Leading Drupal Company !

How to Configure CyberSource Secure Acceptance Web/Mobile in Drupal 7

  Vadim Hirbu

Why to use CyberSource Secure Acceptance Web/Mobile

Drupal is a great platform for ecommerce. If your business needs a Drupal website that accepts payments, a good payment system to use is CyberSource Secure Acceptance Web/Mobile. This tool allows business to accept payments made online, over the phone, and through mobile devices without ever handling toxic payment data. CyberSource is owned by Visa and integrates quite nicely with Drupal Commerce.!It consists of securely managed payment forms or as a single page payment form for processing transactions. This allows you to decrease your Payment Card Industry Data Security Standard (PCI DSS) obligations, thereby reducing any risks associated with handling or storing sensitive payment information.

Steps to configure CyberSource Secure Acceptance Web/Mobile

In order to get this up and running on your Drupal website, you simply need to follow a few steps:!1. Create and configure Secure Acceptance profiles!

2. Configure CybeSource profile with Drupal!3. See the results!

Important: For using a Secure Acceptance experience, an active profile is needed.A Secure Acceptance profile consists of settings that you configure to create a customer checkout experience. In order to create a Secure Acceptance profile, you need to:1. Log in to Business Center with Merchant ID:Live Transactions: https://ebc.cybersource.comTest transactions: https://ebctest.cybersource.comNote: If you don't have a Merchant ID you will need to create one (https://support.cybersource.com/cybskb/index?page=content&id=C887)2. In the left navigation panel, choose Tools & Settings > Secure Acceptance > Profiles > Create New Profile.3. Enter Profile information 4. Click the Create button. The Profile Settings page appears.

Creating a Secure Acceptance Profile (1)

You must activate a profile in order to use it, and you must configure these required fields before activating a profile:•Payment Settings•Create a Security Key•Display a Customer Response

Creating a Secure Acceptance Profile (2)

You must select the card types that you wish to offer to the customer as payment methods. For each card type you select you can also manage currencies, CVNs, and payer authentication options.!The Card Verification Number (CVN) is a three- or four-digit number printed on the back or front of a credit card. This number helps to ensure that the customer has possession of the card at the time of the transaction.!To add a card type and enable the CVN you must:1.On the “Profile Settings” page, click Payment Settings. The Payment Settings page appears.2.Click Add/Edit Card Types. The Add/Edit Card Types window appears.3.Check each card type that you wish to offer to the customer as a payment method.

Configuring Payment Settings (1)

4. Click Update.5. Click the pencil icon in the column for each card type. The Edit Card

Settings appears.6. Check CVN Display and CVN Required to display the CVN field on

Secure Acceptance.7. On the “Currencies” section click Select All or select a currency and

use arrow to move it from the Disabled list to the Enabled list.

Configuring Payment Settings (2)

8. Click Update 9. In the Automatic Authorization Reversals section (on the Payment

Settings page) check Fails AVS check and Fails CVN check. Authorization is automatically reversed on a transaction that fails an AVS check or a CVN check.!!!!!!!!!

10.Click Save.

Configuring Payment Settings (3)

The security script signs the request fields using the secret key and the HMAC SHA256 algorithm. To verify data, the security script generates a signature to compare with the signature returned from the Secure Acceptance server. You must have an active security key to activate a profile. A security key expires after 2 years. The security key protects each transaction from data tampering.!To create and activate a security key:1. On the “Profile Settings”page, click Security. The Security Keys page appears.2. Click Create New Key. The Create New Key page appears.3. Enter a Key Name (required).4. Chose signature version Version 1.5. Choose signature method HMAC-SHA256.

Creating a Security Key (1)

6. Click Generate Key. The Create New Key window expands and displays the new access key and secret key. This window closes after 30 seconds.

Creating a Security Key (2)

7. Copy and save the access key and secret key.!•Access key: Secure Sockets Layer (SSL) authentication with Secure Acceptance.•Secret key: signs the transaction data and is required for each transaction.!By default, the new security key is active.!8. Click Return to Profile home. The “Profile Settings” page appears.

Creating a Security Key (3)

You can choose to have a transaction response page displayed to the customer at the end of the checkout process, and a cancel response page displayed during the checkout process. Enter a URL for your own customer response page or use the CyberSource hosted response pages.!To redirect a customer after Check-out:!1. On the “Profile Settings” page, click Customer Response Pages.!2. Under the Customer Redirect after Check-out heading, enter the URL for the custom page that the customer will be redirected to after checkout.!3. Click Save.

Displaying a Customer Response Page

To make your profile active:!1.On the "Profile Settings" page, click Promote to Active. !!!!!!!!!

2.Your profile is now active!

Activate Profile

1. Install the Commerce CyberSource Secure Acceptance Web/Mobile contrib module.

2. Check that the module Payment UI is enabled.3. From the Drupal admin menu, choose Store > Configuration > Payment

Methods (or access path admin/commerce/config/payment-methods).4. Select Edit Operation for payment method rule “CyberSource Secure

Acceptance Web/Mobile”5. Edit the rule action “Enable payment method: CyberSource Secure

Acceptance Web/Mobile”.6. In the Payment Settings section enter the Secure Acceptance profile details.7. Enter Profile ID (configured during Step 3 - Secure Acceptance Profile)8. Enter Access Key and Secret key you created (see “Creating a Security

Key” above)

Drupal Site Configuration (1)

9. Select Transaction mode:• Test – for testing transactions (profile site https://

ebctest.cybersource.com)• Live – for live transaction (profile site https://ebc.cybersource.com)10.Set Transaction Type to “Authorize Funds”11.Locale (ex: English - American)12.Set Payment method to “Card”13.Enter text for Payment Submit Button Text.14.Click Save.15.On the Payment methods page, enable the rule for CyberSource

Secure Acceptance Web/Mobile.

Drupal Site Configuration (2)

Now, on the completion of order you can select Credit Card as the payment method.

Drupal Site Configuration (3)

After you click on “Continue to Next Step”you wil berl redirected to the Cybersource site.

Drupal Site Configuration (4)

After completion, and the display of CyberSource payments details, you will be redirected back to your Drupal site.And that's it! If you follow all of the steps above, CyberSource Secure Acceptance Web/Mobile should be configured on your Drupal 7 site in no time. Make sure to contact us if you are looking for a technology partner to help you ensure the success of your Drupal business or ecommerce website. 

The End

Questions?www.wearepropeople.com

Thank you!