Step 5: You redirect your shopper to their Issuing Bank for 3D Secure Authentication

(N.B: ALL code examples and references to integration kit files within this document are related
to the ASP kit ONLY. To download kits in other languages please visit the Downloads page.)

The registration page code on your server should check the Status field, and when a 3DAUTH status is found, build a simple, auto-submitting form (see the example below from the 'vsp_purchase.asp' page) which sends the MD, PAReq and an additional field, the TermUrl, to the address specified in the ACSURL, and send this form to your shopper's browser.

This has the effect of redirecting your shopper to their card Issuer's 3D-Authentication site whilst sending to that site all the information required to perform the authentication.

The TermURL field is a fully qualified URL which points to the page on your servers to which the shopper is sent once the 3D-authentication is completed (see Step 7: Your site POSTs the 3D-Secure results to Protx). The example code , in ASP ONLY, for this page is included in the integration kits provided by Protx and is called 'callback.asp' . It just needs to be an SSL-Secured script that can accept connections from the Internet.

As mentioned above, this redirection of your shopper is achieved with a simple, automatically submitting form sent to their browser. Your script should clear the response object of any output, and then send the following HTML code;

The above values in the example screenshot, ACSURL, PAReq and MD are those extracted from the Protx response and built by your script. The TermUrl field is added by yourselves and in the above example is the 'callback.asp' page, which is provided in the standard ASP VSP Direct Integration Kit. If your user has Javascript enabled, they simply redirect to their Issuing Bank site. If not, they will be presented with the message in the NOSCRIPT section and need to click it to go to their Issuing Bank.

At this stage the shopper has left your site, and you must wait for them to be sent back to you by the Issuing Bank.