Copyright 2014 Ingenico Payment Services. The Third Man

Transcription

1 The Third Man

2 Table of contents 1. Introduction 2. Configuration 3. Integration with e-commerce 3.1 Additional fields 3.2 SHA signature 3.3 Transaction feedback 4. Back office Page 1 of 7-28/08/2015

3 1. Introduction This guide explains the integration of The 3rd Man for Ogone e-commerce. The 3rd Man is a Fraud Detection provider. The integration with Ogone e-commerce aims at sending customer and delivery information to The 3rd Man during the payment process, and taking appropriate actions (block/hold) following the screening result. More information about the company can be found on the Datacash website. Page 2 of 7-28/08/2015

4 2. Configuration With the option activated, you will see a new section in the Fraud Detection Module of your Ogone back office. It simply shows, for each brand that supports it, a button to configure The 3rd Man. You can thus have different settings per card. Clicking one of the buttons takes you to the following screen (we use VISA as an example): With this screen you can configure the following: In the "ThirdMan status" section, you can activate/deactivate the ThirdMan screening (only applicable for the current brand). In the "ThirdMan check" section, you can configure when the ThirdMan should be triggered: "Always" Based on the result of the Fraud Detection Module... In the "How do you wish to work with ThirdMan" section, you can configure the way you want to use the ThirdMan: With the "Work Online" link you can choose the action to undertake in a drop-down list: "Block" the transaction. The cardholder will see a message on the payment page saying that the transaction has been denied. "Continue" to process the transaction. With the "Work Offline" link you can configure the following options: Page 3 of 7-28/08/2015

5 The "Don't wait for external scoring" or "Wait for external scoring info before processing" checkboxes determine if a user will be able to perform operations on a payment, even though the merchant may not have received a definitive answer from the ThirdMan. In such a case, the transaction will have a status: "50-Authorised waiting external result" "40-Stored waiting external result" The following sections allow you to configure the actions to undertake after receiving the offline result. Each is dependant of the operation code that was sent with the initial transaction: An "After storing transaction (STO)" or "After requesting authorization (AUT)" will allow/disallow an authorisation, whereas an authorisation will allow/disallow a data capture. For each scenario, you can choose what to do when the response is "Reject" and what to do in the event no response is received from the ThirdMan. Page 4 of 7-28/08/2015

6 3. Integration with e-commerce 3.1 Additional fields The following fields must be included in your order in order to have them screened by The 3rd Man. Remember that the more information you send, the more accurate the screening will be. Field Max length Description Customer information ECOM_CONSUMERID 50 Customer identification on the merchant's system. This allows The 3rd Man to quickly locate an existing customer, if he has already been screened. ECOM_SHIPTO_ONLINE_ 50 address ECOM_SHIPTO_DOB 10 Date of birth, in the format yyyy-mm-dd Invoicing information ECOM_BILLTO_POSTAL_STREET_LINE1 35 First line of address ECOM_BILLTO_POSTAL_STREET_LINE2 35 Second line of address (if applicable) ECOM_BILLTO_POSTAL_POSTALCODE 10 Postcode ECOM_BILLTO_POSTAL_CITY 25 City ECOM_BILLTO_POSTAL_COUNTRYCODE 2 Country code (BE, FR, GB, etc.) Delivery information CIVILITY 10 Mr., Mrs, Dr.,... ECOM_SHIPTO_POSTAL_NAME_FIRST 35 First name ECOM_SHIPTO_POSTAL_NAME_LAST 35 Last name ECOM_SHIPTO_POSTAL_STREET_LINE1 35 First line of address ECOM_SHIPTO_POSTAL_STREET_LINE2 35 Second line of address (where relevant) ECOM_SHIPTO_POSTAL_POSTALCODE 10 Postcode ECOM_SHIPTO_POSTAL_CITY 25 City ECOM_SHIPTO_POSTAL_COUNTRYCODE 2 Country code (BE, FR, GB, etc.) ECOM_SHIPTO_TELECOM_PHONE_NUMBER 30 Telephone number More information about these fields can be found in your Ogone account. Log in and go to "Support > Integration & user manuals >Technical Page 5 of 7-28/08/2015

7 guides > Parameter Cookbook." The following information has also to be sent to The 3rd Man. However, no specific integration is required from you, as these are default e-commerce fields, or fields that are calculated by us: ORDERID PSPID ECI CN (Cardholder name) CARDNO (Card number) CVC IP Address of the cardholder Time zone of the cardholder 3.2 SHA signature All additional fields should be included in the calculation of the SHA signature. 3.3 Transaction feedback The 3rd Man scoring is not included in the post-sale, nor in the confirmation s to you or the customer. Page 6 of 7-28/08/2015

8 4. Back office In the back office, the scoring result is visible via "View transactions", when viewing a transaction's financial details. Though the example is not relevant, you can see The 3rd Man score and recommendation in the middle of the screen. You can see the status of this transaction is "50-Authorised waiting external result" which means the scoring will be updated when our system receives the offline result. Interpretation of The 3rd Man scores: Value Interpretation 0 Release: The transaction is safe. 1 Hold (only for real-time): Please wait for the offline result to get a final score. When receiving "Hold", the score will always be 0 2 Reject: The transaction is likely to be fraudulent. Page 7 of 7-28/08/2015