ON THIS PAGE

Overview

Version 1.0

Release notes V1

A fully hosted payment page offers a simple, customizable payment solution with low levels of PCI requirement overheads by keeping sensitive cardholder data out of your systems and requires minimal integration effort.

You can use the Hosted Payment Page in two ways:

  • On its own to process payments when you collect card details on your site.
  • To create multiple payment experiences by configuring separate profiles for different business needs.

Key Steps for Integration

  1. Review the Key Features and Benefits and Integration Feature Comparison sections to learn more about the hosted payment pages and their capabilities. Consider this information before you start your integration. Make sure that a this integration is the best choice for your system. One of our other integration methods might work just as well, and require less effort to integrate in to your system.
  2. Access the Smartpay Fuse portal to create a Hosted Checkout profile.
  3. Configure account settings to define the functionality, appearance, and branding of your payment page.
  4. Test your integration thoroughly.

Fully Hosted Payment Pages provide these key benefits:

  • Low integration overhead
  • Minimal PCI overhead
  • Accepts a wide range of card types such as American Express, Mastercard, and Visa
  • Payment page customization
  • Simple redirection of the customer browser
  • 3D Secure ready

Secure Acceptance Hosted Payment page is one of several methods to accept payments on your site. Smartpay Fuse offers additional methods that provide different features. Before you start your integration, make sure you choose the right method for your needs. If the capability you need is not supported with Secure Acceptance Hosted Checkout solution, consider using one of the alternate integration methods.

For more information about these integration options, refer to these quick start guides:

  • E-commerce Plugins: provides an easy integration for supported e-commerce platforms.
  • Virtual Terminal: no integration is required because servicing agents take payments using our back-office portal, Smartpay Fuse Portal.
  • Hosted Fields: you can capture individual payment card details as PCI-safe fields.
  • REST API: full, back end integration using our REST API.

Contact us if you have questions about Secure Acceptance Hosted Payment Pages.

This table provides a comparison of the features that are available in the different integration methods.

 

Integration Methods
Features Virtual Terminal 1  E-Commerce Plugins Hosted Payment Page   Direct REST API  Hosted Fields
 PCI overhead SAQ C-VT Mixed2 SAQ A SAQ D SAQ A3
 Transaction Types

Authorization only

 Yes Yes (all) Yes Yes Yes7

Authorization and capture

 Yes Yes (all) Yes Yes Yes7

Tokenise card (COF) 

 Yes Yes Yes4 Yes Yes7

CIT (initial/subsequent)

 Yes Yes Yes4 Yes Yes7

MIT (continuous authority)

 No Some6 No Yes Yes7

Refund (standalone)

 Yes8 Some6 REST API & Smartpay Fuse Portal1 Yes Yes7

Refund (existing transaction)

 Yes Yes (all) REST API & Smartpay Fuse Portal1 Yes Yes7

Reversal

 Yes Yes (all) REST API & Smartpay Fuse Portal1 Yes Yes7

Capture of standalone authorization

 No Yes (all) REST API & Smartpay Fuse Portal1 Yes Yes7
 3-D Secure (v2)  N/A Yes (all) Yes Yes Yes7
 Account validation N/A Some6 Yes Yes Yes7
 Basic fraud rules5 Yes Yes (all) Yes Yes Yes7
 Low value exemptions N/A No Yes Yes Yes7
AVS/CSC Auto Reversal/Blocking Yes8 Yes6, 8 Yes8 Yes8 Yes7, 8
Digital Wallets

Apple Pay

 N/A Some6 No Yes No7

Google Pay

 N/A Some6 No Yes No7
Card Types

Visa

 Yes Yes Yes Yes Yes

Mastercard

 Yes Yes Yes Yes Yes

American Express

 Yes8 Yes8 Yes8 Yes8 Yes8
 Channels

E-Commerce

 No Yes Yes Yes Yes7

Moto

 Yes Some6 Yes8 Yes Yes7

Notes:

1: The Smartpay Fuse Portal is our back-office servicing portal.
2: Different plugins use different integration methods. Refer to the applicable quick start guide listed and linked above for details about the PCI implications of those integration methods. Contact support if you have concerns or questions about PCI implications.
3: SAQ A applies when Flex Microforms is used to tokenize from web applications.
4: Secure Acceptance Hosted Checkout creates tokens from initial CIT transactions that can be used for subsequent CIT transactions.
5: Basic velocity rules using Decision Manager are only available for SME clients. Advanced fraud check and TRA are handled on a case-by-case basis.
6: These features are only available on some of our plugins (refer to the individual plugin solution pages for more information).
7: Flex Microform allows card numbers to be safely tokenized in compliance with PC standards. The resulting transient token is used to process or manage the transaction using the direct integration REST API.
8: These features are not enabled out of the box and need further configuration by our support team.

