Feedback

Check with your platform contact for product availability

Product overview

Product editions

Getting started

Cybersource extension

Product overview

Version number(Latest) : 3.5.6

System requirements:
Apache 2.4+
PHP 8.1+

Release notes

 

 

 

Developer Guide

Adobe Commerce, a Cybersource partner, creates engaging shopping moments that integrate both digital and physical experiences, with a leading commerce solution for merchants and brands.  Adobe Commerce is a unified commerce solution that lets you manage all content and products in one place, whether you own more than one brand, sell in several countries, or use different business models.


With Adobe Commerce and Cybersource, you gain access to simple and secure payments and fraud management solutions, in 190+ countries and territories. The integration supports credit cards, digital wallets, alternative payments, token management, fraud management, delivery address verification, and global tax calculation.

 

  • Card Payments
  • 3D Secure (SCA Compliant)
  • Secure Tokenization 
  • eCheck
  • Klarna
  • PayPal
  • Apple Pay
  • Google Pay
  • Visa Checkout
  • Electronic Bank Transfer
  • Fraud Management Tools
  • Global Tax calculator 
  • Delivery Address Verification

Product editions

 

Compatible with Open Source (CE) : 2.4

Compatible with Commerce on prem (EE) : 2.4

Compatible with Commerce on Cloud (ECE) : 2.4

 

Getting started

Pre-Requisites - Magento – In order to use the Cybersource Extension for Magento please make sure you have the working instance of Magento.

a.       View the Adobe Commerce Installation Guide and Flow here - Installation flow | Adobe Commerce Developer Guide (magento.com)

b.       Set up a Magento Commerce Account - Creating a Commerce Account | Adobe Commerce 2.4 User Guide (magento.com)

c.       Log Into the Market Place (ensure you have created an access key, for details please see Adobe support documentation here) - Commerce Marketplace | Adobe Commerce 2.4 User Guide (magento.com)

Pre-Requisites - Cybersource

Create REST Keys (Required for Flex Microform)

a.       Sign into your Cybersource Business Center account (Live) or (Test)

b.       Access Payment Configuration -> Key Management

c.       Select the 'Generate Key' button in the top right hand corner

d.       Select your key type as 'REST - Shared Secret Key' and Generate Key

e.       Copy your KeyID and Shared Secret Key values and save them securely


Create SOAP Keys (Required for all integrations)

a.       Sign into your Cybersource Business Center account (Live) or (Test)

b.       Access Payment Configuration -> Key Management

c.       Select the 'Generate Key' button in the top right hand corner

d.       Select your key type as 'SOAP Toolkit' and Generate Key

e.       Copy the Secret Key value and save them securely

Purchase the extension

a.       In the Magento Marketplace you have the option to either search for 'Cybersource Payment Management Platform' and select the extension developed by Cybersource or you can access it directly from the following link

b.       Select your Magento 'Edition' & 'Store version' i.e. 'Commerce on Cloud' and '2.4'

c.       Add your selection to cart.*

d.       Complete checkout*

Upon completion of the checkout you will be granted access keys by Magento to download these into your Magento instance pleae follow the remaining steps

*n.b. Although you're required to go through a checkout process the extension is free of charge and no card details are required to be saved within you Magento Marketplace account

Prepare you Magento Environment

After completing step 3 you can now copy your Public and Private Keys into your Magento instance:

a.       Go to My Profile -> My Products -> Access Keys

b.       Select the Cybersource extension line

c.       Copy both the Public and Private Keys

d.       In your Magento instance rename auth.json.sample file to auth.json in the Magento root directory on your server, and enter the access keys from steps above.

e.       Add the following code text to the auth.json file

            {
     "http-basic":{
        "repo.magento.com": {
            "username": "Your_Public_Key",
            "password": "Your_Private_key"
        }
    }
}

f.       Open composer.json and add the following keys and values under the "require" array 

            "version": "2.4.6",
         "require": {
                "goetas-webservices/xsd2php-runtime": "^0.2.15",
                "lcobucci/jwt": "4.1.5",
}

