Purpose

PA Enrollment will:

• For 3DS1 – Verify whether the card is enrolled or not in the 3DS program. In many cases returns “enrolled” status along with details to proceed to authentication (ACS URL)
• For 3DS2 (EMV 3DS) – Perform the Authentication Request. May result in straightforward approval. Otherwise will return instructions similar to 3DS1
• Generate JWT for redirection to step-up authentication

Sequence Diagram

Step-up JWT

Like with PA Setup there's now a JWT to generate before passing the details to the front-end (in case of a challenge). JWT will carry details for the authentication and must be posted to stepUpUrl returned in the PA enrollment response.

JWT will be generated automatically (if returnUrl will be present in the request) and returned in PA Enrollment response.

Header

Payload