Page 1 of 1

CyberSource gateway

Posted: Wed Oct 24, 2012 12:45 pm
by June
Currenly, we use the Cybersource gateway from Able Commerce. We've been getting the customer's credit card information back in an encrypted data field.

After our last audit, we are going through the process of tightening our security. We have been consulting with Cybersource and they have suggested that to keep PCI compliant that our e-commerce should leave our site and have the last page to be filled out in the Cybersource domain where they will collect the credit card and use tokenization instead of the credit card. They (Cybersource) tell us that we will create a page on their site with our look and feel and this will help us with PCI compliance and instead of an encrypted credit card, they will send a token.

Cybersource said that they can guarantee on their side that they are certified compliant, but Cybersource cannot speak for our payment gateway.

I need to know how your payment gateway works especially when you pass the credit card to CyberSource.

For example, Cybersource tells me that Able Commerce should be passing control over to CyberSource when the customer starts to enter their credit card number – this screen should be in the CyberSource domain and not at our e-commerce box.

Can you help me document how Able Commerce has written the payment gateway interface to CyberSource? Also, if you don't follow what Cybersource does, can you verify PCI compliancy?

I would appreciate your help.

Re: CyberSource gateway

Posted: Wed Dec 05, 2012 10:31 pm
by Shopping Cart Admin
Hello June,

What payment gateway are you using?

Regardless of their 'pitch' when you direct customers off your website it lowers conversion ratios.

Re: CyberSource gateway

Posted: Thu Dec 06, 2012 11:52 am
by rlherte
Dear Shopping Cart Admin,
Did you even read June's post? Cybersource gateway
And fyi, Cybersource is the where she got the suggestion to 'direct consumers from the site'

She posted her comment on Oct 24 and you only bothered to respond to it yesterday?

I thought AbleCommerce programmers were suppose to respond and help with these questions.
Not a lot of help in my humble opinion.

Re: CyberSource gateway

Posted: Tue May 13, 2014 6:35 am
by AnySupport
I've asked AbleCommerce this same question last week and just posted on the GOLD board. My questions there are a bit broader, but I have the same questions as the OP for Cybersource and PCI Compliance clarification. I would really love the same answers!

Did anyone ever get more information on this?

Thanks,
Liz

Re: CyberSource gateway

Posted: Wed May 21, 2014 11:36 pm
by ForumsAdmin
AbleCommerce implements CyberSource using Simple Order API/SOAP Toolkit API method. In this method communication of credit card data to Cybersource takes place on secure HTTPS.
SOAP Toolkit API is full featured API that makes available all CyberSource features and services.

From Cybersource docs
SOAP Toolkit API

Exactly like the Simple Order API method, this choice gives you access to every service CyberSource offers, but the SOAP Toolkit provides you with the resources to build your own client software. It is the right choice for merchants who want scalability, a full range of services, and greater control of the buying experience.
For details about CyberSource integration methods please have a look
http://www.cybersource.com/developers/l ... n_methods/

Re: CyberSource gateway

Posted: Wed May 21, 2014 11:43 pm
by ForumsAdmin
http://www.cybersource.com/developers/l ... olkit_api/

What are the main advantages of using the SOAP Toolkit API?

Flexibility—with an API, you can take advantage of any CyberSource service available with the package you purchase (Tax and line item detail, for example)
Scalability—an API implementation is best if your business volume warrants a high level of order processing automation
Control and Customization—create your own customized order page and receipt to give you more control over your customer's buying experience
Stability—have your server communicate directly to ours for greater stability than with a Web browser
Security Control—you or your hosting provider control security with an SSL secure server
Data Access—store order or customer data before sending it to CyberSource
Fulfillment—share order data with a fulfillment house or internal dept
Easy Order Management—use the online Business Center to review and manage all of your orders from any computer with Internet access


How SOAP Toolkit API works
http://www.cybersource.com/developers/l ... n_more.php