <DeliveryNameIndicator>String content</DeliveryNameIndicator>
      <DeliveryTimeFrame>String content</DeliveryTimeFrame>
    </DeliveryDetails>
    <Email>String content</Email>
    <HomePhone>String content</HomePhone>
    <MobilePhone>String content</MobilePhone>
    <Name>String content</Name>
    <WorkPhone>String content</WorkPhone>
  </CustomerDetails>
  <DecoupledMaxTimeout>2147483647</DecoupledMaxTimeout>
  <DecoupledRequestIndicator>true</DecoupledRequestIndicator>
  <MessageCategory>String content</MessageCategory>
  <MethodCompletionIndicator>String content</MethodCompletionIndicator>
  <MethodNotificationUrl>String content</MethodNotificationUrl>
  <OrderDetails>
    <Amount>String content</Amount>
    <AmountCurrencyId>String content</AmountCurrencyId>
    <AmountExponent>String content</AmountExponent>
    <AuthenticationIndicator>String content</AuthenticationIndicator>
    <DeviceChannel>String content</DeviceChannel>
    <GiftCardAmount>2147483647</GiftCardAmount>
    <GiftCardCount>2147483647</GiftCardCount>
    <GiftCardCurrencyId>String content</GiftCardCurrencyId>
    <InstallmentsCount>2147483647</InstallmentsCount>
    <PreOrderDate>1999-05-31T11:20:00</PreOrderDate>
    <PreOrderPurchaseIndicator>String content</PreOrderPurchaseIndicator>
    <PurchaseDate>1999-05-31T11:20:00</PurchaseDate>
    <RecurringExpiryDate>1999-05-31T11:20:00</RecurringExpiryDate>
    <RecurringFrequency>String content</RecurringFrequency>
    <ReorderItemsIndicator>String content</ReorderItemsIndicator>
    <TransactionType>String content</TransactionType>
  </OrderDetails>
  <RequestorChallengeIndicator>String content</RequestorChallengeIndicator>
  <RequestorDetails>
    <MerchantCategoryCode>String content</MerchantCategoryCode>
    <MerchantCountryCode>String content</MerchantCountryCode>
    <MerchantName>String content</MerchantName>
    <MerchantNumber>String content</MerchantNumber>
    <NotificationUrl>String content</NotificationUrl>
    <RequestorAuthenticationData>String content</RequestorAuthenticationData>
    <RequestorAuthenticationMethod>String content</RequestorAuthenticationMethod>
    <RequestorAuthenticationTimeStamp>1999-05-31T11:20:00</RequestorAuthenticationTimeStamp>
    <RequestorId>String content</RequestorId>
    <RequestorName>String content</RequestorName>
    <RequestorUrl>String content</RequestorUrl>
  </RequestorDetails>
  <SdkDetails>
    <ClientAuthRequest>String content</ClientAuthRequest>
    <EncryptedDeviceInfo>String content</EncryptedDeviceInfo>
    <SdkAppId>String content</SdkAppId>
    <SdkEphemeralPublicKey>String content</SdkEphemeralPublicKey>
    <SdkReferenceNumber>String content</SdkReferenceNumber>
    <SdkTransId>String content</SdkTransId>
  </SdkDetails>
  <ThreeDsServerTransactionId>String content</ThreeDsServerTransactionId>
  <ThreeRIIndicator>String content</ThreeRIIndicator>
</ThreeDSecureV2AuthenticationRequest>