Download the Extension

Now that you've prepared the environment you just need to import the code base through Composer.  In order to do this run the following commands:

a.       Import the extension code

            composer require cybersource/global-payment-management
composer require cybersource/module-recaptcha

b.       Enable modules

            php bin/magento module:enable CyberSource_AccountUpdater CyberSource_Core CyberSource_ApplePay CyberSource_Atp CyberSource_BankTransfer CyberSource_SecureAcceptance CyberSource_ECheck CyberSource_GooglePay CyberSource_KlarnaFinancial CyberSource_VisaCheckout CyberSource_Address CyberSource_Tax CyberSource_ThreeDSecure CyberSource_PayPal CyberSource_WeChatPay CyberSource_Recaptcha

c.       Update, Compile and Deploy*

*n.b. Please run the below lines individually

            php bin/magento setup:di:compile
php bin/magento indexer:reindex
php bin/magento setup:upgrade
php bin/magento setup:static-content:deploy -f
php bin/magento cache:clean
php bin/magento cache:flush
php bin/magento module:status

You can now validate the install has been successful in two ways:

  1. A Cybersource folder structure should now be visible under your 'Vendor' folder.
  2. When accessing Stores -> Configuration -> Sales -> Payment Methods you will see the Cybersource configuration options

Initial Configuration

n.b. Although we have added flexible integration options, we recommend utilising our Flex Microform solution for capturing card details, this provides a full PCI-A Solution whilst offering flexibility around your chosen UI.

For in-depth guide on configuring the Extension please refer to the Extension User Guide

General Settings -> Webservice Configurations

a.         Enter you Merchant ID (Cybersource Organization ID)

b.        Test Mode -> If set to yes will point all transactions to TEST system (Please ensure you are using the correct credentials for system you're pointing to)

SOAP Settings

a.        Enter Transaction Key (Created in Step 1)

REST Settings

a.        Enter Key ID (Created in Step 1)

b.        Enter Shared Secret Key (Created in Step 1)

Credit Card Settings

a.        Set Enabled to Yes

b.        Set 'Title' to the value you would like card payments to appear under in your Store Front

c.        Select Payment API as 'SOAP Toolkit'

d.        Select Checkout Flow Mode as 'Flex Microform'

Security Best Practice Guidance

According to industry best practices, the hosting environment should enable rate limiting or implement a service like Cloudflare that will protect against these types of attacks.

As a starting point a merchant should have their environment setup with rate limits for all web applications and additional limits for the following endpoints:

  • /cybersource3ds/cca/requestToken
    • Limit to 5 POST requests per session per minute
    • Limit to 20 POST requests per IP per minute for unknown networks
    • Limit to 500 POST requests per IP per minute for known networks
  • /cybersource/index/loadSilentData/
    • Limit to 5 POST requests per session per minute
    • Limit to 20 POST requests per IP per minute for unknown networks
    • Limit to 500 POST requests per IP per minute for known networks
  • /cybersource/index/placeorder/
    • Limit to 5 POST requests per session per minute
    • Limit to 20 POST requests per IP per minute for unknown networks
    • Limit to 500 POST requests per IP per minute for known networks 

These numbers are recommendations only and each environment should be monitored on a high and average traffic volume day to determine the actual values of the rate limit that will not affect the consumer experience.

As additional security measures, the following could be done:

  • Implement captcha as an option during checkout (see Section 3.1.1 of User Guide)
  • Modify the payment module to allow for session / IP rate limiting in Magento web application 

Cybersource extension

Whether you’re looking to move to Adobe Commerce/Magento or are already using it, our Cybersource Global Payment Management Magento extension can quickly help you reach your digital commerce goals, supporting you to enhance customer experience, grow revenues and mitigate risk. Our integrated platform supports popular payment methods across channels and helps boost conversion, with support for payment acceptance in 190 countries and territories covering 50+ funding currencies and connections into 150+ processors/acquirers.

It is equipped to handle massive transaction volumes from worldwide customers, our solution automates and streamlines fraud screening—helping you achieve the right balance between maximizing sales, reducing fraud losses and controlling operational costs.

We help keep sensitive customer payment data safe by removing it from your network and vaulting it in secure Visa data centers.