CyberSource Simple Order API Payment Tokenization User guide

Title Page
Payment Tokenization
Using the Simple Order API
for CyberSource Essentials
January 2016
CyberSource Corporation HQ | P.O. Box 8999 | San Francisco, CA 94128-8999 | Phone: 800-530-9095
CyberSource Contact Information
For technical support questions, go to the Home page in the Business Center to see the
contact information appropriate for your account.
Visit the Business Center, your central location for managing your online payment
transactions, at https://businesscenter.cybersource.com.
For general information about our company, products, and services, go to
http://www.cybersource.com.
For sales questions about any CyberSource Service, email [email protected] or
call 650-432-7350 or 888-330-2300 (toll free in the United States).
Copyright
© 2016 CyberSource Corporation. All rights reserved. CyberSource Corporation ("CyberSource") furnishes this
document and the software described in this document under the applicable agreement between the reader of
this document ("You") and CyberSource ("Agreement"). You may use this document and/or software only in
accordance with the terms of the Agreement. Except as expressly set forth in the Agreement, the information
contained in this document is subject to change without notice and therefore should not be interpreted in any way
as a guarantee or warranty by CyberSource. CyberSource assumes no responsibility or liability for any errors
that may appear in this document. The copyrighted software that accompanies this document is licensed to You
for use only in strict accordance with the Agreement. You should read the Agreement carefully before using the
software. Except as permitted by the Agreement, You may not reproduce any part of this document, store this
document in a retrieval system, or transmit this document, in any form or by any means, electronic, mechanical,
recording, or otherwise, without the prior written consent of CyberSource.
Restricted Rights Legends
For Government or defense agencies. Use, duplication, or disclosure by the Government or defense agencies
is subject to restrictions as set forth the Rights in Technical Data and Computer Software clause at DFARS
252.227-7013 and in similar clauses in the FAR and NASA FAR Supplement.
For civilian agencies. Use, reproduction, or disclosure is subject to restrictions set forth in subparagraphs (a)
through (d) of the Commercial Computer Software Restricted Rights clause at 52.227-19 and the limitations set
forth in CyberSource Corporation's standard commercial agreement for this software. Unpublished rights
reserved under the copyright laws of the United States.
Trademarks
CyberSource, The Power of Payment, CyberSource Payment Manager, CyberSource Risk Manager,
CyberSource Decision Manager, CyberSource Connect, Authorize.Net, and eCheck.net are trademarks and/or
service marks of CyberSource Corporation. All other brands and product names are trademarks or registered
trademarks of their respective owners.
2
CONTENTS
Contents
Recent Revisions to This Document
About This Guide
7
Audience and Purpose
7
Conventions 7
Note, Important, and Warning Statements
Text and Command Conventions 8
Related Documents
Customer Support
Chapter 1
Introduction
6
7
8
9
10
Terminology 10
Payment Tokenization 10
Profile ID 11
On-Demand Customer Profile
Secure Acceptance 12
Payment Token 12
11
Supported Processors and Payment Methods
Types of Authorizations
12
14
Authorization Consents 15
Authorization for Electronic Checks
Reporting 16
Subscription Detail Report
15
16
Transaction Endpoints 16
Test Card Numbers 17
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
3
Contents
Chapter 2
Requesting Payment Tokenization Services
18
Relaxed Requirements for Address Data and Expiration Date
18
Validating a Customer Profile 19
Charging a Setup Fee 19
Automatically Preauthorizing an Account 20
Manually Preauthorizing an Account 21
Creating a Customer Profile 22
Credit Card Without a Setup Fee 22
Credit Card With a Setup Fee 23
eCheck 24
Updating a Customer Profile 25
Updating Card Account Number 25
Removing Card Expiration Dates 26
Changing the Payment Method of a Customer Profile
Requesting an On-Demand Transaction
28
Converting a Transaction to a Customer Profile
Retrieving a Customer Profile
Deleting a Customer Profile
Chapter 3
Additional Features
Optional Data Storage
27
29
30
30
31
31
Visa Bill Payment Program
Customer Profile Sharing
32
32
Account Updater 33
Account Updater Profile Update Report 34
Records in the Account Updater Profile Update Report
Header Records 35
Details Records 35
Footer Records 36
Appendix A API Fields
35
38
Data Type Definitions
Request Fields
Reply Fields
38
39
51
Reason Codes
59
AVS and CVN Codes 62
International AVS Codes 62
U.S. Domestic AVS Codes 63
CVN Codes
64
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
4
Contents
Appendix B Examples
66
Name-Value Pair Examples 66
Creating a Customer Profile without a Setup Fee 66
Creating a Customer Profile with a 5.00 Setup Fee 67
Updating a Customer Profile 68
Updating a Card Account Number 68
Removing Card Expiration Dates 68
Retrieving a Customer Profile 69
Deleting a Customer Profile 69
XML Examples 71
Creating a Customer Profile without a Setup Fee 71
Creating a Customer Profile with a 5.00 Setup Fee 72
Updating a Customer Profile 74
Updating a Card Account Number 74
Removing Card Expiration Dates 75
Retrieving a Customer Profile 75
Deleting a Customer Profile 76
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
5
REVISIONS
Recent Revisions to This
Document
Release
Changes
January 2016

