Best Practices for Handling 3D Secure Redirects in Cybersource REST API

[Iuvtech]

Hi. Just integrating 3d secure with cybersource rest api. when transactions triggers 3d authentication, I receive a redirect url.  how to handle callback once authentication is complete?

[alario]

Redirect the user to the 3D Secure authentication URL, then send them back to your own return/callback URL after the challenge. Don’t treat the redirect as the final result once the user returns, verify the authentication outcome server-to-server by calling the CyberSource REST API using the transaction/request ID. The final payment decision should always come from the API, not the browser callback.

[dani_dzotsi]

My team and I are currently working with the 3DS authentication. We have several questions about the overall flow and how this authentication process works, particularly from the merchant's backend gateway perspective.

1. How the device data is initially handled and sent through Cybersource to the issue
2. When the challenge result is sent, how does the merchant backend relate and make use of the responses from the issuer

Any information on the 3ds integration will be helpful.