Authenticate a transaction

Once the device is bound, you can authenticate a card-not-present transaction using Visa Cloud Token Framework (CTF) and Digital Authentication Framework (DAF).

Flow

CTF and DAF transaction authentication flow.

Step	Description
1	During the transaction, the merchant application triggers the Thales SDK to authenticate the end user.
2	After successful authentication, the Thales SDK generates a Visa-defined payload.
3	The merchant or PSP calls the Thales backend with the tokenId, the Visa payload, and transaction details.
4	Thales backend requests token details and a cryptogram from VTS (the Visa TSP).
5	Thales backend returns a transactionId, token details, and the TAF/CTF cryptogram.
6-10	The merchant or PSP builds the authorization request, sends it to the Acquirer and finalizes the payment.

SDK integration

Authenticate the transaction

Call authenticateTransaction from VisaCTFHelper.

This call requires end user presence. It triggers on-device authentication.

Android

Authenticating the transaction requires end user presence. To do this, call startAuthentication to initiate on-device authentication.

This function can be found in the DeviceAuthentication object of the onDeviceAuthentication callback that is part of TransactionListener.

A few custom text strings can be passed to the startAuthentication function for the UI display of biometric authentication.

visaCTFHelper.authenticateTransaction(vProvisionedTokenId,
                                        new TransactionListener() {
                @Override
                public void onDeviceAuthentication(DeviceAuthentication deviceAuthentication) {
                    FragmentActivity fragmentActivity;
                    CharSequence title;
                    CharSequence subTitle;
                    CharSequence description;
                    CharSequence negativeButtonText;
                    deviceAuthentication.startAuthentication(fragmentActivity, 
                                                            title, 
                                                            subTitle, 
                                                            description, 
                                                            negativeButtonText);
                }

                @Override
                public void onError(TMGClientException exception) {
                    // Check error
                    int errorCode = exception.getErrorCode();
                    int errorMessage = exception.getMessage();
                }

                @Override
                public void onSuccess(String visaPayload) {
                    // Retrieved the Visa Payload
                }
            });

The SDK returns the result in onSuccess or onError.

On success, onSuccess returns a Visa payload. Use it in your server-side call to Thales backend.

iOS

Authenticating the transaction requires end user presence. To do this, call startAuthentication to initiate on-device authentication.

This function can be found in the DeviceAuthentication object of the deviceAuthenticationHandler callback that is part of authenticateTransaction.

let vProvisionedTokenID: String = ""
            
// 1. Start authenticate transaction
visaCTFHelper.authenticateTransaction(forVProvisionedTokenID: vProvisionedTokenID,
                                      deviceAuthenticationHandler: { auth in
        // 2. Start user authentication
        let customMessage = "" // Pass in the custom message. e.g: "Authenticate with Face ID"
        auth.startAuthentication(withMessage: customMessage)
    }, completionHandler: { (visaPayload, error) in
        // 3. Success generate payload
        if error == nil {
            
        } else {
            // Handle error
        }
})

API

Use the same Thales backend operation as other transaction flows.

• API reference: Create transaction