Support for 3D Secure
Learn how to enable 3D Secure 2.0 for Payment Pages 2.0, a requirement of PSD2, to enhance security and reduce transaction failures.
3D Secure is the abbreviation for Three Domain Secure, which is the payment industry's Internet Authentication Standard. The Strong Customer Authentication regulation requires the use of 3D Secure for card payments in the United Kingdom and the European Economic Area. 3D Secure requires end users to complete an additional verification step when making a payment.
To ensure enhanced security and strong authentication for end users and merchants in the regions where 3D Secure is required, Zuora integrates with applicable payment gateways to support both 3D Secure 2.0 and 1.0 for Payment Pages 2.0. Since Zuora's support for 3D Secure 1.0 is no longer under active development, it is strongly recommended to use 3D Secure 2.0 for your hosted payment pages.
3D Secure 2.0 is the latest version of the 3D Secure standard and it is one of the requirements of PSD2. To enable 3D Secure 2.0 for your Payment Pages 2.0, complete the following steps:
- When creating or editing a Payment Page 2.0, navigate to the Security Information > 3D Secure section.
- Select Enable 3D Secure 2.0 .
For more information about 3D Secure 2.0, see PSD2 and SCA overview and Zuora's implementation of 3D Secure 2.0. The "Best practices" section in Zuora’s implementation of 3D Secure 2.0 also provides best practices for reducing the possibility of failed transactions due to 3DS2 authentication errors.
3D Secure 1.0 is the older version of 3D Secure standard. It is recommended to use 3D Secure 2.0 for your Payment Pages 2.0 as the replacement. The support for 3D Secure 1.0 is in Controlled Release. If you have any questions about 3D Secure 1.0, submit a request at Zuora Global Support. For more information about 3D Secure 1.0, see 3D Secure 1.0 for Payment Pages 2.0.
The Client-side Payment Page Parameter Validation feature is a tenant-level security measure to better protect the client-side parameters in the request for rendering or submitting Payment Pages 2.0.