Strong Customer Authentication (SCA) is a requirement related to the Second Payments Services Directive (PSD2). It applies to all electronic payments within the European Economic Area. The SCA requires that all applicable payments comply with specific authentication requirements. The most common method for supporting SCA is 3-D Secure (3DS).
To assist with SCA and to help prevent transactions from unnecessary declines, Authorize.Net is upgrading your gateway account to Cybersource, which will allow you to use 3DS and provide access to a host of new products and services that can help your business continue to grow.
Since 14th September, the requirements for SCA officially apply. However, the European Banking Authority (EBA) recently issued an opinion, taking the view that migration plans to SCA for ecommerce transactions should be completed within 15 months, by 31 December 2020.
This means we will not be closing your Authorize.Net account until later next year to allow more time for you to fully transition to your new Cybersource account. We still highly encourage you to upgrade to Cybersource as soon as possible, in order to take advantage of all the benefits your new account offers and to ensure you support SCA ahead of any possible enforcement. We also recommend contacting your shopping cart or web developer to build out a transition plan and timeline.
Watch our account upgrade webinar
Walk through the upcoming account registration process, start to finish, including an overview of your new account settings. Register now to watch the replay.
Use the jump links below to skip to different sections.
PSD2 is a European directive that regulates payment services in Europe and focuses on improving security and minimising overall fraud potential.
SCA requires the use of two different forms of authentication along with the transaction.
3DS is an authentication tool designed to support SCA and is currently used by the card schemes to verify a customer. 3DS is available through Cybersource, many shopping carts, and various other third-party authentication services.
Like Authorize.Net, Cybersource is a leading provider of payment management solutions, with a focus on global-scale businesses. Authorize.Net and Cybersource have both been a part of Visa since 2010.
Cybersource provides a variety of products and services to support your business, including accepting payments in 190+ countries/territories and 40+ currencies, global tax tools, currency conversion, alternative payments and more.
Cybersource allows you to use 3DS to support SCA, which is a PSD2 requirement.
Using 3DS to support SCA may add an extra step to your customer’s checkout experience that allows them to authenticate securely.
Authorize.Net Hosted Payment Form Solutions:
If you are using a solution that utilises the Authorize.Net-hosted payment form, you will need to update your website or payment solution to use one compatible with Cybersource.
Review your three update options here. Be sure to check with your developer/shopping cart provider for help determining which option you should choose.
All other Authorize.Net payment solutions and shopping carts
We are creating a solution that will allow you to keep your current integration or shopping cart provider. In short, we are creating a connection that will pass the information you collect via your current Authorize.Net payment solution to your new Cybersource gateway account. However, to satisfy SCA, you must still implement 3DS, either through Cybersource or another provider. To start using 3DS, you will have to do some integration work. The new 3DS fields collected will be processed using your new Cybersource account.
As a result, we highly recommend moving to a Cybersource API or a Cybersource compatible shopping cart, to ensure you enjoy all of the benefits that your Cybersource account has to offer.
To start using a Cybersource compatible integration, there are three options available to you. Be sure to check with your developer/shopping cart provider for help determining which option you should choose.
Your new Cybersource account will keep the same payment gateway, transaction and any additional service fees you are currently paying on your Authorize.Net account. However, 3DS is a separate service and has its own service fees. Fee information will be available and communicated to you soon.
Since 14th September, the requirements for SCA officially apply. However, the European Banking Authority (EBA) recently issued an opinion, taking the view that migration plans to SCA for ecommerce transactions should be completed within 15 months, by 31 December 2020.
If your applicable transactions cannot be authenticated according to SCA requirements, then they may be declined.
You should have received a registration email for your new Cybersource account. If you need the email resent, please contact +44 (0) 203 564 4844.
After registering your Cybersource account, you will be able to access both your Authorize.Net and Cybersource gateway accounts. This will allow you to continue using your Authorize.Net account while you configure your new Cybersource account settings and familiarise yourself with the new interface. Later next year, we will place your Authorize.Net account in Test Mode to allow read-only access, and you will no longer be able to process payments through it.
