Hello,
Has anyone successfully implemented Cybersource Payments for Salesforce B2B and D2C managed package v1.8.0 in a Salesforce B2B Commerce LWR storefront?
We are using the standard packaged components with no custom development. The payment form renders, but the Cybersource-hosted Card Number and CVV fields remain blank.
We see these errors:
cybsb2b.getFlexKey
HTTP 400
{"error":[{"message":"The Apex request is invalid."}]}cybsb2b__PTS_FlexMicroformHostD2C
HTTP 503
The 503 response contains Salesforce’s site_down/maintenance.html page. We have verified:
- Package version 1.8.0
- Correct TEST payment configuration and store association
- Cybersource endpoints in Experience Builder Trusted Sites
- Salesforce Trusted URLs and applicable CSP directives
- All Classes permission set assigned to the buyer
- Access to PTS_FlexMicroformController and PTS_KeyGenerationApi
- PTS_FlexMicroformHostD2C Visualforce page access
- Experience site is active and published
- Logout/login and browser cache clearing
We have also seen a CSP refusal involving the packaged Microform host. We are investigating whether Flex Microform SDK v2.11/2.12 and its use of globalThis is incompatible with legacy Lightning Locker, but we have not confirmed that this explains the Apex 400 or Visualforce 503.
Questions:
- Has anyone encountered these errors with package v1.8.0 on B2B LWR?
- Does this package require Lightning Web Security rather than legacy Lightning Locker?
- Are any additional Salesforce Site, Visualforce, package-license, or buyer-profile permissions required?
- Is there a known patch or newer package build?
- What should PTS_FlexMicroformHostD2C return when opened through the underlying Salesforce Site URL?
Any working configuration details or troubleshooting guidance would be appreciated.
