Authentication service

After creating the transaction, it's necessary to call the authentication service to continue the flow. If the AUC status is returned, a challenge must be initiated. For the AUD status, the "decoupled" flow must be followed. Otherwise, further calls won't be required.

Call details

• Resource: /v2/authentication/{3DS Server Transaction ID}
• HTTP Method: PUT
• Request format: JSON
• Response format: JSON
• Header parameters:

Parameter	Description	Format	Mandatory
merchant_id	Merchant code on 3DS Server. The production and certification codes will be different.	< 15 AN	YES
merchant_key	Merchant authentication key on 3DS Server. The production and certification keys will be different.	< 80 AN	YES
Content-Type	Fixed value application/json.	= 15 AN	YES

Example

Below are some examples of the authentication service call using the cURL tool.

Frictionless Flow

Request:

curl
--request PUT "https://mpi-homolog.softwareexpress.com.br/3ds-server/v2/authentication/12341234-1234-1234-1234-123412341234"
--header "Content-Type: application/json"
--header "merchant_id: xxxxxxxxxxxxxxx" 
--header "merchant_key: xxxxxxxxxxx"
--data-binary
{
   "three_ds_comp_ind":"Y",
   "pay_token_ind":"false",
   "notification_url":"https://www.requestor.com/notification",
   "decoupled_notification_url":"https://www.requestor.com/decoupled_notification",
   "trans_type":"01",
   "three_ds_requestor":{
      "authentication_ind":"01",
      "decoupled_max_time":"10",
      "id":"id",
      "name":"Loja de Testes",
      "url":"https://www.requestor.com"
   },
   "acquirer":{
      "bin":"2",
      "merchant_id":"00000000"
   },
   "browser":{
      "accept_header":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
      "ip":"10.20.30.40",
      "javascript_enabled":true,
      "java_enabled":"false",
      "language":"pt-BR",
      "color_depth":"24",
      "screen_height":"864",
      "screen_width":"1536",
      "tz":"180",
      "user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
   },
   "cardholder":{
      "card_expiry_date":"2212",
      "name":"Joaquim",
      "acct":{
         "type":"02",
         "number":"1234123412341234"
      }
   },
   "merchant":{
      "mcc":"mcc",
      "country_code":"BRA",
      "name":"Loja de Teste",
   },
   "message":{
      "category":"01"
   },
   "purchase":{
      "amount":"10000",
      "currency":"986",
      "exponent":"2",
      "date":"date"
   }
}
--verbose

Response:

{
    "three_ds_server": {
        "trans_id": "12341234-1234-1234-1234-123412341234",
        "status": "AUY"
    },
    "acs": {
        "operator_id": "acsOperatorID",
        "reference_number": "acsReferenceNumber",
        "trans_id": "43214321-4321-4321-4321-432143214321"
    },
    "eci": "05",
    "device_channel": "02",
    "authentication": {
        "value": "1234567890123456789012345678"
    },
    "broad_info": "broadInfo",
    "ds": {
        "reference_number": "dsReferenceNumber",
        "trans_id": "56785678-5678-5678-5678-567856875678"
    },
    "transaction": {
        "status": "Y"
    }
}

Challenge Flow

Request:

curl
--request PUT "https://mpi-homolog.softwareexpress.com.br/3ds-server/v2/authentication/12341234-1234-1234-1234-123412341234"
--header "Content-Type: application/json"
--header "merchant_id: xxxxxxxxxxxxxxx" 
--header "merchant_key: xxxxxxxxxxx"
--data-binary
{
   "three_ds_comp_ind":"Y",
   "pay_token_ind":"false",
   "notification_url":"https://www.requestor.com/notification",
   "decoupled_notification_url":"https://www.requestor.com/decoupled_notification",
   "trans_type":"01",
   "three_ds_requestor":{
      "authentication_ind":"01",
      "decoupled_max_time":"10",
      "id":"id",
      "name":"Loja de Testes",
      "url":"https://www.requestor.com"
   },
   "acquirer":{
      "bin":"2",
      "merchant_id":"00000000"
   },
   "browser":{
      "accept_header":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
      "ip":"10.20.30.40",
      "javascript_enabled":true,
      "java_enabled":"false",
      "language":"pt-BR",
      "color_depth":"24",
      "screen_height":"864",
      "screen_width":"1536",
      "tz":"180",
      "user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
   },
   "cardholder":{
      "card_expiry_date":"2212",
      "name":"Joaquim",
      "acct":{
         "type":"02",
         "number":"1234123412341234"
      }
   },
   "merchant":{
      "mcc":"mcc",
      "country_code":"BRA",
      "name":"Loja de Teste",
   },
   "message":{
      "category":"01"
   },
   "purchase":{
      "amount":"10004",
      "currency":"986",
      "exponent":"2",
      "date":"date"
   }
}
--verbose

Response:

{
    "three_ds_server": {
        "trans_id": "12341234-1234-1234-1234-123412341234",
        "status": "AUC"
    },
    "acs": {
        "challenge_mandated": "Y",
        "operator_id": "acsOperatorID",
        "reference_number": "acsReferenceNumber",
        "trans_id": "43214321-4321-4321-4321-432143214321",
        "url": "https://www.acs.com/challenge"
    },
    "device_channel": "02",
    "authentication": {
        "type": "01"
    },
    "broad_info": "broadInfo",
    "ds": {
        "reference_number": "dsReferenceNumber",
        "trans_id": "56785678-5678-5678-5678-567856875678"
    },
    "transaction": {
        "status": "C"
    }
}

Decoupled Flow

Request:

curl
--request PUT "https://mpi-homolog.softwareexpress.com.br/3ds-server/v2/authentication/12341234-1234-1234-1234-123412341234"
--header "Content-Type: application/json"
--header "merchant_id: xxxxxxxxxxxxxxx" 
--header "merchant_key: xxxxxxxxxxx"
--data-binary
{
   "three_ds_comp_ind":"Y",
   "pay_token_ind":"false",
   "notification_url":"https://www.requestor.com/notification",
   "decoupled_notification_url":"https://www.requestor.com/decoupled_notification",
   "trans_type":"01",
   "three_ds_requestor":{
      "authentication_ind":"01",
      "decoupled_max_time":"10",
      "id":"id",
      "name":"Loja de Testes",
      "url":"https://www.requestor.com"
   },
   "acquirer":{
      "bin":"2",
      "merchant_id":"00000000"
   },
   "browser":{
      "accept_header":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
      "ip":"10.20.30.40",
      "javascript_enabled":true,
      "java_enabled":"false",
      "language":"pt-BR",
      "color_depth":"24",
      "screen_height":"864",
      "screen_width":"1536",
      "tz":"180",
      "user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
   },
   "cardholder":{
      "card_expiry_date":"2212",
      "name":"Joaquim",
      "acct":{
         "type":"02",
         "number":"1234123412341234"
      }
   },
   "merchant":{
      "mcc":"mcc",
      "country_code":"BRA",
      "name":"Loja de Teste",
   },
   "message":{
      "category":"01"
   },
   "purchase":{
      "amount":"10006",
      "currency":"986",
      "exponent":"2",
      "date":"date"
   }
}
--verbose

Response:

{
    "three_ds_server": {
        "trans_id": "12341234-1234-1234-1234-123412341234",
        "status": "AUD"
    },
    "acs": {
        "challenge_mandated": "Y",
        "operator_id": "acsOperatorID",
        "reference_number": "acsReferenceNumber",
        "trans_id": "43214321-4321-4321-4321-432143214321",
        "decoupled_confirmation_ind": "Y"
    },
    "device_channel": "02",
    "authentication": {
        "type": "04"
    },
    "broad_info": "broadInfo",
    "cardholder": {
        "info": "cardholderInfo"
    },
    "ds": {
        "reference_number": "dsReferenceNumber",
        "trans_id": "56785678-5678-5678-5678-567856875678"
    },
    "transaction": {
        "status": "D"
    }
}