Once you register your Cybersource account, you can access it via the Cybersource Business Center, which is the equivalent of the Authorize.Net Merchant Interface. We highly recommend logging in to see the differences and to get accustomed to the new look and feel.
To help you get used to the new interface, we highly recommend reviewing the Business Center merchant video tutorials here.
When you receive your registration email, you will notice there are two registration links. One to set up a username and password for a “merchant admin” and one for an “account admin.” You will need to set up both for your new Cybersource account.
Cybersource provides the ability to have multiple merchant IDs per master account, therefore, we’ll create a new master account for you that includes two merchant IDs: one for your new gateway account, which you will use for processing payments, and one that will display your transaction data from your old Authorize.Net account. Your master account allows you to manage both merchant IDs, as well as add additional ones later.
• The first link in the email for “merchant admin” is to create the username and password for accessing your new gateway account only. This is the main gateway account/merchant ID where you will process payments going forward.
• The second link in the email for “account admin” is to create a username and password for your master Cybersource account that manages both your new gateway account and your old Authorize.Net history.
Review our registration tutorial for step-by-step instructions on registering your new Cybersource account.
Note: Once you register your account, it will be “live,” meaning you can process transactions through the interface or API using your new Cybersource API credentials. However, you will only continue to be billed for your current Authorize.Net account fees — you will not be billed for two separate accounts.
We recommend reviewing and taking the following steps before, during, and after your account upgrade to help prepare for your new Cybersource account:
Read an overview of the Second Payments Services Directive (PSD2), Strong Customer Authentication (SCA) and your upcoming account changes here.
Learn more about PSD2 and how it impacts you by watching our PSD2 webinar: Webinar Replay
Upgrade your website or payment solution (contact your web developer for help determining which option applies to you):
Review the Account Comparison Guide to see the features and API services available on Authorize.Net and their corresponding services on Cybersource
Watch the Account Upgrade Webinar replay to see the account upgrade and registration process, start to finish. Watch the Account
Upgrade Webinar.
Register your new account using the links from your Cybersource Account Registration email. The email will come from “Cybersource Customer Support” at donotreply@support.cybersource.com. Please find a step-by-step registration guide here.
Bookmark your new Cybersource login page: https://ebc2.cybersource.com/ebc2/
Continue upgrading your website or payment solution (contact your web developer for help determining which option applies to you):
Ensure you are using 3-D Secure 2 or another 3-D Secure integration.
Watch a merchant tutorial on how to use the Cybersource Business Center here and save a copy of the Business Center User Guide.
Create new users for your account. Please note that your current Authorize.Net users will not automatically transfer over and will need to be recreated. This is a good time to clean out old users or reset permissions. Watch a video here.
Get to know reporting in the Business Center – watch part 1 here and part 2 here.
Review and update your new account settings. Find more information here.
Log into your old Authorize.Net account and download your transaction history. Find more information here.
Invoicing: If you are currently using the invoicing service with Authorize.Net, we will not be transferring any history or open/unpaid invoices from your Authorize.Net account to Cybersource. We recommend completing/closing out any open or unpaid invoices from customers in your Authorize.Net account, or canceling them and recreating the invoices from your new Cybersource account. You can then re-send the payment requests to your customers.
Remove the code for your Authorize.Net Verified Merchant Seal. The seal has been deprecated and does not work with your Cybersource account.
Ensure you are using 3DS. You must enable and use 3DS functionality, as this is the authentication tool that will assist you with SCA.
If you have any questions, please call support at +44 (0) 203 564 4844
Account Comparison Guide – this guide lists the features and API services available on Authorize.Net and their correlating services on Cybersource.
Account Upgrade Checklist – this checklist provides all of the necessary steps to take before, during, and after your account upgrade.
Account Upgrade Webinar – watch the replay of our account upgrade webinar where we walk through the registration process, start to finish.
PSD2 SCA Webinar – learn more about PSD2 SCA and find out how to deliver a best in class digital experience in an SCA world. Register now to watch the replay.