The figure below shows the stages of the payment flow using Fully Hosted Payment Pages.

  1. The customer processes their order on the merchant website.
  2. The customer's system requests a payment form.
  3. Smartpay Fuse creates a payment form and sends it to the customer.
  4. The customer's system displays the payment form.
  5. The customer enters their card details.
  6. The customer computer sends card details to Smartpay Advance.
  7. Smartpay Fuse receives the card information and processes the transaction.
file

This integration option provides a PCI SAQ A level of compliance when used to host payment form frames within a web page.

 

Card details are entered on a customer browser and are sent directly to Smartpay Fuse. When the form is submitted, payment data is submitted directly to Smatpay Fuse and never touches your systems.

 

If you have any questions or concerns about the PCI implications of using Fully Hosted Payment Pages, contact us.

Getting Started

Create a sandbox account

Creating a sandbox account allows you to start a programmatic integration to our platform and provides access to the Smartpay Fuse Portal[ebc] Virtual Terminal.

  1. Visit our sandbox creation page: https://developer.smartpayfuse.barclaycard/hello-world/sandbox.html.
  2. Complete the registration form, accept the terms and conditions, and click Create Account to create your sandbox account.

    Result: You receive an automated email from our partner, Authorize.net plus. This email includes instructions for your first log in and password reset. If you do not receive the email within five minutes after you submit your form, check your email junk folder.

What to do next: Continue with Step 2: Log In to the Smartpay Fuse Portal.

Log in to the Enterprise Business Centre

  1. Log in to the Smartpay Fuse Portal (https://admin.smartpayfuse.barclaycard/ebc2) using the username and password you created for your sandbox account.
file

2. When prompted, set a new password for your Smartpay Fuse Portal account.

What to do next: Continue with Step 3: Create Flex Microform API Keys. 

Create your Secure Acceptance Hosted Payment Page profile

You can use a default profile with pre-configured settings or set up a new profile.

Follow these steps to set up a default profile:

file

2. Choose Inactive from the Profile Status drop-down menu.

file

The default SME Hosted Checkout profile appears in the profile list.

file

3. Click the More icon for the SME Hosted Checkout profile and choose Edit Profile from the drop-down menu.

file

Continue to Step 4: Configure your Secure Acceptance Hosted Checkout profile.

Follow these steps to set up a New Profile.

1. Navigate to Payment Configuration > Secure Acceptance Settings in the Smartpay Fuse Portal left side-bar.

file

2. Enter the new profile information.

  • Enter the profile name.
  • Optional: Enter a profile description.
  • Choose Hosted Checkout as the Integration Method.
  • Enter your company name.
  • Optional: Enter contact information for the primary owner of the new payment page profile.
  • Choose Payment Tokenization settings.
  • Choose Decision Manager settings.

 Important: Enable Decision Manager when creating the new profile. If you do not enable this feature, an error will occur when you activate the profile.

  • Optional: Enable Verbose Data by checking the box.
  • Enable Generate Device Fingerprint by checking the box.

Important: Enable Generate Device Fingerprint when creating the new profile. If you do not enable this feature, an error will occur when you activate the profile.

  • Choose BIN Lookup settings.

3. Click Submit to save the profile information or choose Cancel to close the menu without saving.

What to do next: Continue with Step 4: Configure your Secure Acceptance Hosted Checkout profile.

Configure your Secure Acceptance Hosted Checkout profile

Once your Secure Acceptance Hosted Checkout profile is created, you can configure additional settings for your integration. Review and configure these mandatory settings.

1. Go to Payment Configuration > Secure Acceptance Settings in the Smartpay Fuse Portal[ebc] left side-bar.

2. Search for the profile you set up in Step 3: Create a Secure Acceptance Hosted Payment Page profile.

3. Click the More icon for the profile and choose Edit Profile from the drop-down menu.

file

The Edit Profile page appears. Use the top bar to view and edit different profile setting categories.

file

4. Go to PAYMENT SETTINGS in the top navigation bar and configure these fields:

  • Card Type: Add accepted cards by clicking the Add card type button.
  • Automatic Authorization Reversal: Check the boxes if you would like to automatically reverse transactions that fail Card Verification Code (CVC) or Address Verification Service (AVS) checks.
  • Click the Save button to save your settings.

