Generic e-commerce enrollment flow

Most merchants that support Tokenization do not support Step-up authentication. This includes ID&V methods provided by the issuer.

As a temporary workaround, the payment network TSP automatically activates the token. This can happen even if the ID&V flow is not completed.

Return a yellow decision when you require Step-up authentication. If the merchant cannot support ID&V, the payment network TSP may skip it. Use this only until merchants support Step-up authentication.

Generic e-commerce enrollment flow when the merchant does not support Step-up authentication.

Authorization impact

Some TSPs may update the Token Assurance Level in the detokenized authorization request. They use dedicated values for tokens provisioned with Step-up authentication. They may also use dedicated values when ID&V is skipped. Use these values in the issuer backend to manage risk accordingly.