If your Product(s) support the Out Of Band Authentication (OOB) either as the only method or the primary method with the One Time Passcode (OTP) as a secondary method, CLOWD9 will provide you with authentication request via a webhook.

You will need to provide CLOWD9 with the endpoint for the message to be delivered which will be configured initially during the Implementation stage. If you require the end point to be replaced at any time please follow the Change Request process.

OOB Authentication Request

Authenticate Request:

Field Name	Description	Format
client_id	Client identifier as per the GUID generated by CLOWD9.	String
card_id	The GUID of the card relating to the purchase.	String
customer_id	The GUID associated with the Customer as generated by CLOWD9.	String
sp_transaction_id	Unique identifier associated to the authorization request.	String
ds_transaction_id	Directory server unique identifier associated to the transaction.	String
card_acceptor_id	The ID of the merchant.	String
card_acceptor_name	The Merchant name.	String
card_acceptor_country	The numeric ISO country code associated with the Merchant.	String
transaction_category	Type of transaction for which authentication is requested. Values are: “payment" - Spend “account-verification” - To verify the account.	String
transaction_currency_code	Numeric ISO currency code of the transaction.	String
transaction_currency_exponent	Minor units of the transaction currency.	String
transaction_amount	Transaction amount in minor units of the transaction currency.	String
transaction_channel	Channel at which transaction was acquired through: "app": The transaction was initiated from a merchant app using a 3DS SDK. “browser”: The transaction was initiated from a web browser. “merchant-initiated”: The transaction was initiated asynchronously by the merchant directly with the user.	String
transaction_datetime	Date and time of the transactions.	Integer
challenged_datetime	Date and time when the end user was challenged.	Integer
challenge_expiry_window	Time window until the challenge is valid from challenged_datetime.	Integer
challenge_expiry_datetime	Date and time when the challenge expires.	Integer

 {
    "client_id": "123e4567-e89b-12d3-a456-426614174000",
    "card_id": "123e4567-e89b-12d3-a456-426614174001",
    "customer_id": "123e4567-e89b-12d3-a456-426614174002",
    "sp_transaction_id": "123e4567-e89b-12d3-a456-426614174003",
    "ds_transaction_id": "123e4567-e89b-12d3-a456-426614174004",
    "card_acceptor_id": "5999",
    "card_acceptor_name": "Amazon",
    "card_acceptor_country": "826",
    "transaction_category": "payment",
    "transaction_currency_code": "978",
    "transaction_currency_exponent": "2",
    "transaction_amount": "10000",
    "transaction_channel": "browser",
    "transaction_datetime": 1728478766,
    "challenged_datetime": 1728478766,
    "challenge_expiry_window": 10,
    "challenge_expiry_datetime": 1728478776
}

Authentication Response

Authenticate Response:

Field Name	Description
client_id	Client identifier as pr the GUID generated by CLOWD9.
card_id	The GUID of the card relating to the purchase.
customer_id	The GUID associated with the Customer as generated by CLOWD9.
sp_transaction_id	Unique identifier associated to the authorization request.
status	Status of the web hook request. Should carry a static value of “ok”.

Succesful Example:

{  
  "client_id" : "",  
  "card_id" : "",  
  "customer_id" : "",  
  "sp_transaction_id" : "",  
  "status" : "ok"  
}

Fallback Example:

{  
  "client_id" : "",  
  "card_id" : "",  
  "customer_id" : "",  
  "sp_transaction_id" : "",  
  "status" : "fallback"  
}