3DS Server Cloud

HiTRUST's 3D Secure Server (3DSS) Cloud offers a compliant, robust authentication solution for merchants, acquirers, and gateways, supporting 3D Secure 2.0+ with seamless, frictionless transactions.

Benefits

Requiring no hardware investment, HiTRUST 3DS Server Cloud is the lightweight, optimal investment for online acquiring businesses. With ready APIs and active technical support, the Cloud Service can be integrated to your system within weeks.

Leading Cloud Providers

HiTRUST cloud solutions are built on leading cloud providers such as Amazon Web Services and Google Cloud Platform. Ready to connect wherever you are.

Ensured Compliance

As a long-standing market leader, HiTRUST commits to providing EMVCo, PCI 3DS, PCI DSS, and PSD2 certified and compliant 3-D Secure solutions. Over the Cloud, we ensure your business complies to the latest standards required.

Available through
Compliance and Certification

3DSS Cloud Features

twbs
Industrial Compliance

The cloud service complies with major card schemes (Visa, Mastercard, JCB, UnionPay, Discover, AMEX).

twbs
Supports Up to 3DS 2.3

HiTRUST 3DSS Cloud support versions 2.1 and 2.2, with ongoing upgrades to 2.3+ under EMV standards.

twbs
Multi-region Deployment

Designed for global scalability, with support for choosing data centers closer to your business.

twbs
API-driven Integration

Your business can choose to redirect cardholders to our hosted page or opt for a pure API-based approach.
twbs
Continuous Updates

Eliminates the need for on-premises deployment, with updates seamlessly handled by HiTRUST.

twbs
Ready Scalability

As your transaction volume grows, our service can scale with you, ensuring no significant interruption.

Browser-based Authentication

Within our Cloud Service, we offer two browser-based authentication flows with different benefits that your business can consider.
Redirect Flow

Redirect cardholder to HiTRUST 3DS Server Cloud website.

Pros

  • Simpler integration

Cons

  • Increase drop rate due to redirection

  • Potential concerns about third-party URL

Non-Redirect Flow

Keep cardholder on your page

Pros

  • More flexible

  • More control

  • No redirection

Cons

  • Involves complex integration

Example of the Redirect Flow
Redirect Redirect
  • yourmerchant.com/checkout
  • 3ds.hitrust.com/3dsecureserver
  • yourmerchant.com/complete

With this flow, your customers will be redirected to our site during the process.

Example of the Non-redirect Flow
Non-redirect Non-redirect
  • yourmerchant.com/checkout
  • yourmerchant.com/3ds
  • yourmerchant.com/complete

With this flow, your customers will remain on your page while the process occurs.

Browser-based Authentication

Within our Cloud Service, we offer two browser-based authentication flows with different benefits that your business can consider.
Redirect Flow

Redirect cardholder to HiTRUST 3DS Server Cloud website.

Pros

  • Simpler integration

Cons

  • Increase drop rate due to redirection

  • Potential concerns about third-party URL

Non-Redirect Flow

Keep cardholder on your page

Pros

  • More flexible

  • More control

  • No redirection

Cons

  • Involves complex integration

3DSS Cloud API Testing

Simplifying 3-D Secure Server testing for acquirers.
Trust HiTRUST for a smooth and reliable deployment of your 3DS Server Cloud solution.

Test 3DS APIs seamlessly with your Card Management System provider and Hardware Security Module (HSM) to ensure seamless integration and optimal performance. Our systematic implementation and testing plans, including System Integration Testing (SIT), User Acceptance Testing (UAT), and Production Integration Testing (PIT) if necessary, provide a structured approach to validate your 3DS implementation thoroughly.

Experience HiTRUST's robust Sandbox for comprehensive 3D Secure testing. It includes ACS, 3DS Server, advanced Merchant simulator, and demo apps for iOS and Android. Confidently test all scenarios before going live.

HiTRUST's in-house developed merchant simulator offers extensive customization for 3DS testing. Fine-tune parameters like card and shipping details, 3DS message category, authentication indicators, device channel, and passwordless scenarios for precise testing.

Our comprehensive network testing ensures all 3DS APIs are correctly configured within your network and firewall. We verify every detail to align seamlessly with your infrastructure, guaranteeing optimal performance and security.

Effortlessly enroll any card scheme and BIN range into our 3DS testing environment. Our flexible platform ensures thorough testing across diverse scenarios for comprehensive validation of your 3DS implementation.

Simulate all transaction scenarios seamlessly with our test environment. It covers both Payment (PA) and Non-payment Authentication (NPA) transactions, including OTP, OOB, and FIDO authentication methods, providing thorough testing across all spectrums.

Simulate all transaction scenarios seamlessly with our test environment. It covers both Payment (PA) and
Non-payment Authentication (NPA) transactions, including OTP, OOB, and FIDO authentication methods, providing thorough testing across all spectrums.

Receive a detailed 3DS test report from HiTRUST before going live.

Supported Authentication Channels
  • Browser (PA & NPA)
  • App (PA & NPA)
  • 3RI (NPA)
Pre-defined Test Scenarios
  • Authentication success - frictionless (Y)
  • Authentication failed (N)
  • Authentication rejected (R)

3DSS Cloud Service Onboarding Overview

Our 3DSS Cloud Service Onboarding Process typically spans a few weeks depending on your
system's readiness and the needed support. Below is an overview of the Process.

HiTRUST

• Introduce transaction processing flows.
• Provide 3DSS API Specifications.

• Provide Postman API collections.
• Prepare SIT environment.
• Provide SIT environment account information.

• Provide technical consultancy support as required.

• Prepare production environment.
• Provide production environment account information.

• Ensure system availability.
• Restore system outrage.

Your business

• Review the transaction processing flow and define business needs.
• Review API Specifications.

• Develop API and form.

• Conduct testing.

• Confirm the production date.

Explore more