Section

Column

width	900

Overview

A Silent Order Post or Direct Post is a transmission method where form data from a merchant website are getting directly posted to a third-party server. This is commonly achieved through the form action attribute that specifies the URL the data are sent to.

Info

Sensitive data such as card details can be captured within a merchant’s website without being processed by the merchant server as the POST is submitted silently. The URL endpoint in

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Platform-Name
PageWithExcerpt	Wording

to receive Silent Order Post requests is referred to as PayNow.

<form action="../payNow.aspx" method="post">

This approach is very similar to

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Partner-Name
PageWithExcerpt	Wording

hosted payment forms and leaves the merchant in full control of the checkout experience as all website elements are delivered from the merchant’s server.

Note

title	PCI-DSS Considerations

Merchants processing card transactions using the Silent Post model must submit the PCI DSS Self-Assessment Questionnaire (SAQ) A-EP. This SAQ is more comprehensive and thus might require more time and resources in comparison to SAQ A applicable to merchants that use hosted payment pages. However, merchants should always consult with their acquirer to evaluate the level of compliance required and refer to the PCI DSS guidelines. This does not affect the use of pseudo card numbers which is possible without submitting the SAQ questionaire.

Note

title	Notice about Cookie-/Session Handling

Please note that some browsers might block necessary cookies when returning to Your shop. Here you will find additial information and different solution approaches.

Table of Contents

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Link_CookieSessionHandling
DisableCaching	true
PageWithExcerpt	Reuse API

Sequence Diagram

Payment Request

Please POST the form data as outlined in table below to

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	BaseURL
PageWithExcerpt	Wording

payNow.aspx.

Form Elements

Table Filter

default	Beschreibung
isFirstTimeEnter	false
hideColumns	true
sparkName	Sparkline
hidePane	true
datepattern	dd M yy
id	1625494349836_-1514246176
worklog	365\|5\|8\|y w d h m\|y w d h m
isOR	AND
separator	Point (.)
order	0

Multiexcerpt

MultiExcerptName	form_elements

Table Transformer

dateFormat	dd M yy
export-word	false
show-source	false
export-csv	false
id	1625494349838_506791153
transpose	false
worklog	365\|5\|8\|y w d h m\|y w d h m
separator	.
export-pdf	false
sql	SELECT * FROM T*

Data Element

Legacy Element

Description

Beschreibung

MerchantID

--

Merchant identifier assigned by

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Partner-Name
PageWithExcerpt	Wording

HändlerID, die von

Multiexcerpt include

SpaceWithExcerpt	DE
MultiExcerptName	Partner-Name
PageWithExcerpt	DE:Wording

vergeben wird

Len

--

The length of the original encrypted with Blowfish

Die Länge des Originals verschlüsselt mit Blowfish

Data

--

Blowfish encrypted data

Per Blowfish verschlüsselte Daten

number

CCNr

Card number

Kartennummer

securityCode

CCCVC

Card security value

Kartenprüfnummer

expiryDate

CCExpiry

Card expiry in format YYYYMM

Kartenablaufdatum im Format JJJJMM

brand

CCBrand

Card network

Kartensystem

cardholder

CreditCardHolder

Name of the cardholder as printed on the card.

Notice: Alphanumeric special characters, listed in EMV Book 4, “Appendix B”. Special characters have been added with EMV 3DS Version 2.3, but not all participants (banks) already support that standard.

Name des Karteninhabers, wie er auf der Karte gedruckt ist.

Hinweis: Alphanumerische Sonderzeichen gemäß EMV Book 4, „Anhang B“. Sonderzeichen wurden mit EMV 3DS Version 2.3 hinzugefügt, aber nicht alle Teilnehmer (Banken) unterstützen diesen Standard bereits.

