Visa Checkout Integration Guide V1.0 IP Payments Pty Ltd Level 3, 441 Kent Street Sydney NSW 2000 Australia (ABN 86 095 635 680) T +61 2 9255 9500 F +61 2 8248 1276 www.ippayments.com No part of this document may be reproduced or copied, except as permitted under the Copyright Act 1968 (Commonwealth), by any means or process whether electronic, photocopying or otherwise, without the prior written consent of IP Payments Pty Ltd.
Table of Contents 1 ABOUT THIS DOCUMENT... 3 1.1 DOCUMENT HISTORY... 3 1.2 DEFINITIONS... 3 2 INTRODUCTION... 5 3 PROCESS OVERVIEW... 6 3.1 ENABLING VISA CHECKOUT... 6 3.1.1 Previously enabled Visa Checkout... 8 3.2 VISA CHECKOUT BUTTON... 9 3.3 VISA CHECKOUT PAYMENT PROCESSING... 10 3.4 ADDITIONAL SESSION INITIATION REQUEST FIELDS... 11 5 APPENDIX... 12 5.1 REFERENCE DOCUMENTS... 12 IP Payments [ 2 of 12 ] Confidential
1 About this document 1.1 Document History Version Date Modified Author Summary of Changes V0.1 29/12/2014 Anthony Fulton 1st draft for internal feedback V0.2 05/01/2015 Anthony Fulton Added section 6 V0.3 07/01/2015 Anthony Fulton Changes around shipping address V0.4 13/01/2015 Anthony Fulton Added promo code and customizable pay now message V1.0 29/01/2015 Celine Wang Updated the content. 1.2 Definitions The following terms and abbreviations are used in this document: Term Description IPP Merchant Acquiring Bank CR CC Security Code (CVV2/CSC2/CCV) PAN PCI-DSS IP Payments, a premium payments solutions provider uniquely skilled in providing highquality, efficient and customised solutions to corporate organisations in all industry sectors. For the purposes of this document your company will be referred to as the merchant. A person or company involved in wholesale trade, supplying goods or services to a business or consumer market. An acquiring bank (or acquirer) is a bank or financial institution that processes credit or debit card payments on behalf of a merchant. A change request is an issue, defect or new requirement which is raised by a business person and/or representative of a local affiliate which is not described or described in a different way in the latest version of the SDS document (+ amendments). Credit card. The Security Code is a 3 or 4 digit code on the back of the cardholder s card. This is used to verify the customer is in possession of the card. Primary Account Number (Credit Card Number). Payment Card Industry Data Security Standard. PCI-DSS is an information security standard for organizations that handle cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards. Access Portal Access Portal is the platform used by IPP to implement our hosted payment applications HPP and ihpp. HPP ihpp iframe The Hosted Payment Page is a standalone payment page which is not integrated into an application. The integrated Hosted Payment Page is integrated into the merchant s website dynamically accepting transaction data prior to the customer entering their card details. Notification of the transaction result is sent back to the merchant in real-time. Inline Frame, a HTML tag used to embed another document within an existing HTML document. Specifically used in this document to describe how to embed the IPP payment page in the merchants website. IP Payments [ 3 of 12 ] Confidential
DL HTML POST GET CSS SST URL WSDL PRM CSV API SOAP XML SIPP TCP/IP Tokenisation Token MOD10 Check Direct Link, this is the value used to specify which ihpp template is to be used. Required where more than one ihpp exists for a particular client account. Hypertext Markup Language A method for sending HTML form data over the Internet. Post data is encoded within the message body. A method for sending HTML form data over the Internet. Get data is encoded by a browser into the URL. Cascading Style Sheets is a style sheet language used for describing the presentation of a web page. Secure Session Token Uniform Resource Locator Web Services Description Language Payment Relationship Manager, IPP s transaction reporting tool used for user administration, viewing transaction history, refunding and downloading reports among other functionality. CSV meaning Comma Separated Values is a report format which can be downloaded from our reporting tool, PRM. Application Programming Interface, a merchant can use IPP s API to gain access to the features and data of our services and applications. Simple Object Access Protocol, a protocol specification for exchanging structured information in the implementation of web services. Extensible Markup Language, defines a set of rules for encoding documents in a format that is both human-readable and machine-readable. Statement of Invoice Presentment and Payment Transmission Control Protocol/Internet Protocol Storage of the customer s card data against a unique reference called a token in IPP s secure PCI-DSS compliant system for future use in recurring payments or adhoc payments using a stored payment method. This removes the need for the merchant to store card data minimising their PCI DSS scope. This is an additional service and must be enabled on your account. The unique reference that the customers card data is stored against in IPP s secure PCI-DSS compliant system. A simple algorithm used to validate a credit card number. IP Payments [ 4 of 12 ] Confidential
