A One Time Passcode (OTP) is a temporary numeric or alphanumeric code generated for a specific authentication attempt.

The Cardholder receives the OTP through the configured delivery channel and enters it on the 3D Secure challenge screen. Because the code is valid only for a limited period and authentication attempt, it provides stronger protection than a reusable password.

OTP Communication Methods

CLOWD9 supports the delegated OTP delivery method. When an OTP challenge is required:

The ACS provider (Apata) generates the OTP and sends to CLOWD9
CLOWD9 will send the OTP to you via the configured endpoint
You will communicate this to your Customer via your SMS provider or via your Customer interface e.g. mobile app
Your Customer then enters the OTP on the 3D Secure challenge screen
Apata validates the OTP and returns the authentication result

Delegated OTP delivery

OTP Specifications

Field	Description	Format
client_id	The Identifier of the Client.	string
card_id	The Identifier of the Card.	string
customer_id	The Identifier of the Customer associated with the Card.	string
sp_transaction_id	The Identifier of the transaction for authentication.	string
otp	The alpha and/or numeric OTP for authentication.	string
card_acceptor_id	The Identifier associated to the merchant.	string
card_acceptor_name	The name of the merchant.	string
transaction_datetime	The Date and Time associated with the transaction.	integer
transaction_amount	The amount of the purchase for authentication.	string
transaction_currency_code	The currency code associated with the transaction. This may not be the same as the card billing currency code.	string

Example OTP Message

{
    "client_id": "958e5955-1ebb-4f70-8179-5fe60bdf8382",
    "card_id": "92d3824f-d3bd-4226-8e60-58ee2c9b39a4",
    "customer_id": "89d02c52-f371-4106-8807-e3325774bd3b",
    "sp_transaction_id": "04bfc2cf-0ae7-4c59-8f55-184337a70a9b",
    "otp": "829384",
    "card_accepetor_id": "1234",
    "card_acceptor_name": "CLOWD9 TRAVEL",
    "transaction_datetime": 1738322465,
    "transaction_currency_code": "100",
    "transaction_amount": "826"
}

Example OTP Response

"SUCCESS"