Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Background Color
color#2E5C99

 3DS Frequently Asked Questions

Table of Contents
exclude3DS Frequently Asked Questions
stylesquare

Background Color
color#999

 1. What is PSD?

The revised Payment Services Directive (PSD2) is the EU legislation which sets regulatory requirements for firms that provide payment services. An important element of PSD2 is the requirement for Strong Customer Authentication (SCA) on most electronic payments. 

Background Color
color#999

 2. What is SCA?

Strong Customer Authentication is a mandatory requirement for authenticating online payments that came into effect in the European Economic Area (EEA) on 14 September, 2019, under Payment Services Directive 2. Since this all payment service providers are required to apply strong customer authentication when a customer accesses their payment account online or makes an electronic payment unless one of the permitted exemptions applies. 

...

Background Color
color#999

 3. What is the scope of PSD2 EU Directive?

An issuer needs to determine PSD2 RTS geographical scope based on the acquirer's location. Even when a merchant is located outside of EEA, an acquirer in EEA will require the issuer to apply SCA. Most transactions in British Airways NDC will be subject to SCA. SCA regulation will be enforced in the UK, regardless of the outcome of Brexit. 

...

Background Color
color#999

 4. What is considered to be out of scope for PSD2/SCA?

Anonymous prepaid cards

Mail Order/Telephone Order (MOTO)

...

Background Color
color#999

 4. What about Lodged cards and virtual cards? Are they out of scope for SCA?

According to FCA (UK) this exemption may cover payments that are made with “lodge cards” (e.g. when a corporate card used for managing employee travel expenses is held directly with a travel agency). FCA (UK) does not distinguish between ‘physical’ and ‘virtual’ lodged cards hence physical lodged corporate cards should benefit from the exemption.   

...

Background Color
color#999

 6. What about Physical Corporate Cards issued to employees?

Corporate cards issued in an individual’s name are subject to SCA and therefore may require the cardholder to authenticate themselves. ‘True’ corporate cards issued in the name of a corporate which are not subject to SCA will be determined by the issuing bank and any authentication requests will be handled accordingly (no cardholder challenge).

Background Color
color#999

 7. Will all payment require SCA?

Strong Customer Authentication will apply to customer-initiated online payments within the European Economic Area (EEA). Transactions in scope are those involving a customer’s card that has been issued in the EEA and where the transaction is acquired in the EEA. Most transactions in NDC will be processed within the EEA, therefore, will be subject to 3D Secure authentication. 

Background Color
color#999

 8. Wwhat is 3D Secure?

3D Secure is the authentication protocol used for authenticating online card payments.   

Background Color
color#999

 9. What are the differences between 3D Secure 1.0 and 2.0+??

3D Secure V2 (the new version of the 3D Secure authentication standard) will be the main method for authenticating card payments and meeting Strong Customer Authentication requirements. This new version introduces a better user experience that will help minimise some of the friction that authentication adds into the booking flow. 

...

Background Color
color#999

 10. What is the difference between an airline-initiated vs seller-initiated authentication?

In NDC indirect distribution we differentiate between two flows to authenticate a payment transaction.   

...

Background Color
color#999

 11. How is British Airways NDC implementing 3DS? 

We have implemented 3D Secure 1 into our 17.2 NDC APIs (OrderCreate and OrderChange) to support all booking flows scenarios, and are working on implementation for 3D Secure 2. Please be advised 3D Secure authentication will only be available on 17.2 NDC APIs.  

...

Background Color
color#999

 12. Are you implementing 3D Secure 2.0 (known as EMVCo 3D Secure v2.0)? 

We will be releasing new versions of our 17.2 OrderCreate and OrderChange to enable 3D Secure 2 in the seller-initiated authentication flow 

...

Background Color
color#999

 13. How do I know a particular transaction will be prompted to be 3DS-authenticated in NDC?  

If the transactions originate from an “offline” seller, they will follow the current booking flow and only current BA authentication checks will be in place.   

...

Background Color
color#999

 14. Which NDC schema versions support 3DS authentication?  

We will only support 3D Secure in our 17.2. and higher NDC API schema. 

Background Color
color#999

 15. Will there be a new version of your individual APIs enabling 3DS?  

We are deploying new versions of our 17.2 APIs. Please be advised that end-points need to be changed - even for “offline” sellers. The APIs will be released as Version 2. You will see that the only difference in the end-points is the /V4 as opposed to /V2. 

Background Color
color#999

 16. What is going to happen with 16.1 and earlier versions of BA NDC APIs?  

We advise that you switch to the latest schemas as 3DS will only be available in British Airways NDC APIs schema version 17.2. For 16.1 (and earlier versions) customers, since 14 September, 2019, British Airways no longer accepts card payments.  

Background Color
color#999

 17. How do I integrate 3D Secure into our front-end?  

British Airways provides all technical documentation on its NDC Helpdesk, including XML examples and test samples as well as integration guidance. Please click here to access it.  

...

Background Color
color#999

 18. What happens if my Service Provider has not updated to British Airways NDC API schema version 17.2?  

It will not be possible to make card payments. We advise getting in touch with your Service Provider to discuss this further.  

Background Color
color#999

 19. Where can I find more information?  

...