Addition of Out-of-Band Callback Validate Status API
The Out-of-Band (OOB) Callback API is an ingress API which allows issuers to automatically send a transaction authentication status using the RDX Initiate Action and the Validate Request API calls. The OOB Callback API is only applicable with OUTOFBANDOTHER and BIOMETRIC stepup type values.
Deletion of TransactionInfo.ShoppingCart (Object)
RiskRequest.TransactionInfo.ShoppingCart (Object) has been deleted.
DeviceName Field Update
The "DeviceName" field in RiskRequest.TransactionInfo.DeviceInfo (Object) has been updated to "up to 256 characters".
Updated Channel Values
Values for Channel field in RiskRequest.TransactionInfo (Object) have been updated to:
• WEB
• APP
• M_WEB
• THREERI
Updates to JWE Requirements for RDX
Clarification of certificate creation and renewal processes.
Field Updates
ProcessorID and IssuerID fields updated from “Up to 24 characters” to “24 characters”.
Firewall Configurations
Partners will need to trust list VCAS IP addresses in order to allow requests to pass through their firewall.
RDX Updates
MessageCategory field with EMVCo values added to RiskRequest and InitiateActionRequest; previously only on StepupRequest.
RDX Message Version 2.2.3: Changelog
| Date | Version | Description |
|---|---|---|
| - | - | Use these links for Changlogs for previous RDX versions: |
| 01/2024 | 1.0 | Items changed since RDXMessageVersion 2.2.2 New elements have been added to RDX Version 2.2.3 to support the Behavioral Biometrics authentication flow. Behavioral Biometrics Updates: StepupResponse StepupResponse.Credentials.Credential (List) (Object) ValidateRequest.BehavioralBiometricsResult (List) (Object) object added Mastercard 2.2 Updates: RiskRequestExemptionInfo (Object) RiskRequestTransactionInfo.DeviceInfo (Object) Available only in browser-initiated transactions when the Method URL successfully completes. 3RI Indicator Values StepupRequest.CardholderSelectionInfo (Object) updated to Conditional RiskRequest.TransactionInfo.BillingAddress (Object) fields have been updated as “Optional” |
| 05/2024 | 1.0 | New objects on the RDX RiskRequest message: ExtensionData (Object) > DAFExtension (Object): New fields and objects added to the TransactionInfo object on the RDX RiskRequest message: ThreeDSRequestorPriorAuthenticationInfo (Object) with new fields: RecurringInfo (Object) New fields on the TransactionInfo (Object): TransStatusReason field has been added to the Risk, Stepup, InitiateAction and Validate response messages. oobAppURL field has been added to the Stepup Response message. Addition of Transaction Status Reason Values table (see Appendix ) |
| 06/2024 | 1.0 | MessageCategory field with EMVCo values added to RiskRequest and InitiateActionRequest; previously only on StepupRequest. ThreeDSRequestorAuthenticationInd field added to StepupRequest and InitiateActionRequest; previously only on RiskRequest (field is labeled as NonPaymentAuthenticationIndicator on RiskRequest) Addition of ThreeDS Requestor Authentication Indicator Values table (see Appendix) |
| 07/2024 | 1.1 | Updates to Confidentiality and Disclaimers language related to products and/or services made available by third parties. |
| 12/2024 | 1.2 | MerchantAppRedirectURL field updated as “Required for Mastercard issuers in the EU”. ProcessorID and IssuerID fields updated from “String; up to 24 characters” to “String; 24 characters”. FAILWITHFEEDBACK in RiskRequest (RuleOutcome) and RiskResponse (Status) has been updated to “Returns a failed authentication status and a frictionless message to the merchant”. |