Request parameters

The table below describes the request parameters of the authentication service:

Parameter	Description	Format	Mandatory
device_channel	Indicates the type of channel interface being used to initiate the transaction. Default value: 02. Learn more.	= 2 N	NO
three_ri_ind	Indicates the type of 3RI request. 01 = Recurring transaction 02 = Instalment transaction 03 = Add card 04 = Maintain card information 05 = Account verification 06 = Split/delayed shipment 07 = Top-up 08 = Mail Order 09 = Telephone Order 10 = Whitelist status check 11 = Other payment Mandatory for device_channel = 03.	= 2 N	COND.
three_ds_comp_ind	Indicates whether the 3DS Method successfully completed. Y = Successfully completed N = Did not successfully complete U = Unavailable— there was no 3DS Method URL related to the card. Mandatory for device_channel = 02.	= 1 A	COND.
pay_token_ind	A value of true indicates that the transaction was de-tokenised prior to being received by the ACS.	< 5 AN	NO
pay_token_source	Indicates where the de-tokenisation occurs. 01 - 3DS Server 02 - DS	= 2 N	NO
notification_url	Fully qualified URL of the 3DS Requestor to receive the CRes message. Mandatory for device_channel = 02.	< 256 AN	COND.
decoupled_notification_url	Fully qualified URL of the 3DS Requestor to receive the decoupled notification.	< 300 AN	YES
trans_type	Identifies the type of transaction being authenticated. 01 = Goods/ Service Purchase 03 = Check Acceptance 10 = Account Funding 11 = Quasi-Cash Transaction 28 = Prepaid Activation and Load	= 2 N	YES
broad_info	Unstructured information sent between the 3DS Server, the DS and the ACS.	Object	NO
three_ds_requestor
authentication_ind	Indicates the type of Authentication request. 01 = Payment transaction 02 = Recurring transaction 03 = Instalment transaction 04 = Add card 05 = Maintain card 06 = Cardholder verification as part of EMV token ID&V	= 2 N	YES
decoupled_max_time	Indicates the maximum amount of time that the 3DS Requestor will wait for an ACS to provide the results of a Decoupled Authentication transaction (in minutes).	< 5 N	NO
decoupled_request_ind	Indicates whether the 3DS Requestor requests the ACS to utilise Decoupled Authentication and agrees to utilise Decoupled Authentication if the ACS confirms its use. Y = Decoupled Authentication is supported and preferred if challenge is necessary N = Do not use Decoupled Authentication	= 1 AN	NO
challenge_ind	Indicates whether a challenge is requested for this transaction. 01 = No preference 02 = No challenge requested 03 = Challenge requested (3DS Requestor preference) 04 = Challenge requested (Mandate) 05 = No challenge requested (transactional risk analysis is already performed) 06 = No challenge requested (Data share only) 07 = No challenge requested (strong consumer authentication is already performed) 08 = No challenge requested (utilise whitelist exemption if no challenge required) 09 = Challenge requested (whitelist prompt requested if challenge required)	= 2 N	NO
id	DS assigned 3DS Requestor identifier.	< 35 AN	YES
name	DS assigned 3DS Requestor name.	< 40 AN	YES
url	Fully qualified URL of 3DS Requestor website or customer care site.	< 2048 AN	YES
three_ds_requestor. authentication_info	Information about how the 3DS Requestor authenticated the cardholder before or during the transaction.
data	Data that documents and supports a specific authentication process.	< 20000 AN	NO
