home

Zuora Payments

Zuora BillingZuora PaymentsZuora PlatformZuora CPQZephrZuora RevenueAccounts ReceivableRelease NotesBasicsEntitlementsSupport and policies
Zuora BillingZuora PaymentsZuora PlatformZuora CPQZephrZuora RevenueAccounts ReceivableRelease NotesBasicsEntitlementsSupport and policies

Welcome to Zuora Product Documentation

Explore our rich library of product information

Show Contents

thumbnailZuora Payments

Set up and configure a CyberSource payment gateway instance

Specific configuration fields

Configure CyberSource Decision Manager and Level 2/3 card data settings for your merchant account.

Take the following steps to enable this feature:

  1. Log in to the CyberSource console to enable Decision Manager for your CyberSource merchant account:

    • CyberSource console production environment: https://ebc.cybersource.com/ebc2

    • CyberSource console test environment: https://ebctest.cybersource.com/ebc2

  2. In your CyberSource account, set up the Example profile under the Configuration tab to establish the initial fraud ruleset. You can also add additional profiles to configure custom rulesets based on your business needs.
  3. In Zuora, select one or more of the following checkboxes on the configuration page of the gateway instance. Without any of these checkboxes selected, the Decision Manager service will not run even if the Example profile has been set to run Decision Manager by default.

    • Enable Decision Manager on new payment method : If this option is selected, CyberSource Decision Manager will be activated and it will monitor the fraudulent activity when creating new payment methods.

    • Enable Decision Manager on payment capture : If this option is selected, CyberSource Decision Manager will be activated and it will monitor the fraudulent activity when processing the Authorization request in a payment transaction.

    • Enable Decision Manager for new authorizations (includes Invoice Items) : If this option is selected, Zuora will send InvoiceItem data in the pre-sale authorization so Decision Manager can use it to check for fraud with the enhanced data collection.

  4. (Optional) Select the Decision Manager 'Review' statuses processed as Success check box. For transactions in Review status in CyberSource Merchant Dashboard, Zuora does not handle the review of transactions. The review occurs out side of Zuora. Hence, Zuora does not update the transaction status in Zuora according to the status in CyberSource. For orders in Review status, you need to manually review the order in your CyberSource merchant console. By default, Zuora rejects payments and payment methods left in the Review status to avoid accepting invalid payments or payment methods. With the Decision Manager 'Review' statuses processed as Success setting enabled, Decision Manager will reconcile all transactions in the Review status to be processed as Success transactions.

The following fields are specific to the Level 2 and Level 3 card data feature of CyberSource, Payment API v2.0 :

  • Enable Level 2 Processing

  • Enable Level 3 Processing

  • Processor

  • ShipFrom Postal Code Custom Field API Name

  • CommodityCode Custom Field API Name

  • ProductCode Custom Field API Name

  • Static Value for productCode

  • Static Value for commodityCode

  • Invoice Items Limit

To learn more about these fields, see Level 2 and Level 3 Support for CyberSource for details. For more information about Zuora's support for Level 3 and Level 2 data, see Level 2 and Level 3 Card Data .

By selecting this setting, when validating credit card and Apple Pay payment methods for cardholder-initiated transactions (CITs), the following fields will be sent to the payment gateway:

  • firstRecurringPayment

  • subsequentAuthStoredCredential

Note:

This setting is in limited access. Contact Zuora Global Support before enabling this setting.

This setting is only available for CyberSource, Payment API v2.0.

You can turn on this setting to ignore the results of Card Verification Number (CVN) checking during card validation and payment processing. The businessRules_ignoreCVResult=true field will be sent to the payment gateway.

This setting is turned off by default. The transaction is declined by the payment gateway if a CVN decline is received.

For more information about the businessRules_ignoreCVResult parameter, see CyberSource's documentation .

Last updated: December 3, 2025