API Reference

A Stepup Request is communicated by the VCAS platform to the partner. The partner responds with parameters necessary for VCAS to perform the step-up challenge.

Log in to see full request history
timestatususer agent
Retrieving recent requestsā€¦
LoadingLoadingā€¦
Body Params

Stepup Request Object

string
required
Defaults to 5723ae630063ac1a9c3ab079

Cardinal provided identifier for the partner. 24 characters.

string
required
Defaults to 5723ae630063ac1a9c3ab083

Cardinal provided identifier for the partner. 24 characters.

string
required
Defaults to 00ec043e-40b5-4ce4-95c2-9e83b644f412

VCAS generated transaction reference id. Max. 36 characters. GUID format.

string
Defaults to 00ec043e-40b5-4ce4-95c2-9e83b644f987

Directory Server (DS) generated transaction reference id. GUID format.

string

Indicates the type of 3RI request for EMV transactions. Note: Please allow for future values in this field. EMV has reserved up to 99 values for future use.

string
Defaults to 01

Indicates the type of Authentication request. This data element provides additional information to the ACS to determine the best approach for handling an authentication request.

string
required
Defaults to 878f4751-4140-4881-9e4a-003e83524f22

Unique identifier to identify the particular Stepup request. Length will be 36 characters.

integer
required

Counter for tracking the number of Stepups. Each stepup can go from Stepup -> InitiateAction -> Validate. If the user requests a "resend" via the browser templates it will initiate another Stepup request.

string
Defaults to en-US

Device Locale from the browser header or from the appā€™s language settings. This value can be a single locale value or multiple concatenated together via commas. In 3DS2 this is not available due to new flows so this will be a single language value following BCP 47 format e.g. en-US or en,es-PE;q=0.9,es;q=0.8

string
Defaults to Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36

Device user agent from the browser header or the app's device identifier. Max. 2048 characters.

string
required
Defaults to 2.2.0

Version of the message based on 3DS spec. Examples 2.1.0, 2.2.0

string
Defaults to 2.2.3

Version of the RDX protocol being used. This will be used to enable new features without breaking current integrations. Example: 2.2.2 and 2.2.3

string
Defaults to 01

Identifies the category of the message for a specific use case; 01=PA, 02=NPA

string

Used to identify the reason the Stepup request was initiated. Only available for Cardholder Resend, future values and scenarios may be added.

object
object
object
object

Object defining the consumers selection during the Cardholder Selection OTP flow. This feature is only populated and enabled for issuers supporting this flow.

string

The issuer must redirect to this URL when validation is complete, during an Embedded OOB challenge.

Responses

405

Invalid input

Language
Click Try It! to start a request and see the response here! Or choose an example:
application/json