method	Mechanism used by the Cardholder to authenticate to the 3DS Requestor. 01 = No 3DS Requestor authentication occurred (i.e. cardholder “logged in” as guest) 02 = Login to the cardholder account at the 3DS Requestor system using 3DS Requestor’s own credentials 03 = Login to the cardholder account at the 3DS Requestor system using federated ID 04 = Login to the cardholder account at the 3DS Requestor system using issuer credentials 05 = Login to the cardholder account at the 3DS Requestor system using third-party authentication 06 = Login to the cardholder account at the 3DS Requestor system using FIDO Authenticator 07 = Login to the cardholder account at the 3DS Requestor system using FIDO Authenticator (FIDO assurance data signed) 08 = SRC Assurance Data	= 2 N	NO
timestamp	Date and time in UTC of the cardholder authentication in YYYYMMDDHHMM format.	= 12 N	NO
three_ds_requestor. prior_authentication_info	Information about how the 3DS Requestor authenticated the cardholder as part of a previous 3DS transaction.
data	Data that documents and supports a specific authentication process.	< 2048 AN	NO
method	Mechanism used by the Cardholder to previously authenticate to the 3DS Requestor. 01 = Frictionless authentication occurred by ACS 02 = Cardholder challenge occurred by ACS 03 = AVS verified 04 = Other issuer methods	= 2 N	NO
timestamp	Date and time in UTC of the prior cardholder authentication in YYYYMMDDHHMM format.	= 12 N	NO
reference	This data element provides additional information to the ACS to determine the best approach for handing a request.	< 36 AN	NO
acquirer
bin	Acquiring institution identification code as assigned by the DS receiving the AReq message.	< 11 AN	YES
merchant_id	Acquirer-assigned Merchant identifier.	< 35 AN	YES
browser	These parameters are mandatory if device_channel = 02.
accept_header	Exact content of the HTTP accept headers as sent to the 3DS Requestor from the Cardholder’s browser.	< 2048 AN	COND.
ip	IP address of the browser as returned by the HTTP headers to the 3DS Requestor.	< 45 AN	COND.
java_enabled	Boolean that represents the ability of the cardholder browser to execute Java. Value is returned from the navigator.javaEnabled property.	< 5 AN	COND.
javascript_enabled	Boolean that represents the ability of the cardholder browser to execute JavaScript.	< 5 AN	COND.
language	Value representing the browser language as defined in IETF BCP47. Returned from navigator.language property.	< 8 AN	COND.
color_depth	Value representing the bit depth of the colour palette for displaying images, in bits per pixel. Obtained from Cardholder browser using the screen.colorDepth property. 1 = 1 bit 4 = 4 bits 8 = 8 bits 15 = 15 bits 16 = 16 bits 24 = 24 bits 32 = 32 bits 48 = 48 bits	< 2 N	COND.
screen_height	Total height of the Cardholder’s screen in pixels. Value is returned from the screen.height property.	< 6 N	COND.
screen_width	Total width of the cardholder’s screen in pixels. Value is returned from the screen.width property.	< 6 AN	COND.
tz	Time-zone offset in minutes between UTC and the Cardholder browser local time. Value is returned from the getTimezoneOffset() method.	< 5 AN	COND.
user_agent	Exact content of the HTTP user-agent header.	< 2048 AN	COND.
cardholder
card_expiry_date	Expiry Date of the PAN or token supplied to the 3DS Requestor by the Cardholder in YYMM format.	= 4 N	YES
addr_match	Indicates whether the Cardholder Shipping Address and Cardholder Billing Address are the same. Y = Shipping Address matches Billing Address N = Shipping Address does not match Billing Address	= 1 AN	NO
email	The email address associated with the account that is either entered by the Cardholder, or is on file with the 3DS Requestor.	< 256 AN	YES
name	Name of the Cardholder.	< 45 AN	YES
cardholder. home_phone	The home phone number provided by the Cardholder.
cc	Country Code	< 3 N	YES
subscriber	Subscriber	< 15 N	YES
cardholder. mobile_phone	The mobile phone number provided by the Cardholder.
