One of the problems with using CIM hosted forms is that it's difficult to determine what profile information has changed (payment profiles added or edited).
Another issue is that it's difficult to provide an audit trail which identifies who initiated the changes.
One possibility that could address these issues is specifying some kind of reference id (not the per-transaction refid field) in the getHostedProfilePageRequest which would be assigned to each payment profile (or shipping address, although this is not something I use) which the end user created or edited using this token. Or it could be the token itself.
Then return that identifier for each payment profile (or shipping address) returned by
getCustomerPaymentProfileListRequest.
End-developers can easily identify which payment profiles were modified by a specific token consumer. We can also provide an audit trail of which token consumer modified a record most recently.Comments?