On This Page
REST API

Interpreting the Response

The responses are similar for all card types.
  • Enrolled cards: You receive
    PENDING_AUTHENTICATION
     if the customer’s card is enrolled in a payer authentication program. When you receive this response, proceed to Step 4: Step-Up IFrame.
  • Cards not enrolled, or step-up authentication not required: You receive
    AUTHENTICATION_SUCCESSFUL
     in the following cases:
    • When the account number is not eligible for a payer authentication program or when step-up authentication is not required. The other services in your request are processed normally. If you are making separate enrollment and authorization calls, you must include pertinent payer authentication data in the authorization request to receive liability shift protection.
    • When payer authentication is not supported by the card type. When you receive this response, you can proceed to card authorization. If you receive the authentication results along with
      AUTHENTICATION_SUCCESSFUL
      , you might receive liability shift protection.
    An
    AUTHENTICATION_FAILED
     status may occur that requires the merchant to display a card issuer message to the cardholder using the
    consumerAuthenticationInformation.cardholderMessage
     field.
    The message text is provided by the ACS/issuer to the cardholder during a frictionless or decoupled transaction to convey information to cardholder. For example, “Additional authentication is needed for this transaction, contact (issuer name) at xxx-xxx-xxxx.”
    The entry that appears in the log will be similar to this example:
    "cardholderInfo":"You're unable to complete this purchase right now. For help call CommBank on 13 2221"