cc	Country Code	< 3 N	YES
subscriber	Subscriber	< 15 N	YES
cardholder. work_phone	The work phone number provided by the Cardholder.
cc	Country Code	< 3 N	YES
subscriber	Subscriber	< 15 N	YES
cardholder. acct
type	Indicates the type of account. For example, for a multi-account card product. 01 = Not Applicable 02 = Credit 03 = Debit	= 2 N	YES
number	Account number that will be used in the authorisation request for payment transactions. May be represented by PAN, token.	< 19 N	YES
id	Additional information about the account optionally provided by the 3DS Requestor.	< 64 AN	NO
cardholder. acct. info
ch_acc_age_ind	Length of time that the cardholder has had the account with the 3DS Requestor. 01 = No account (guest check-out) 02 = Created during this transaction 03 = Less than 30 days 04 = 30−60 days 05 = More than 60 days	= 2 N	NO
ch_acc_change	Date that the cardholder’s account with the 3DS Requestor was last changed, including Billing or Shipping address, new payment account, or new user(s) added, in YYYYMMDD format.	= 8 N	NO
ch_acc_change_ind	Length of time since the cardholder’s account information with the 3DS Requestor was last changed, including Billing or Shipping address, new payment account, or new user(s) added. 01 = Changed during this transaction 02 = Less than 30 days 03 = 30−60 days 04 = More than 60 days	= 2 N	NO
ch_acc_date	Date that the cardholder opened the account with the 3DS Requestor in YYYYMMDD format.	= 8 N	NO
ch_acc_pw_change	Date that cardholder’s account with the 3DS Requestor had a password change or account reset in YYYYMMDD format.	= 8 N	NO
ch_acc_pw_change_ind	Indicates the length of time since the cardholder’s account with the 3DS Requestor had a password change or account reset. 01 = No change 02 = Changed during this transaction 03 = Less than 30 days 04 = 30−60 days 05 = More than 60 days	= 2 N	NO
nb_purchase_account	Number of purchases with this cardholder account during the previous six months.	< 4 N	NO
provision_attempts_day	Number of Add Card attempts in the last 24 hours.	< 3 N	NO
txn_activity_day	Number of transactions (successful and abandoned) for this cardholder account with the 3DS Requestor across all payment accounts in the previous 24 hours.	< 3 N	NO
txn_activity_year	Number of transactions (successful and abandoned) for this cardholder account with the 3DS Requestor across all payment accounts in the previous year.	< 3 N	NO
payment_acc_age	Date that the payment account was enrolled in the cardholder’s account with the 3DS Requestor in YYYYMMDD format.	= 8 N	NO
payment_acc_ind	Indicates the length of time that the payment account was enrolled in the cardholder’s account with the 3DS Requestor. 01 = No account (guest check-out) 02 = During this transaction 03 = Less than 30 days 04 = 30−60 days 05 = More than 60 days	= 2 N	NO
ship_address_usage	Date when the shipping address used for this transaction was first used with the 3DS Requestor in YYYYMMDD format.	= 8 N	NO
ship_address_usage_ind	Indicates when the shipping address used for this transaction was first used with the 3DS Requestor. 01 = This transaction 02 = Less than 30 days 03 = 30−60 days 04 = More than 60 days	= 2 N	NO
ship_name_indicator	Indicates if the Cardholder Name on the account is identical to the shipping Name used for this transaction. 01 = Account Name identical to shipping Name 02 = Account Name different than shipping Name	= 2 N	NO
suspicious_acc_activity	Indicates whether the 3DS Requestor has experienced suspicious activity (including previous fraud) on the cardholder account. 01 = No suspicious activity has been observed 02 = Suspicious activity has been observed	= 2 N	NO
cardholder. bill_addr
