What is 3D Secure?

3D Secure, also known as "3DS", is an authentication protocol that can help prevent fraud and chargebacks.

→ Head over to the 3D Secure guide to learn more about how 3DS works and how merchants are onboarded to 3DS.

How to enable 3DS

3DS can be enabled when taking a payment on the web with Rainforest's Payment Component. This guide will walk through the steps you'll need to make to your payment integration.

3DS merchant onboarding

Your merchants must be onboarded to 3DS by Rainforest to run payments with 3DS protection.

→ Head over to the 3DS merchant onboarding guide for next steps.

Update the payin config

First, create the payin config with the required 3DS fields:

• threeds_mode of ATTEMPT
• billing_contact.name
• billing_contact.email OR billing_contact.phone

🚧

Billing contact requirements for Visa

Visa requires the billing contact name and either email or phone to qualify for 3DS protection.

{
    "amount": 202, // $2.02
    "currency_code": "USD",
    "threeds_mode": "ATTEMPT",
  	"billing_contact": {
    	"name": "John Smith",
      "email": "[email protected]"
    }
}

The threeds_mode of ATTEMPT tells Rainforest to make a best-effort attempt to run 3DS. If the merchant is not onboarded to 3DS or the card does not support 3DS, Rainforest will continue to process an unauthenticated payment without 3DS protection.

→ Head over to the how 3DS works guide on more information on the payment flows with and without 3DS protection.

Configure the payment component

Your payment page may need minor changes to allow the Payment component to run 3DS on your behalf. In the Rainforest's Sandbox environment, a 3DS challenge modal dialog will be shown to simulate the 3DS flow.

Listen to events

Payment component as top level element

The Rainforest 3DS modal will need to be visible above any elements on your page. If you currently listen to the payment component's attempted event and show your own modal or shadow over the page, you may need to do additional work to allow the Rainforest 3DS modal to appear. The Payment Component will emit the following events if a challenge is requested and 3DS challenge modal is displayed.

Events

Content Security Policy

If your webpage uses a Content Security Policy to control what code is allowed on the page, you may need to make changes to allow the bank's authentication to run inside of an iframe. Get in touch with your Customer Success Manager for more help with this change.

You will need to allow frames and form submits (via the frame-src and form-action directive) from:

• centinelapi.cardinalcommerce.com
• api.rainforestpay.com
• static.rainforestpay.com

3DS results

There are two ways to find out if a transaction ran 3DS successfully:

1. In Rainforest's Portal, you can see the 3DS success shown with other details in the payin detail screen:

2. In the get payin API endpoint response, a Payin with a 3DS attempt will have a threeds_attempt object present.
   1. It contains a threeds_attempt_id property whose value is prefixed with tds_.
   2. This value references the 3DS session that was used to create the payin.
   3. All relevant 3DS attempt dates and failure details are included in the object. Please refer to the get payin API endpoint response.