Stepup Request

A Stepup Request is communicated by the VCAS platform to the partner. The partner responds with parameters necessary for VCAS to perform the step-up challenge.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Stepup Request Object

string
required
length between 24 and 24
^[0-9a-fA-F]{24}$

VCAS provided identifier for the partner. Max. 24 characters.

string
required
length between 24 and 24
^[0-9a-fA-F]{24}$

VCAS provided identifier for the partner. Max. 24 characters.

string
required
length between 36 and 36
^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

VCAS generated transaction reference id. Max. 36 characters. GUID format.

string
length between 36 and 36
^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Directory Server (DS) generated transaction reference id. GUID format.

string
enum

Indicates the type of 3RI request for EMV transactions. Values are defined as follows:

  • RecurringTransaction
  • InstallmentTransaction
  • AddCard
  • MaintainCardInformation
  • AccountVerification
  • SplitOrDelayedShipment
  • TopUp
  • MailOrder
  • TelephoneOrder
  • WhitelistStatusCheck
  • OtherPayment
string
length between 2 and 2

Indicates the type of Authentication request. This data element provides additional information to the ACS to determine the best approach for handling an authentication request. Values are defined as follows:

  • 01 - Payment Transaction
  • 02 - Recurring Transaction
  • 03 - Installment Transaction
  • 04 - Add Card
  • 05 - Maintain Card
  • 06 - Cardholder verification as part of EMV token ID&V
  • 07 - Billing Agreement
  • 08 - Split shipment
  • 09 - Delayed shipment
  • 10 - Split payment
  • 11-79 - Reserved for EMVCo future use (values invalid until defined by EMVCo)
  • 80 - Reserved for Visa Payment Passkeys (Visa transactions only)
  • 81-99 - Reserved for future network program usage.
    Reserved values may be introduced by network program updates. New values will be defined and published as they become available.
string
required
length between 36 and 36
^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Unique identifier to identify the particular Stepup request. Length is 36 characters.

integer
required

Counter for tracking the number of Stepups. Each stepup can go from Stepup -> InitiateAction -> Validate. If the user requests a "resend" via the browser templates it will initiate another Stepup request.

string
length between 1 and 2048

Device Locale from the browser header or from the app’s language settings. This value can be a single locale value or multiple concatenated together via commas. In 3DS1 this value will be directly from the browser’s “Accept-Language” header. However, in 3DS2 this is not available due to new flows so this will be a single language value following BCP 47 format e.g. en-US or en,es-PE;q=0.9,es;q=0.8

string
length between 1 and 2048

Device user agent from the browser header or the app's device identifier. Max. 2048 characters.

string
required
length between 5 and 8
^[0-9]{1,2}\.[0-9]{1,2}\.[0-9]{1,2}$

Version of the message based on 3DS spec. Examples 2.1.0, 2.2.0

string
length between 5 and 8
^[0-9]{1,2}\.[0-9]{1,2}\.[0-9]{1,2}$

Version of the RDX protocol being used. This will be used to enable new features without breaking current integrations. Example: 2.2.3 and 2.2.4

string
length between 2 and 2

Identifies the category of the message for a specific use case; 01=PA, 02=NPA

string
enum

Used to identify the reason the Stepup request was initiated. Only available for Cardholder Resend, future values and scenarios may be added.

Allowed:
MerchantInfo
object
PaymentInfo
object
TransactionInfo
object
string
enum

Name of the card network for a specific transaction.

CardholderSelectionInfo
object

Object defining the consumers selection during the Cardholder Selection OTP flow. This feature is only populated and enabled for issuers supporting this flow.

ExtensionData
object
string
length ≥ 1

The issuer must redirect to this URL when validation is complete, during an Embedded OOB challenge.

Responses

405

Invalid input

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json