city	The city of the Cardholder billing address associated with the card used for this purchase.	< 50 AN	YES
country	The ISO 3166-1 numeric three-digit country code of the Cardholder billing address associated with the card used for this purchase.	= 3 N	YES
line1	First line of the street address or equivalent local portion of the Cardholder billing address associated with the card used for this purchase.	< 50 AN	YES
line2	Second line of the street address or equivalent local portion of the Cardholder billing address associated with the card used for this purchase.	< 50 AN	YES
line3	Third line of the street address or equivalent local portion of the Cardholder billing address associated with the card used for this purchase.	< 50 AN	YES
post_code	ZIP or other postal code of the Cardholder billing address associated with the card used for this purchase.	< 16 AN	YES
state	The state or province of the Cardholder billing address associated with the card used for this purchase.	< 3 AN	YES
cardholder. ship_addr
city	The city of the Cardholder shipping address associated with the card used for this purchase.	< 50 AN	YES
country	The ISO 3166-1 numeric three-digit country code of the Cardholder shipping address associated with the card used for this purchase.	= 3 N	YES
line1	First line of the street address or equivalent local portion of the Cardholder shipping address associated with the card used for this purchase.	< 50 AN	YES
line2	Second line of the street address or equivalent local portion of the Cardholder shipping address associated with the card used for this purchase.	< 50 AN	YES
line3	Third line of the street address or equivalent local portion of the Cardholder shipping address associated with the card used for this purchase.	< 50 AN	YES
post_code	ZIP or other postal code of the Cardholder shipping address associated with the card used for this purchase.	< 16 AN	YES
state	The state or province of the Cardholder shipping address associated with the card used for this purchase.	< 3 AN	YES
merchant
mcc	DS-specific code describing the Merchant’s type of business, product or service.	= 4 AN	YES
country_code	ISO 3166-1 numeric three-digit country code of the Merchant.	= 3 N	YES
name	Merchant name assigned by the Acquirer or Payment System.	< 40 AN	YES
merchant. risk_indicator	Merchant’s assessment of the level of fraud risk for the specific authentication for both the cardholder and the authentication being conducted.
delivery_email_address	For Electronic delivery, the email address to which the merchandise was delivered.	< 254 AN	NO
delivery_timeframe	Indicates the merchandise delivery timeframe. 01 = Electronic Delivery 02 = Same day shipping 03 = Overnight shipping 04 = Two-day or more shipping	= 2 N	NO
gift_card_amount	For prepaid or gift card purchase, the purchase amount total of prepaid or gift card(s) in major units (for example, USD 123.45 is 123).	< 15 N	NO
gift_card_count	For prepaid or gift card purchase, total count of individual prepaid or gift cards/codes purchased.	< 2 N	NO
gift_card_curr	For prepaid or gift card purchase, ISO 4217 three-digit currency code of the gift card.	= 3 N	NO
pre_order_date	For a pre-ordered purchase, the expected date that the merchandise will be available in YYYYMMDD format.	= 8 N	NO
pre_order_purchase_ind	Indicates whether Cardholder is placing an order for merchandise with a future availability or release date. 01 = Merchandise available 02 = Future availability	= 2 N	NO
reorder_items_ind	Indicates whether the cardholder is reordering previously purchased merchandise. 01 = First time ordered 02 = Reordered	= 2 N	NO
