Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Background Color
color#2E5C99

 3D Secure Authentication 1.0

Table of Contents
indent17px
exclude(3D Secure Authentication|Step *)
stylesquare

Background Color
color#999

 Background

What is Strong Customer Authentication?

Strong Customer Authentication is a mandatory requirement for authenticating online payments that was introduced in Europe on 14 September, 2019, under Payment Services Directive 2. It requires payments to be authenticated using at least two of the following three elements:

...

3D Secure is the main method for authenticating card payments and meeting Strong Customer Authentication requirements.

Will all payments require Strong Customer Authentication?

Strong Customer Authentication will apply to customer-initiated online payments within the European Economic Area (EEA). Transactions in scope are those involving a customer’s card that has been issued in the EEA and where the transaction is acquired in the EEA.

How will British Airways implement Strong Customer Authentication?

British Airways has implemented 3D Secure 1.0, and is currently developing 3D Secure 2.0. It is advised you switch to the latest schemas as Strong Customer Authentication will only be available in British Airways NDC APIs schema version 17.2.  For 16.1 British Airways will no longer accept card payments.

...

Background Color
color#999

 Who will be Authenticated?

All ‘Online’ agents will be authenticated. The agent will tell us in the OrderCreateRQ (

Status
colourBlue
titlev0.1 Prime Sale Selling
) or OrderChangeRS (
Status
colourBlue
titlev0.2 Confirm held booking
Status
colourBlue
titlev0.2 Purchasing ancillaries
) whether they are 'Online' or 'Offline'.

...

Background Color
color#999

 How are British Airways planning to implement this?

The following steps outline the process for the implementation.

Background Color
color#A6C3ED

 Step One

The agent calls OrderCreateRQ with the itinerary, passenger and card details. (See sample below) 

...

Background Color
color#A6C3ED

 Step Two

If the card is enrolled for 3D Secure and the Agent is ‘Online’ then BA will return OrderViewRS with an error along with the 3D Secure Authentication data listed below. (See sample below)

...

Background Color
color#A6C3ED

 Step Three

The agent will redirect the customer to the ACS_URL and the customer enters the data.

...

Background Color
color#A6C3ED

 Step Four

The agent calls OrderCreateRQ (

Status
colourBlue
titlev0.1 Prime Sale Selling
) or OrderChangeRQ (
Status
colourBlue
titlev0.2 Confirm held booking
Status
colourBlue
titlev0.2 Purchasing ancillaries
) again with exactly the same details as the first call (Step 1) along with the details listed below. (See sample below)

...

Background Color
color#A6C3ED

 Step Five

British Airways validates the details provided. If they are valid, the booking will be created and tickets will be issued. If they are not valid, OrderViewRS is returned with an error and the agent must start again. (See sample below)

...

Background Color
color#999

 Architecture and Workflow

The samples for the OrderCreateRQ, OrderViewRS, OrderCreateRQ and OrderViewRS are shown above.

...

Background Color
color#999

 Web Service URLs

The OrderCreate API that contains the 3DS functionality can be connected through the following URLs (See Versioning for activation dates).

...

Background Color
color#999

 Affected APIs, Schema Changes and Version

The following APIs will be affected by this functionality

...

Background Color
color#999

 Test Card Numbers

Please see Test Card Numbers section for specific 3DS test cards.

Background Color
color#999

 Versioning and Release Plan


VersionDescriptionRelease StatusPre-Live DateLive Date
0.1

OrderCreate (Prime Sale Selling) – This will be a new version.

Note

British Airways has released a new version of OrderCreate so if agents want to exploit 3DS capability then they must migrate to the new version.

The current versions of OrderCreate will still be supported and won’t have 3DS capability.
At some point, they will be decommissioned. The date is not decided but British Airways will notify you well in advance

Status
colourBlue
titleUPDATED
  
0.2

3DS Authentication when confirming a held booking.

Note

British Airways has released a new version of OrderChange so if agents want to exploit 3DS capability then they must migrate to the new version.

The current versions of OrderChange will still be supported and won’t have 3DS capability.  At some point, they will be decommissioned. The date is not decided but British Airways will notify you well in advance.

Status
colourBlue
titleUPDATED
  
0.3

3DS Authentication when purchasing ancillaries.

The current versions of OrderChange will still be supported and won’t have 3DS capability. At some point, they will be decommissioned. The date is not decided but British Airways will notify you well in advance.

Status
colourBlue
titleUPDATED
  
0.43DS Authentication when changing the booking

Status
colourBlue
titleUPDATED
  

...