(-

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Partner-Name
PageWithExcerpt	Wording

will continue to support the legacy form data fields that are currently in use. -)

Data

Table Filter

default	Beschreibung
isFirstTimeEnter	false
hideColumns	true
sparkName	Sparkline
hidePane	true
datepattern	dd M yy
id	1625494349840_-2077968118
worklog	365\|5\|8\|y w d h m\|y w d h m
isOR	AND
separator	Point (.)
order	0

Multiexcerpt

MultiExcerptName	data

Table Transformer

dateFormat	dd M yy
export-word	false
show-source	false
export-csv	false
id	1625494349841_-1476467538
transpose	false
worklog	365\|5\|8\|y w d h m\|y w d h m
separator	.
export-pdf	false
sql	SELECT * FROM T*

Table Excerpt Include

static	true
name	MerchantID
page	MerchantID
type	page

Table Excerpt Include

static	true
name	TransID
page	TransID
type	page

Key Format CND Description Beschreibung

MsgVer

ans..5

M

Message version.

Accepted values:

2.0

Message-Version.

Zulässige Werte:

2.0

RefNr

O

Merchant’s unique reference number, which serves as payout reference in the acquirer EPA file. Please note, without the own shop reference delivery you cannot read out the EPA transaction and regarding the additional

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Partner-Name
PageWithExcerpt	Wording

settlement file (CTSF) we cannot add the additional payment data.

Details on supported format can be found below in payment specific section.

Eindeutige Referenznummer des Händlers, welche als Auszahlungsreferenz in der entsprechenden Acquirer EPA-Datei angegeben wird. Bitte beachten Sie, ohne die Übergabe einer eigenen Auszahlungsreferenz können Sie die EPA-Transaktionen nicht zuordnen, zusätzlich kann das

Multiexcerpt include

SpaceWithExcerpt	DE
MultiExcerptName	Partner-Name
PageWithExcerpt	DE:Wording

Settlement File (CTSF) auch nicht zusätzlich angereichert werden.

Informationen zum unterstützten Format finden Sie weiter unten in der zahlartspezifischen Beschreibung.