ship_indicator	Indicates shipping method chosen for the transaction. 01 = Ship to cardholder’s billing address 02 = Ship to another verified address on file with merchant 03 = Ship to address that is different than the cardholder’s billing address 04 = “Ship to Store” / Pick-up at local store (Store address shall be populated in shipping address fields) 05 = Digital goods (includes online services, electronic gift cards and redemption codes) 06 = Travel and Event tickets, not shipped 07 = Other (for example, Gaming, digital services not shipped, emedia subscriptions, etc.)	= 2 N	NO
message
category	Identifies the category of the message for a specific use case. 01 - Payment Authentication 02 - Non-Payment Authentication	= 2 N	YES
message. extension[]	Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
criticality_indicator	A Boolean value indicating whether the recipient must understand the contents of the extension to interpret the entire message.	< 5 AN	NO
data	The data carried in the extension.	Object	NO
id	A unique identifier for the extension.	< 64 AN	NO
name	The name of the extension data set as defined by the extension owner.	< 64 AN	NO
purchase
amount	Purchase amount in minor units of currency with all punctuation removed.	< 48 N	YES
currency	ISO 4217 three-digit currency code in which purchase amount is expressed.	= 3 N	YES
exponent	Minor units of currency as specified in the ISO 4217 currency exponent.	= 1 N	YES
date	Date and time of the purchase expressed in UTC in YYYYMMDDHHMMSS format.	= 12 N	YES
instal_data	Indicates the maximum number of authorizations permitted for instalment payments. Value shall be greater than 1.	< 3 N	YES
recurring
expiry	Date after which no further authorizations shall be performed in YYYYMMDD format. Mandatory when three_ds_requestor. authentication_ind = 02 or 03.	= 8 N	COND.
frequency	Indicates the minimum number of days between authorizations. Mandatory when three_ds_requestor. authentication_ind = 02 or 03.	< 4 N	COND.
sdk	These fields are mandatory for 3DS SDKs (device_channel = 01).
app_id	Universally unique ID created upon all installations of the 3DS Requestor App on a Consumer Device. This will be newly generated and stored by the 3DS SDK for each installation.	= 36 AN	COND.
enc_data	JWE Object (represented as a string) containing data encrypted by the SDK for the DS to decrypt.	< 64000 AN	COND.
ephem_pub_key	Public key component of the ephemeral key pair generated by the 3DS SDK and used to establish session keys between the 3DS SDK and ACS.	Object	COND.
max_timeout	Indicates maximum amount of time (in minutes) for all exchanges.	< 2 N	COND.
reference_number	Identifies the vendor and version for the 3DS SDK that is integrated in a 3DS Requestor App, assigned by EMVCo when the 3DS SDK is approved.	< 32 AN	COND.
trans_id	Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.	= 36 AN	COND.
iface	Lists all of the SDK Interface types that the device supports for displaying specific challenge user interfaces within the SDK. 01 = Native 02 = HTML 03 = Both	= 2 N	COND.
ui_type[]	Lists all UI types that the device supports for displaying specific challenge user interfaces within the SDK. 01 = Text 02 = Single Select 03 = Multi Select 04 = OOB 05 = HTML Other (valid only for HTML UI)	= 2 N[]	COND.
white_list
status	Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS Requestor. Y = 3DS Requestor is whitelisted by cardholder N = 3DS Requestor is not whitelisted by cardholder E = Not eligible as determined by issuer P = Pending confirmation by cardholder R = Cardholder rejected U = Whitelist status unknown, unavailable, or does not apply	= 1 AN	NO
status_source	This data element will be populated by the system setting Whitelist Status. 01 = 3DS Server 02 = DS 03 = ACS	= 2 N	NO

