3DS Versioning

Overview

New API version v4 for 3DS Versioning Method has been introduced:

With the introduction of the 3DS 2.3.1.1 protocol, the format of the Versioning Response has changed to support the new 2.3.1.1 format received from the Schemes.

Furthermore, the versioning response has been extended to include the the possibility to return multiple Versioning Response elements in case the card is found in multiple card ranges from different Schemes.

Apart from this a new field is introduced: directoryServerID (RID). This field is a hex value encoded as a 10-character text that is a Registered Application Provider Identifier (RID) that is unique to the Payment System.

Error code REQUIRED_ELEMENT_MISSING("201") is returned if the cardholder account number is missing in the ThreeDsServerVersioningRequest.

Error code FORMAT_ON_ONE_OR_MORE_ELEMENTS_INVALID_ACCORDING_SPECS("203") is returned if the cardholder account number is invalid in the ThreeDsServerVersioningRequest.

For its usage, you can choose between the default versioning endpoint or the one that specifies the API version as v4:

• Default endpoint: /3ds/versioning.
• Endpoint with API version: /3ds/apiVersion/versioning, where apiVersion can be v4.

Supported scheme configuration naming

All supported scheme configurations should be named accordingly.

• Visa scheme ID: Visa
• Mastercard scheme ID: Mastercard
• American Express scheme ID: American Express
• JCB scheme ID: JCB
• Diners scheme ID: Diners
• MIR scheme ID: Mir
• Cartes Bancaires scheme ID: CB (For Cartes Bancaires, it is recommended to send the scheme ID)
• UnionPay scheme ID: UnionPay (For UnionPay, it is recommended to send the scheme ID)
• Bancontact scheme ID: Bancontact
• Mada scheme ID: Mada
• Eftpos scheme ID: Eftpos

ThreeDSVersioningRequest Model

The schemeId is used for better resolving of the versioning data, when the versioning data is not present for the BIN range. Whereas the schemeId is an optional field, in the case where card ranges are found in multiple schemes, it is required because it is the only indicator to resolve the versioning data and needs to be sent in the authentication request.

ThreeDSVersioningResponse V4 Model

For more information on the ThreeDSServerVersioningV4Response fields, visit:

• CardRange