REST API | American Express

Understanding Payer Authentication Information

The Payer Authentication Information section on the Details page contains details of the payer authentication request for the selected transaction. The following table describes each of the fields that display.
Request Information
Description
AAV/CAVV
Unique identifier generated by the customer's issuing bank after the customer is authenticated.
Account Identifier
Masked string used by the ACS.
Acquirer BIN
(Bank Identification Number) First six digits of acquiring bank.
ACS URL
Access Control Server URL of the issuing bank where the customer is redirected during authentication.
Card Enrollment Result
Result of the service request:
  • Y
    = Card enrolled
  • N
    = Card not enrolled
  • U
    = Cannot authenticate
Card Expiration Date
Expiration month and year (mmyy) of the card used in the transaction.
Data Server Password
Merchant’s masked authentication password to the ACS. Applies only to cards issued outside the U.S.
Date
Date and time of request. Although the date and time should appear sequentially during all stages of the processing of an order, they may not because of differing time zones and synchronization between servers.
Directory Server URL
URL for the server of the payment card company.
Electronic Commerce Indicator (ECI)
Authentication result required by your payment processor if you are not using
Cybersource
for payment services.
Merchant Country
Your country of operation.
Merchant ID
Contains one of two values:
  • In the Request Information, you see your
    Cybersource
    merchant ID.
  • In the rest of the transaction details, you see the login ID for the ACS URL.
Merchant Name
Your company’s name.
Merchant URL
Your company’s website.
Primary Account Number (PAN)
Your customer’s masked account number.
Purchase Amount
Amount and currency of the transaction.
Request ID
Unique identifier assigned in each request and returned in each response.
Transaction Status
Indicates the authentication status of the transaction:
  • Y
    = Authentication successful. All data needed for clearing, including the Cardholder Authentication Verification Value (CAVV), is included in the message.
  • A
    = Attempts processing performed. Authentication not completed, but a proof of authentication attempt (AAV/CAVV) was generated.
  • U
    = Authentication cannot be performed because of a problem.
  • N
    = Authentication failed. Customer failed or canceled authentication. Transaction denied.
Transaction Type
Service requested.
Unique Transaction Identifier (XID)
Unique transaction identifier generated for each Payment Authentication Request (PAReq) message. The Payment Authentication Response (PARes) sent back by the issuing bank contains the XID of the PAReq. To ensure that both XIDs are the same, store the XID from the request so that you can later compare it to the XID in the response. To find all requests related to a transaction, you can also search transactions for a specific XID.