Response parameters

If successful, the HTTP response code will be 200. Any other code must be interpreted as an error. The table below describes the response parameters of the authentication service:

Parameter	Description	Format
eci	Electronic Commerce Indicator	= 2 N
broad_info	Unstructured information sent between the 3DS Server, the DS and the ACS.	Object
device_channel	Indicates the type of channel interface being used to initiate the transaction. Default value: 02. Learn more.	= 2 N
three_ds_server
trans_id	3DS Server Transaction ID	= 36 AN
status	3DS Server transaction status. Learn more.	= 3 AN
acs
challenge_mandated	Indication of whether a challenge is required for the transaction to be authorised due to local/regional mandates or other variable. Y = Challenge is mandated N = Challenge is not mandated	= 1 AN
operator_id	DS assigned ACS identifier.	< 32 AN
reference_number	Unique identifier assigned by the EMVCo Secretariat upon Testing and Approval.	< 32 AN
trans_id	Universally Unique transaction identifier assigned by the ACS to identify a single transaction.	= 36 AN
url	Fully qualified URL of the ACS to be used for the challenge.	< 2048 AN
decoupled_confirmation_ind	Indicates whether the ACS confirms utilisation of Decoupled Authentication and agrees to utilise Decoupled Authentication to authenticate the Cardholder. Y = Confirms Decoupled Authentication will be utilised N = Decoupled Authentication will not be utilised	= 1 AN
signed_content	Contains the JWS object (represented as a string) created by the ACS for the ARes message.	var. AN
iface	This the ACS interface that the challenge will present to the cardholder. 01 = Native UI 02 = HTML UI	= 2 N
ui_template	Identifies the UI Template format that the ACS first presents to the consumer. 01 = Text 02 = Single Select 03 = Multi Select 04 = OOB 05 = HTML Other	= 2 N
authentication
type	Indicates the type of authentication method the Issuer will use to challenge the Cardholder. 01 = Static 02 = Dynamic 03 = OOB 04 = Decoupled	= 2 N
value	Payment System-specific value provided by the ACS or the DS using an algorithm defined by Payment System. Authentication Value may be used to provide proof of authentication (CAVV).	= 28 AN
cardholder
info	Text provided by the ACS/Issuer to Cardholder during a Frictionless or Decoupled transaction.	< 128 AN
ds
reference_number	EMVCo-assigned unique identifier to track approved DS.	< 32 AN
trans_id	Universally unique transaction identifier assigned by the DS to identify a single transaction.	= 36 AN
message. extension[]	Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
criticality_indicator	A Boolean value indicating whether the recipient must understand the contents of the extension to interpret the entire message.	< 5 AN
data	The data carried in the extension.	Object
id	A unique identifier for the extension.	< 64 AN
name	The name of the extension data set as defined by the extension owner.	< 64 AN
transaction
status	Indicates whether a transaction qualifies as an authenticated transaction or account verification. Y = Authentication Verification Successful. N = Not Authenticated /Account Not Verified; Transaction denied. U = Authentication/ Account Verification Could Not Be Performed; Technical or other problem, as indicated in ARes or RReq. A = Attempts Processing Performed; Not Authenticated/Verified, but a proof of attempted authentication/verification is provided. C = Challenge Required; Additional authentication is required using the CReq/CRes. D = Challenge Required; Decoupled Authentication confirmed. R = Authentication/ Account Verification Rejected; Issuer is rejecting authentication/verification and request that authorisation not be attempted.	= 1 AN
status_reason	Provides information on why the Transaction Status field has the specified value. 01 = Card authentication failed 02 = Unknown Device 03 = Unsupported Device 04 = Exceeds authentication frequency limit 05 = Expired card 06 = Invalid card number 07 = Invalid transaction 08 = No Card record 09 = Security failure 10 = Stolen card 11 = Suspected fraud 12 = Transaction not permitted to cardholder 13 = Cardholder not enrolled in service 14 = Transaction timed out at the ACS 15 = Low confidence 16 = Medium confidence 17 = High confidence 18 = Very High confidence 19 = Exceeds ACS maximum challenges 20 = Non-Payment transaction not supported 21 = 3RI transaction not supported 22 = ACS technical issue 23 = Decoupled Authentication required by ACS but not requested by 3DS Requestor 24 = 3DS Requestor Decoupled Max Expiry Time exceeded 25 = Decoupled Authentication was provided insufficient time to authenticate cardholder. ACS will not make attempt 26 = Authentication attempted but not performed by the cardholder	= 2 N
white_list
status	Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS Requestor. Y = 3DS Requestor is whitelisted by cardholder N = 3DS Requestor is not whitelisted by cardholder E = Not eligible as determined by issuer P = Pending confirmation by cardholder R = Cardholder rejected U = Whitelist status unknown, unavailable, or does not apply	= 1 AN
status_source	This data element will be populated by the system setting Whitelist Status. 01 = 3DS Server 02 = DS 03 = ACS	= 2 N
sdk
trans_id	Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.	= 36 AN
error
code	Error code. Learn more.	< 3 N
component	Indicates which component identified the error. C = 3DS SDK S = 3DS Server D = DS A = ACS	= 1 AN
description	Error description	< 2048 AN
detail	Error details	< 28 AN