- Introduction to Payments
- Standard Payment Processing
- Card Present Connect | Retail Processing
- Authorization with Contact EMV and Online PIN
- Authorization with Contact EMV and Offline PIN
- Card Present Connect | Mass Transit Processing
- American Express Delayed Online Authorization with EMV Data
- Tap-Initiated Authorization for Debt Recovery with EMV Data
- Debit and Prepaid Card Processing
- Processing Debit and Prepaid Authorizations
- Airline Data Processing
- Japanese Payment Options Processing
- Processing Payments Using Credentials
- Customer-Initiated Transactions with Credentials on File
- Delayed Transaction
- Incremental Transaction
- Merchant-Initiated Incremental Transaction with PAN
- No-Show Transactions
- Reauthorization Transaction
- Merchant-Initiated Reauthorization Transactions with PAN
- Resubmission Transaction
- Merchant-Initiated Resubmission Transaction with PAN
- Installment Payments
- Merchant-Initiated Installment Payments with PAN
- Recurring Payments
- Merchant-Initiated Recurring Payments with PAN
- Unscheduled COF Payments
- Token Management Service Processing
On This Page
Providing Payer Authentication Information for Authorization
The values that are returned from payer authentication must be provided when seeking
authorization for the transaction. Authentication information that is not included when
considering authorization may cause the transaction to be refused or downgraded and
prevent the normal liability shift from occurring.
The level of security in payer authentication is denoted by the two digit Electronic
Commerce Indicator (ECI) that is assigned to the transaction. These digital values have
text equivalents which are assigned to the
processingInformation.commerceIndicator
field. The
American Express,
Diners, Discover, UPI, and Visa
card brands use 05, 06, and 07 digit values to express the authentication level for
a 3-D Secure transaction.ECI Value | Meaning | Visa | Diners | Discover | UPI | Amex |
---|---|---|---|---|---|---|
05 | Authenticated | vbv | pb | dipb | up3ds | aesk |
06 | Attempted authentication with a cryptogram | vbv_attempted | pb_attempted | dipb_attempted | up3ds_attempted | aesk_attempted |
07 | Internet, not authenticated | vbv_failure/internet | internet | internet | up3ds_failure/internet | internet |
Mastercard and Maestro cards use 00, 01, 02, 06, and 07 digit values to indicate the
authentication level of the transaction.
ECI Value | Meaning | Mastercard/Maestro |
---|---|---|
00 | Internet, not authenticated | spa/internet |
01 | Attempted authentication | spa |
02 | Authenticated | spa |
06 | Exemption from authentication or
network token without 3‑D Secure | spa |
07 | Authenticated merchant-initiated
transaction | spa |
The payer authentication response contains other information that needs to be passed on
for successful authorization. Be sure to include these fields when requesting a separate
authorization:
- consumerAuthenticationInformation.directoryServerTransactionId(Mastercard, Maestro, UPI only)
- consumerAuthenticationInformation.eciRaw
- consumerAuthenticationInformation.paresStatus
- consumerAuthenticationInformation.paSpecificationVersion
- consumerAuthenticationInformation.ucafAuthenticationData(Mastercard/Maestro only)
- consumerAuthenticationInformation.ucafCollectionIndicator(Mastercard/Maestro only)
- consumerAuthenticationInformation.cavv
- consumerAuthenticationInformation.xid