Table Excerpt Include

static	true
name	Amount
page	Amount
type	page

Table Excerpt Include

static	true
name	Currency
page	Currency
type	page

Table Excerpt Include

static	true
name	Capture
page	Capture
type	page

Key	Format	CND	Description	Beschreibung
billingDescriptor	ans..22	O	A descriptor to be printed on a cardholder’s statement. Please also refer to the additional comments made elswhere for more information about rules and regulations.	Ein auf dem Kontoauszug des Karteninhabers zu druckender Beschreiber. Beachten Sie bitte auch die andernorts gemachten zusätzlichen Hinweise für weitere Informationen über Regeln und Vorschriften.
OrderDesc	ans..768	O	Order description	Beschreibung der Bestellung
AccVerify	a3	O	Indicator to request an account verification (aka zero value authorization). If an account verification is requested the submitted amount will be optional and ignored for the actual payment transaction (e.g. authorization). Values accepted: `Yes`	Indikator zur Anforderung einer Konto-Verifizierung (alias Nullwert-Autorisierung). Wenn eine Konto-Verifizierung angefordert wird, ist der übermittelte Betrag optional und wird für die tatsächliche Zahlungstransaktion (d.h. Autorisierung) ignoriert. Zulässige Werte: `Yes`
threeDSPolicy	JSON	O	Object specifying authentication policies and excemption handling strategies	Objekt, dass die Authentisierungs-Richtlinien und Strategien zur Behandlung von Ausnahmen angibt
priorAuthenticationInfo	JSON	O	Prior Transaction Authentication Information contains optional information about a 3DS cardholder authentication that occurred prior to the current transaction.	Das Objekt Prior Transaction Authentication Information enthält optionale Informationen über eine 3DS-Authentisierung eines Karteninhabers, die vor der aktuellen Transaktion erfolgt ist.
browserInfo	JSON	M	Accurate browser information are needed to deliver an optimized user experience. Required for 3DS 2.0 transactions.	Exakte Browserinformationen sind nötig, um eine optimierte Nutzererfahrung zu liefern. Erforderlich für 3DS 2.0 Transaktionen.
accountInfo	JSON	O	The account information contains optional information about the customer account with the merchant.	Die Kontoinformationen enthalten optionale Informationen über das Kundenkonto beim Händler.
billToCustomer	JSON	C	The customer that is getting billed for the goods and / or services. Required unless market or regional mandate restricts sending this information.	Der Kunde, dem die Waren und / oder Dienstleistungen in Rechnung gestellt werden. Erforderlich, sofern nicht Markt- oder regionale Mandate das Senden dieser Informationen beschränken.
shipToCustomer	JSON	C	The customer that the goods and / or services are sent to. Required if different from billToCustomer.	Der Kunde, an den die Waren und / oder Dienstleistungen gesendet werden. Erforderlich, falls von billToCustomer abweichend.
billingAddress	JSON	C	Billing address. Required (if available) unless market or regional mandate restricts sending this information.	Rechnungsadresse. Erforderlich (falls verfügbar), sofern nicht Markt- oder regionale Mandate das Senden dieser Informationen beschränken.
shippingAddress	JSON	C	Shipping address. If different from billingAddress, required (if available) unless market or regional mandate restricts sending this information.	Lieferadresse. Falls abweichend von billingAddress, erforderlich (falls verfügbar), sofern nicht Markt- oder regionale Mandate das Senden dieser Informationen beschränken.
credentialOnFile	JSON	C	Object specifying type and series of transactions using payment account credentials (e.g. account number or payment token) that is stored by a merchant to process future purchases for a customer. Required if applicable.	Objekt, dass Art und Reihe der Transaktionen angibt, die unter Verwendung von beim Händler hinterlegten Zahlungsdaten (z.B. Kontonummer oder Zahlungs-Token) zur Verarbeitung künftiger Käufe eines Kunden erfolgen. Erforderlich, falls zutreffend.
merchantRiskIndicator	JSON	O	The Merchant Risk Indicator contains optional information about the specific purchase by the customer. If no `shippingAddress` is present it is strongly recommended to populate the `shippingAddressIndicator` property with an appropriate value such as `shipToBillingAddress`, `digitalGoods` or `noShipment`.	Der Händler-Risikoindikator enthält optionale Informationen über den bestimmten Einkauf des Kunden. Falls keine `shippingAddress` vorhanden ist, ist es dringend empfohlen, die Eigenschaft `shippingAddressIndicator` mit einem entsprechenden Wert wie `shipToBillingAddress`, `digitalGoods` oder `noShipment` auszufüllen.

Table Excerpt Include

static	true
name	URLSuccess
page	URLSuccess
type	page

Table Excerpt Include

static	true
name	URLFailure
page	URLFailure
type	page

Table Excerpt Include

static	true
name	URLNotify
page	URLNotify
type	page

Table Excerpt Include

static	true
name	MAC
page	MAC
type	page

Table Excerpt Include

static	true
name	UserData
page	UserData
type	page

Sample HTML Form

BASEURL=

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	BaseURL
PageWithExcerpt	Wording

Multiexcerpt

MultiExcerptName	sample

Code Block

language	xml
linenumbers	true

<!DOCTYPE html>
<html>
	<head>
		<title>Merchant Checkout</title>
	</head>
	<body>
		<form name="card form" action="BASEURLpayNow.aspx" method="post">
			<input type="hidden" name="MerchantID" value="MerchantID">
			<input type="hidden" name="Len" value="Length of the Blowfish encrypted data">
			<input type="hidden" name="Data" value="Blowfish encrypted data">
			Cardholder:
			<input type="text" name="cardholder"><br> 
			Card number:
			<input type="text" name="number"><br>
			Expiry date:
			<input type="text" name="expiryDate"><br>
			CVV2:
			<input type="text" name="securityCode"><br>
			Card brand:
			<input type="text" name="brand"><br>
			<input type="submit" value="Submit">
		</form>
	</body>
</html>

When the payment is completed

Multiexcerpt include

SpaceWithExcerpt	EN
MultiExcerptName	Platform-Name
PageWithExcerpt	Wording

will send a notification to the merchant server (i.e. URLNotify) and redirect the browser to the URLSuccess resepctively to the URLFailure.

