Processing a Google Pay payment - error - CONSUMER_AUTHENTICATION_REQUIRED

[lollerenshaw]

Hi all, 

I'm integrating Google Pay into a single page application following the documentation linked here: https://www.barclaycard.co.uk/content/dam/barclaycard/documents/business/accepting-payments/M15-Goog...

What I have done so far:

• Implemented the Google Pay button on the client application following this documentation: https://developers.google.com/pay/api/web/guides/tutorial
• I've joined Googles group for test cards to use in Google Pay
• I'm receiving the response containing the tokenized data
• Sending the response to my API
• Encoded the tokenizedData.token and populated a request body to send to this endpoint: https://apitest.cybersource.com/pts/v2/payments
• Successfully generating HTTP Signatures for my request, using merchant details from the cybersource enterprise business centre (Was previously receiving 401 status code initially, but now receiving 201)

The trouble I am having is when I call the Process a Payment endpoint found in the documentation here: https://developer.cybersource.com/api-reference-assets/index.html#payments_payments , I am receiving the following response body:

{
   "clientReferenceInformation":{
      "code":"1698047900482"
   },
   "consumerAuthenticationInformation":{
      "token":"AxizbwSTemmbPgblAAMZAAIBT33cSedgAZwJ/6SZejFfAo0AmAAAWwwu"
   },
   "errorInformation":{
      "reason":"CONSUMER_AUTHENTICATION_REQUIRED",
      "message":"The cardholder is enrolled in Payer Authentication. Please authenticate the cardholder before continuing with the transaction."
   },
   "id":"6980479004056915804953",
   "processingInformation":{
      "paymentSolution":"012"
   },
   "riskInformation":{
      "profile":{
         "earlyDecision":"ACCEPT",
         "orderModificationRules":{
            "applicableOrderModifications":"N",
            "appliedOrderModifications":"N"
         },
         "name":"Kount Profile",
         "action":"PAYERAUTH_INVOKE",
         "selectorRule":"Default Active Profile"
      }
   },
   "submitTimeUtc":"2023-10-23T07:58:21Z"
}

 Can anyone advise me what I need to do with this response? I'm not sure what it is asking me to do, and I do not find anything related to this in the documentation. I know that there are the Payer Authentication endpoints, found here: https://developer.cybersource.com/api-reference-assets/index.html#payer-authentication , but I'm not sure if I need them, which I need if I do.

Any help would be great thank you. 

Lewis

[MattCYBS]

Hi @lollerenshaw ,

The response message in general terms is identifying that the customer is enrolled in 3D-Secure aka Strong Customer Authentication (SCA) and needs to be authenticated.  This can be done using our Payer Authentication service.  

However, in the specific example you've provided it would appear your account is configured for pre-authorisation checks to ensure that all card payments are processed through SCA before proceeding to payment so this can likely be resolved by amending your fraud rules or speaking to whomever holds your merchant account to ask them about this specific requirement and why it may be necessary in your locale

Regards