Helping you prepare for Strong Customer Authentication

Strong Customer Authentication (SCA2) introduction

Strong Customer Authentication (SCA) is a requirement related to the Second Payments Services Directive (PSD2). It applies to all electronic payments within the European Economic Area. The SCA requires that all applicable payments comply with specific authentication requirements. The most common method for supporting SCA is 3-D Secure (3DS).

To assist with SCA and to help prevent transactions from unnecessary declines, Authorize.Net is upgrading your gateway account to Cybersource, which will allow you to use 3DS and provide access to a host of new products and services that can help your business continue to grow.

PSD2 SCA timeline update

Since 14th September, the requirements for SCA officially apply. However, the European Banking Authority (EBA) recently issued an opinion, taking the view that migration plans to SCA for ecommerce transactions should be completed within 15 months, by 31 December 2020.

This means we will not be closing your Authorize.Net account until later next year to allow more time for you to fully transition to your new Cybersource account. We still highly encourage you to upgrade to Cybersource as soon as possible, in order to take advantage of all the benefits your new account offers and to ensure you support SCA ahead of any possible enforcement. We also recommend contacting your shopping cart or web developer to build out a transition plan and timeline.

Additional information

Use the jump links below to skip to different sections.

Overview

What is PSD2?

PSD2 is a European directive that regulates payment services in Europe and focuses on improving security and minimising overall fraud potential.

What is SCA?

SCA requires the use of two different forms of authentication along with the transaction.

What is 3DS?

3DS is an authentication tool designed to support SCA and is currently used by the card schemes to verify a customer. 3DS is available through Cybersource, many shopping carts, and various other third-party authentication services.

Who is Cybersource and how are they connected to Authorize.Net?

Like Authorize.Net, Cybersource is a leading provider of payment management solutions, with a focus on global-scale businesses. Authorize.Net and Cybersource have both been a part of Visa since 2010.

Cybersource provides a variety of products and services to support your business, including accepting payments in 190+ countries/territories and 40+ currencies, global tax tools, currency conversion, alternative payments and more.

FAQs

How does PSD2, SCA, 3DS and Cybersource all fit together?

Cybersource allows you to use 3DS to support SCA, which is a PSD2 requirement.

How will performing SCA affect a customer’s checkout experience?

Using 3DS to support SCA may add an extra step to your customer’s checkout experience that allows them to authenticate securely. 

Will I need to update my website or payment solution to use my new Cybersource account?

Authorize.Net Hosted Payment Form Solutions:

If you are using a solution that utilises the Authorize.Net-hosted payment form, you will need to update your website or payment solution to use one compatible with Cybersource.

Review your three update options here. Be sure to check with your developer/shopping cart provider for help determining which option you should choose.

All other Authorize.Net payment solutions and shopping carts

We are creating a solution that will allow you to keep your current integration or shopping cart provider. In short, we are creating a connection that will pass the information you collect via your current Authorize.Net payment solution to your new Cybersource gateway account. However, to satisfy SCA, you must still implement 3DS, either through Cybersource or another provider. To start using 3DS, you will have to do some integration work. The new 3DS fields collected will be processed using your new Cybersource account.

As a result, we highly recommend moving to a Cybersource API or a Cybersource compatible shopping cart, to ensure you enjoy all of the benefits that your Cybersource account has to offer.

To start using a Cybersource compatible integration, there are three options available to you. Be sure to check with your developer/shopping cart provider for help determining which option you should choose.

Will my payment gateway pricing change?

Your new Cybersource account will keep the same payment gateway, transaction and any additional service fees you are currently paying on your Authorize.Net account. However, 3DS is a separate service and has its own service fees. Fee information will be available and communicated to you soon.

When should applicable transactions be SCA ready?

Since 14th September, the requirements for SCA officially apply. However, the European Banking Authority (EBA) recently issued an opinion, taking the view that migration plans to SCA for ecommerce transactions should be completed within 15 months, by 31 December 2020.

What happens if I don’t use 3DS or require SCA for my online transactions?

If your applicable transactions cannot be authenticated according to SCA requirements, then they may be declined.

Next Steps

You should have received a registration email for your new Cybersource account. If you need the email resent, please contact +44 (0) 203 564 4844.

Account upgrade info

Account access timeline

After registering your Cybersource account, you will be able to access both your Authorize.Net and Cybersource gateway accounts. This will allow you to continue using your Authorize.Net account while you configure your new Cybersource account settings and familiarise yourself with the new interface. Later next year, we will place your Authorize.Net account in Test Mode to allow read-only access, and you will no longer be able to process payments through it.

Once you register your Cybersource account, you can access it via the Cybersource Business Center, which is the equivalent of the Authorize.Net Merchant Interface. We highly recommend logging in to see the differences and to get accustomed to the new look and feel.

To help you get used to the new interface, we highly recommend reviewing the Business Center merchant video tutorials here.

Account setup information

When you receive your registration email, you will notice there are two registration links. One to set up a username and password for a “merchant admin” and one for an “account admin.” You will need to set up both for your new Cybersource account.