The blowfish encrypted data elements as listed in the following table are transferred via HTTP POST request method to the URLNotify and URLSuccess/URLFailure.

Note
Notice: Please note that the call of URLSuccess or URLFailure takes place with a GET in case of fallback to 3-D Secure 1.0. Therefore your systems should be able to receiver parameters both via GET and via POST.

HTTP POST to URLSuccess / URLFailure / URLNotify

Table Filter

default	Beschreibung
isFirstTimeEnter	false
hideColumns	true
sparkName	Sparkline
hidePane	true
datepattern	dd M yy
id	1625494349843_-1641511740
worklog	365\|5\|8\|y w d h m\|y w d h m
isOR	AND
separator	Point (.)
order	0

Multiexcerpt

MultiExcerptName	http_post

Textliche Beschreibung des Codes

Table Transformer

dateFormat	dd M yy
export-word	false
show-source	false
export-csv	false
id	1625494349844_1363819937
transpose	false
worklog	365\|5\|8\|y w d h m\|y w d h m
separator	.
export-pdf	false
sql	SELECT * FROM T*

Table Excerpt Include

static	true
name	MID
page	mid
type	page

Table Excerpt Include

static	true
name	MsgVer
page	msgver
type	page

Table Excerpt Include

static	true
name	PayID
page	PayID
type	page

Table Excerpt Include

static	true
name	XID
page	XID
type	page

Table Excerpt Include

static	true
name	TransID
page	TransID
type	page

Table Excerpt Include

static	true
name	schemeReferenceID
page	schemeReferenceID
type	page

Key Format CND Description Beschreibung

refnr O Reference number taken from request Referenznummer vom Request.

Status

a..20

M

Status of the transaction.

Values accepted:

Authorized
OK (Sale)
FAILED

In case of Authentication-only the Status will be either OK or FAILED.

Status der Transaktion.

Zulässige Werte:

Authorized
OK (Sale)
FAILED

Im Falle von nur Authentisierung ist der Status entweder OK oder FAILED.

Table Excerpt Include

static	true
name	Description

ans..1024

M

Textual description of the code

page	Description
type	page

Table Excerpt Include

static	true
name	Code
page	Code
type	page

Key	Format	CND	Description	Beschreibung
card	JSON	M	Card response data	Kartenantwortdaten
ipinfo	JSON	C	Object containing IP information. Presence depends on the configuration for the merchant.	Objekt mit IP-Informationen. Das Vorhandensein hängt von der Konfiguration des Händlers ab.
threedsdata	JSON	M	Authentication data	Authentisierungsdaten
resultsresponse	JSON	C	In case the authentication process included a cardholder challenge additional information about the challenge result will be provided.	Falls der Authentisierungsprozess eine Challenge des Karteninhabers enthalten hat, werden zusätzliche Informationen über das Ergebnis der Challenge bereitgestellt
externalPaymentData	JSON	O	Optional additional data from acquirer/issuer/3rd party for authorization.	Optionale Daten des Acquirers/Issuers/externen Dienstleisters für eine Autorisierung

Table Excerpt Include

static	true
name	UserData
page	UserData
type	page

Table Excerpt Include

static	true
name	MAC
page	MAC
type	page

Space shortcuts

Page tree

Versions Compared

Old Version 16

New Version 17

Key

Overview

Payment Request

Form Elements

Data

Sample HTML Form

HTTP POST to URLSuccess / URLFailure / URLNotify

Paygate

Computop

Help

Intranet Tools

Space shortcuts

Page tree

Page History

Versions Compared

Old Version 16

New Version 17

Key

Overview

Payment Request

Form Elements

Data

Sample HTML Form

HTTP POST to URLSuccess / URLFailure / URLNotify