2 Introduction IP Payments is a premium payments solutions provider, uniquely skilled in providing high-quality, efficient, reliable and customised solutions to corporate organisations in all industry sectors. We develop and manage web based billing, payment and reconciliation services for some of the most recognised brand names in the world. Visa Checkout IP Payments is pleased to offer Visa Checkout as part of the IP Payments product suite. Visa Checkout is a digital payment service designed to simplify the checkout experience using a secure, single sign-on across channels and devices using a customer's preferred payment method. Benefits of using Visa Checkout: Secure - Visa Checkout uses multiple layers of security, including fraud-monitoring systems and encrypted tokens using SHA256 hash algorithms to help keep payment information safe. Open - Visa Checkout accepts any major credit or debit card so customers can check-out easily and securely using the payment method they use today on your site. Simple - Integrating Visa Checkout is easy and requires only a few simple HTML and JavaScript tags. Test your setup in our sandbox environment, which mirrors our production environment. Community - Join a growing community of commerce developers and get the support you need. Please view the following video for more information about Visa Checkout: http://www.youtube.com/watch?v=eezd3iixowq IP Payments [ 5 of 12 ] Confidential
3 Process Overview 3.1 Enabling Visa Checkout You can enable Visa Checkout on your hosted payment page by following the below instructions. Should you have any issues during this process, please contact IP Payments for further assistance. 1. Log on to your IP Payments Administration Console URL: www.ippayments.com.au/crm Username: Previously issued to you Password: Previously issued to you 2. Once you have logged on, you will see your client administration console home page: 3. Create your Visa Checkout Account. Using the horizontal menu navigation bar, select Modules DTSSwitchVisa Checkout: IP Payments [ 6 of 12 ] Confidential
4. You will see the following Visa Checkout page within your Administration Console: Your details should be prepopulated. Please check all the details are correct. Make any updates necessary. If you require the customers shipping address, please check Collect Shipping Details. The message that appears near the Pay button on the Visa Checkout page can be customised. The default value is Click to Pay Now. You can change this to something more meaningful to your customers, to a maximum of 120 characters. 5. Once you are satisfied with your details, click Continue to see Merchant Services agreement button. Clicking this button shows your service agreement with Visa. Please read this agreement thoroughly. If you agree, then please click Agree and Create Account. 6. Three scenarios can occur once the Visa merchant services agreement is shown. IP Payments [ 7 of 12 ] Confidential
a. If your account creation with Visa Checkout is successful, you will see the following screen: Congratulations, you have set up your Visa Checkout account. Just one more step to add the Checkout button to your hosted payment page and visa checkout will be included as a payment option for your customers! b. If you choose to decline this agreement, you will see the following text: In this case, your Visa Checkout account will not have been created. c. In the event of an error, you will see a description of the error. Please note this down and contact IP Payments for support. 3.1.1 Previously enabled Visa Checkout If you have previously enabled Visa Checkout, following the horizontal menu navigation bar ModulesDTS SwitchVisa Checkout will show the following screen. IP Payments [ 8 of 12 ] Confidential
3.2 Visa Checkout Button Once you have successfully set up your Visa Checkout account, you must add the following button to ihpp template so it will appear on your payment page. Once you have added this to your template, you can send to IP Payments for upload to your account. The button details which need to be added to your ihpp template are: <img alt="visa Checkout" src="https://sandbox.secure.checkout.visa.com/wallet-servicesweb/xo/button.png"/> An example of how to present this is shown below. Troubleshooting: Please note if you do not see the Visa Checkout button on your hosted payment page, it means you have not enabled Visa Checkout as outlined in section Enabling Visa Checkout. If you see a greyed out Visa Checkout button as below, then there is a problem with your setup. Please contact us for assistance. IP Payments [ 9 of 12 ] Confidential
3.3 Visa Checkout Payment Processing 1. Once your customer clicks the Visa Checkout button on your payment page, they will be presented with a Visa Checkout light box pop up whereby they can create a new Visa Checkout account or use an existing Account. 2. Your customer can then choose the card (and shipping address if applicable) they wish to use for this transaction and click Pay. 3. Following this, Visa Checkout securely sends the card details to IP Payments. 4. IP Payments process the payment as normal and sends to your bank for processing. The transaction response is sent to you through the existing process. IP Payments [ 10 of 12 ] Confidential
3.4 Additional Session Initiation Request Fields Please see the ihpp integration guide for full end to end details on the session initiation. This section references optional additional request fields that can be sent when using Visa Checkout. The IP Payments Visa Checkout implementation allows you to submit promotion codes associated with the payment in the session initiation request. These are in turn passed to Visa Checkout. Merchant Server POST to IPP Additional Visa Checkout fields Field name Max Data type Mandatory Description length / Optional VisaPromoCode 100 Alphanumeric O Promo code information which can be passed to Visa checkout for processing. Multiple promotion codes are separated by period (.) Example: VisaPromoCode=P135098 IP Payments [ 11 of 12 ] Confidential
5 Appendix 5.1 Reference Documents See other guides below which may be useful in the implementation of your solution. You can request these guides from IPP. Name ihpp integration guide PRM User Guide Description This document details the integration required for IPP s integrated Hosted Payment Page (ihpp), which provides the ability to accept payments and tokenise card data through an IPP hosted page. This document provides a guide to the functionality available in IP Payments reporting tool, Payment Relationship Manager (PRM). IP Payments [ 12 of 12 ] Confidential