CiviCRM Community Forums (archive)

Hi,

I don't know anything about 3D secure but other enhanced security options I have seen require a bit of thought regarding the business processes - e.g. both cvs & av2 (as I recall) will both accept payments that don't match up but will return information saying that there was a mismatch (so, for example you might undertake further steps before shipping any goods).

Anyone have any thoughts on handling 3-D Secure transactions with a payment processor in Form mode (i.e. using doDirectPayment() rather than doTransferCheckout() with an IPN return location)?

It seems to me the tricky bit handling that POST from the 3-D Secure form - where should the form redirect users to? Sounds like it ought to respond to an IPN-type location that handles the response as per notify mode?

My interest here is with a custom payment processor to integrate RBS WorldPay, rather than Paypal Website Payments Pro, I'm afraid.

Indicative thoughts would be warmly welcomed!

Thanks for your comments, @Eileen. I'll take a good look at eWay and the rest.

The POST in a 3-D Secure transaction arises because, although the transaction happens in the background, there's an extra authentication stage dropped in where the user has to fill in a  'Verified by Visa'-type form. So, there'll be a POST from that form that needs to be handled, so an IPN-like destination in the extern directory makes a lot of sense.

Has anyone in the UK or anywhere else made any progress with 3D secure for Payments Pro?