Cybersource provides the ability to have multiple merchant IDs per master account, therefore, we’ll create a new master account for you that includes two merchant IDs: one for your new gateway account, which you will use for processing payments, and one that will display your transaction data from your old Authorize.Net account. Your master account allows you to manage both merchant IDs, as well as add additional ones later.

• The first link in the email for “merchant admin” is to create the username and password for accessing your new gateway account only. This is the main gateway account/merchant ID where you will process payments going forward.

• The second link in the email for “account admin” is to create a username and password for your master Cybersource account that manages both your new gateway account and your old Authorize.Net history.

Review our registration tutorial for step-by-step instructions on registering your new Cybersource account.

Note: Once you register your account, it will be “live,” meaning you can process transactions through the interface or API using your new Cybersource API credentials. However, you will only continue to be billed for your current Authorize.Net account fees — you will not be billed for two separate accounts.

Account upgrade checklist

Are you ready for your new Cybersource account?

We recommend reviewing and taking the following steps before, during, and after your account upgrade to help prepare for your new Cybersource account:

Before account upgrade

• Read an overview of the Second Payments Services Directive (PSD2), Strong Customer Authentication (SCA) and your upcoming account changes here.

• Learn more about PSD2 and how it impacts you by watching our PSD2 webinar: Webinar Replay

• Upgrade your website or payment solution (contact your web developer for help determining which option applies to you):

  • If you are using Accept.js or a hosted payment solution, such as the Server Integration Method (SIM), Simple Checkout, Direct Post Method (DPM) or Accept UI/Accept Hosted, you must update your integration to use one compatible with Cybersource. Review your three options here.
    
    
  • If you are using a non-hosted payment solution, such as the Advanced Integration Method (AIM) or ANET API (XML, JSON), your integration will continue to work, but we highly recommend moving to a Cybersource API or a Cybersource compatible shopping cart to take advantage of updates and newer integrations. Find more information here.
    
    
  • If you are using a third party technology provider or shopping cart, contact them to verify that they will support 3-D Secure (3DS) and Cybersource

 

• Review the Account Comparison Guide to see the features and API services available on Authorize.Net and their corresponding services on Cybersource

• Watch the Account Upgrade Webinar replay to see the account upgrade and registration process, start to finish. Watch the Account 
  Upgrade Webinar.

During account upgrade

• Register your new account using the links from your Cybersource Account Registration email. The email will come from “Cybersource Customer Support” at donotreply@support.cybersource.com. Please find a step-by-step registration guide here. 

• Bookmark your new Cybersource login page: https://ebc2.cybersource.com/ebc2/

• Continue upgrading your website or payment solution (contact your web developer for help determining which option applies to you):

  • If you are using Accept.js or a hosted payment solution, such as the Server Integration Method (SIM), Simple Checkout, Direct Post Method (DPM) or Accept UI/Accept Hosted, you must update your integration to use one compatible with Cybersource. Review your three options here.
    
    
  • If you are using a non-hosted payment solution, such as the Advanced Integration Method (AIM) or ANET API (XML, JSON), your integration will continue to work, but we highly recommend moving to a Cybersource API or a Cybersource compatible shopping cart to take advantage of updates and newer integrations. Find more information here.

 

• Ensure you are using 3-D Secure 2 or another 3-D Secure integration.

• Watch a merchant tutorial on how to use the Cybersource Business Center here and save a copy of the Business Center User Guide.

• Create new users for your account. Please note that your current Authorize.Net users will not automatically transfer over and will need to be recreated. This is a good time to clean out old users or reset permissions. Watch a video here.

• Get to know reporting in the Business Center – watch part 1 here and part 2 here.

• Review and update your new account settings. Find more information here.

After account upgrade

• Log into your old Authorize.Net account and download your transaction history. Find more information here.

• Invoicing: If you are currently using the invoicing service with Authorize.Net, we will not be transferring any history or open/unpaid invoices from your Authorize.Net account to Cybersource. We recommend completing/closing out any open or unpaid invoices from customers in your Authorize.Net account, or canceling them and recreating the invoices from your new Cybersource account. You can then re-send the payment requests to your customers.

• Remove the code for your Authorize.Net Verified Merchant Seal. The seal has been deprecated and does not work with your Cybersource account.

• Ensure you are using 3DS. You must enable and use 3DS functionality, as this is the authentication tool that will assist you with SCA.

• If you have any questions, please call support at +44 (0) 203 564 4844

Resources

• Account Comparison Guide – this guide lists the features and API services available on Authorize.Net and their correlating services on Cybersource.

• Account Upgrade Checklist – this checklist provides all of the necessary steps to take before, during, and after your account upgrade.

• Account Upgrade Webinar – watch the replay of our account upgrade webinar where we walk through the registration process, start to finish.

• PSD2 SCA Webinar – learn more about PSD2 SCA and find out how to deliver a best in class digital experience in an SCA world. Register now to watch the replay.