Strong Customer Authentication is a mandatory requirement for authenticating online payments that was introduced in Europe on 14 September, 2019, under Payment Services Directive 2. It requires payments to be authenticated using at least two of the following three elements:
...
3D Secure is the main method for authenticating card payments and meeting Strong Customer Authentication requirements.
Will all payments require Strong Customer Authentication?
Strong Customer Authentication will apply to customer-initiated online payments within the European Economic Area (EEA). Transactions in scope are those involving a customer’s card that has been issued in the EEA and where the transaction is acquired in the EEA.
How will British Airways implement Strong Customer Authentication?
British Airways has implemented 3D Secure 1.0, and is currently developing 3D Secure 2.0.It is advised you switch to the latest schemas as Strong Customer Authentication will only be available in British Airways NDC APIs schema version 17.2. For 16.1 British Airways will no longer accept card payments.
...
Background Color
color
#999
Who will be Authenticated?
All ‘Online’ agents will be authenticated. The agent will tell us in the OrderCreateRQ (
Status
colour
Blue
title
v0.1 Prime Sale Selling
) or OrderChangeRS (
Status
colour
Blue
title
v0.2 Confirm held booking
,
Status
colour
Blue
title
v0.2 Purchasing ancillaries
) whether they are 'Online' or 'Offline'.
...
Background Color
color
#999
How are British Airways planning to implement this?
The following steps outline the process for the implementation.
Background Color
color
#A6C3ED
Step One
The agent calls OrderCreateRQ with the itinerary, passenger and card details. (See sample below)
...
Background Color
color
#A6C3ED
Step Two
If the card is enrolled for 3D Secure and the Agent is ‘Online’ then BA will return OrderViewRS with an error along with the 3D Secure Authentication data listed below. (See sample below)
...
Background Color
color
#A6C3ED
Step Three
The agent will redirect the customer to the ACS_URL and the customer enters the data.
...
Background Color
color
#A6C3ED
Step Four
The agent calls OrderCreateRQ (
Status
colour
Blue
title
v0.1 Prime Sale Selling
) or OrderChangeRQ (
Status
colour
Blue
title
v0.2 Confirm held booking
,
Status
colour
Blue
title
v0.2 Purchasing ancillaries
) again with exactly the same details as the first call (Step 1) along with the details listed below. (See sample below)
...
Background Color
color
#A6C3ED
Step Five
British Airways validates the details provided. If they are valid, the booking will be created and tickets will be issued. If they are not valid, OrderViewRS is returned with an error and the agent must start again. (See sample below)
...
Background Color
color
#999
Architecture and Workflow
The samples for the OrderCreateRQ, OrderViewRS, OrderCreateRQ and OrderViewRS are shown above.
...
Background Color
color
#999
Web Service URLs
The OrderCreate API that contains the 3DS functionality can be connected through the following URLs (See Versioning for activation dates).
...
Background Color
color
#999
Affected APIs, Schema Changes and Version
The following APIs will be affected by this functionality
OrderCreate (Prime Sale Selling) – This will be a new version.
Note
British Airways has released a new version of OrderCreate so if agents want to exploit 3DS capability then they must migrate to the new version.
The current versions of OrderCreate will still be supported and won’t have 3DS capability. At some point, they will be decommissioned. The date is not decided but British Airways will notify you well in advance
Status
colour
Blue
title
UPDATED
0.2
3DS Authentication when confirming a held booking.
Note
British Airways has released a new version of OrderChange so if agents want to exploit 3DS capability then they must migrate to the new version.
The current versions of OrderChange will still be supported and won’t have 3DS capability. At some point, they will be decommissioned. The date is not decided but British Airways will notify you well in advance.
Status
colour
Blue
title
UPDATED
0.3
3DS Authentication when purchasing ancillaries.
The current versions of OrderChange will still be supported and won’t have 3DS capability. At some point, they will be decommissioned. The date is not decided but British Airways will notify you well in advance.