POST///
Accepts the 3DS out-of-band/decoupled challenge result and informs the ACS of the cardholder authentication result. Use your Marqeta Core API credentials.
Body field details
The following table describes the response to an ACS authentication request.The ThreeDSAuthenticationResultRequest object
| Fields | Description |
|---|---|
| acs_transaction_id string Required | Universally unique transaction identifier assigned by the ACS to identify a single transaction. (EMVCo reference: acsTransID)Allowable Values: 36 char max |
| authentication_method string Required | Method used to authenticate the cardholder. Allowable Values: - BIOMETRIC_FACE - Facial recognition authentication- BIOMETRIC_FINGERPRINT - Fingerprint authentication- VOICE_RECOGNITION - Voice pattern recognition authentication- IN_APP_LOGIN - Authentication within the issuer’s mobile application- AUDIO_CALL - Voice call with human or automated verification- VIDEO_CALL - Video call with human verification- OTP_SMS - One-time password sent via SMS text message- OTP_EMAIL - One-time password sent via email- KNOWLEDGE_BASED - Knowledge-based authentication, such as security questions- OTHER - Other authentication method not listed above |
| authentication_result string Required | Result of the authentication performed. Allowable Values: - SUCCESS - Authentication was successful and the cardholder was verified- FAILED - Authentication failed due to incorrect credentials or verification- CANCELLED - Authentication was cancelled by cardholder or system timeout- NOT_AUTHENTICATED - Authentication could not be performed or completed |
| interaction_counter integer Optional | Indicates the number of authentication cycles attempted by the cardholder. Value to be tracked by the ACS. (EMVCo reference: interactionCounter)Allowable Values: As provided by the ACS Default Value: 1 |
| cancel_reason string Optional | Indicator informing the ACS and the DS that the authentication has been cancelled. (EMVCo reference: challengeCancel)DEPRECATED: This field is still sent for backward compatibility, but its value is outdated. Allowable Values: - CARDHOLDER_CANCEL - Cardholder explicitly cancelled authentication- TIMED_OUT_DECOUPLED_AUTHENTICATION - Decoupled/out of band (OOB) authentication timed out waiting for response- TIMED_OUT_AT_ACS - ACS timed out after receiving initial challenge request but before completion- TIMED_OUT_AT_ACS_NO_CREQ - ACS timed out waiting for first challenge request after authentication response challenge required- TIMED_OUT_AT_SDK - 3DS SDK timed out during authentication process- UNKNOWN - Cancellation reason could not be determined |
| message_version string Required | The 3DS protocol version used by the 3DS Requestor. Echo the value from the Advanced Authentication request. (EMVCo reference: messageversion)Allowable Values: 8 char max |
Response codes
| Code | Description |
|---|---|
| 200 | Successful acknowledgement of 3DS Authentication result. |
| 400 | Invalid payload detected. |
| 401 | Unauthorized 3DS Authentication request. |
| 403 | Forbidden 3DS Authentication request. |
| 500 | Internal server error, unable to process the request. Please resubmit. |
Sample request body
JSON
{
"acs_transaction_id": "acs_transaction_id",
"authentication_method": "BIOMETRIC_FACE",
"authentication_result": "SUCCESS",
"interaction_counter": 0,
"cancel_reason": "CARDHOLDER_CANCEL",
"message_version": "2.1.0"
}
Sample response
JSON
200 OK