On This Page
Device Binding Workflow with Step-Up Authentication
Device Binding Step-Up Workflow
Figure:
Bind a Device with Step-Up Authentication
- The customer sends a request to the merchant that they consent to bind the device.
- If the device is not enrolled, the merchant sends a request toTMSTMSto enroll the device.
- Test:POSThttps://apitest.cybersource.com/tms/v2/devices
- If the device is enrolled, the merchant sends a request toTMSto bind the device using the device ID.
- Test:POSThttps://apitest.cybersource.com/tms/v2/tokenized-cards/{id}/bindings
- TMSsends a binding request to the issuer with the binding ID.
- The issuer sends a response toTMSwith a step-up authentication binding status.
- TMSsends a request to the issuer for authentication methods.
- The issuer sends a list of authentication methods that are passed on to the customer.
- The customer selects their authentication method and it is sent to the issuer.
- The issuer initiates authentication method.
- If authentication is valid,TMSbinds the token to the device.
- The issuer notifiesTMSthat binding was successful.
- TMSsends a response to the merchant that the binding is completed.
- The merchant notifies the customer that their device binding is complete.
Step-Up Authentication Flow
This workflow shows the possible options for step-up authentication after you send a
request to
/tokenized-cards/{id}/bindings
:Figure:
Bind a Device with Step-Up Authentication