Welcome to Zuora Product Documentation

Explore our rich library of product information

Strong customer authentication

Strong customer authentication (SCA) is a PSD2 mandate requiring two-factor authentication to enhance security and reduce fraud in electronic transactions.

Strong customer authentication (SCA) is one of the mandates of PSD2 that is most applicable to Zuora customers in the European Economic Area and the United Kingdom. SCA requires that merchants use two-factor authentication to reduce the risk of fraudulent transactions. As a growing number of transactions take place online, especially on mobile devices, SCA will help to make it easier for customers to pay and reduce the risk and cost of payments fraud.

With SCA, all electronic transactions will need authentication using at least two of three possible methods:

mobile

fingerprint

Knowledge

Something only the user knows, such as password

Possession

Something only the user possesses, such as a token or mobile phone

Inherence

Something the user is, such as a biometric (fingerprint recognition)