5. Go to SECURITY in the top navigation bar and configure API key settings

  • Click the Create key button and enter the new key information:
  • Key Name: Enter the new key name.
  • Signature Version: Choose the signature version from the drop down menu.
  • Signature Method: Choose the signature method from the drop down menu.
  • Click Create to save the new API key settings.

6. Go to PAYMENT FORM in the top navigation bar and configure the payment form settings.

  • Payment Form Flow: Choose a customer checkout experience.
  • Checkout Steps: Choose to enable or disable steps included in the payment form checkout. If Billing Information and Shipping Information are disabled, you must send this information with your API.
  • Payment Information: Check the Mask sensitive fields box to hide sensitive data (such as card and bank account numbers).
  • Order Review: Check the Display or Edit boxes for tokenized checkout workflows.
  • Click the Save button to save your settings.

7. Go to CUSTOMER RESPONSE in the top navigation bar and configure the redirect endpoints for the customer.

  • Transaction Response Page: Choose to use a Visa Acceptance Solutions response message or your own hosted response page.
  • Cancel Response Page: Choose to use a Visa Acceptance Solutions response message or your own hosted response page for canceled transactions.
  • Custom Redirect After Checkout: Enter the URL of the page to link to after the checkout process is complete.
  • Click the Save button to save your settings.

8. Click the Promote Profile button to save all settings and activate the profile.

What to do next: Continue with Step 5: Test your new Secure Acceptance Hosted Checkout payment page.

Test your new Secure Acceptance Hosted Checkout payment page

Successfully processing a test transaction confirms that your credentials are valid and your implementation is correct. You can use sample application code to test basic transactions. Sample application code is available in these languages:

  • JSP
  • C#
  • Ruby
  • Perl
  • PHP
  • VB

    These samples use the Authorize.net plus brand because Secure Acceptance Hosted Checkout payment pages were created in partnership with Authorize.net plus. 

  1. Deploy your webserver.

  2. Ensure you have PHP installed such that you can successfully run PHP applications.

  3. Unpack the example code and check all file permissions.

  4. Edit payment_form.php and replace the access_key and profile_id placeholder default values with the values that are generated when you created your credentials in Step 3: Create a Secure Acceptance Hosted Payment page profile.

  5. Edit security.php and replace the SECRET KEY field with the key you created in Step 3: Create a Secure Acceptance Hosted Payment page profile. 

  6. Edit payment_form.php and replace bill_to fields with test values.

    Update the signed_field_names fields with the same test values.

  7. Upload the edited PHP sample code to your web server.

  8. Navigate to the payment_form.php URL to start the test payment. The Payment Details set up page appears.

  9. Click the Default All button to populate the fields.

  10. Change the currency value to "GBP".

  11. Click the Submit button. The Review Payment Details page appears.

  12. Click the Confirm button to request the Smartpay Fuse payment page.

  13. Complete the transaction on the Smartpay Fuse payment page. You will be redirected to receipt.php on your server.
  14. Open the Smartpay Fuse Portal and go to Transaction Management > Transactions in the left side-bar.

  15. Search for the test transaction and click the Request ID link.

  16. Review the transaction details and confirm the information is correct.


Check the debug log information available at Transaction Management > Secure Acceptance if you encounter issues with the test transaction.

Congratulations, you have processed a test transaction using a Secure Acceptance Hosted Checkout payment page.

What to do next: Continue with Step 5: Test Integration Using a Tokenized Payment Card.

Further Information

REST API Getting Started Guide: provides information about the REST API and how to set up the REST API. 

Code Samples
JSP
C#
Ruby
Perl
PHP
VB

Testing Resources
Testing information: provides test card numbers and testing instructions.
Test Cases for 3-D Secure 2.x: provides Payer authentication test scenarios for 3-D Secure 2.x

Developer Guides
Secure Acceptance Hosted Checkout Integration Guide: provides complete information about integrating Secure Acceptance Hosted Checkout into your payment system.

If you have questions about Secure Acceptance Hosted Checkout or need guidance for your integration, contact us.