Added the “Relaxed Requirements for Address Data and Expiration
Date” section. See page 18.

Added the “Removing Card Expiration Dates” section. See page 26.

Added the “Removing Card Expiration Dates” example. See page 68.
September 2015
Added the “Transaction Endpoints” section. See page 16.
January 2015

Added a note to the “Manually Preauthorizing a Subscription”. See
page 21.
December 2014

Updated the data type and length for a number of request fields. See
Table 7, page 39.

Added a number of authorization reply fields. See Table 8, page 51.

Updated the “Supported Processors and Payment Types” section. See
page 12.

Updated the “Requesting an On-Demand Transaction” section. See
page 28.

Updated the “Customer Subscription Sharing” section. See page 32.

Updated “Related Documents” section. See page 8.

Removed Laser as a supported card type.

Updated report URL values. See Table 3, page 34.

Updated the check_secCode request field. See page 45.
August 2014
March 2014
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
6
ABOUT GUIDE
About This Guide
Audience and Purpose
This guide is written for merchants who want to create customer payment profiles and
eliminate payment data from their network to ensure that customers’ sensitive personal
information is not compromised during a security breach. A customer’s sensitive
information is replaced with a unique identifier, known as a profile ID, which you store on
your network.
The purpose of this guide is to help you create, update, retrieve, and delete customer
profiles. It also describes how to process an on-demand transaction using a customer
profile.
Conventions
Note, Important, and Warning Statements
A Note contains helpful suggestions or references to material not contained in
the document.
Note
An Important statement contains information essential to successfully
completing a task or learning a concept.
Important
Warning
A Warning contains information or instructions, which, if not heeded, can result
in a security risk, irreversible loss of data, or significant cost in time or revenue
or both.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
7
About This Guide
Text and Command Conventions
Convention
Usage
bold

Field and service names in text; for example:
Include the billTo_firstName field.

Items that you are instructed to act upon; for example:
Click Save.
monospace

XML elements.

Code examples and samples.

Text that you enter in an API environment; for example:
Set the paySubscriptionCreateService_run field to true.
Related Documents

Account Updater User Guide (PDF | HTML)—describes how to automatically
incorporate changes made to a customer’s payment card data.

Business Center User Guide (PDF | HTML)—describes the features and options
available within the Business Center.

Batch Submission User Guide (PDF | HTML)—describes how to send a batch file of
order requests to CyberSource.

Credit Card Services User Guide (PDF | HTML)—describes how to integrate credit
card processing into your order management system.

Electronic Check Services User Guide (PDF | HTML)—describes how to integrate
eCheck processing into your order management system.

Getting Started with CyberSource Essentials (PDF | HTML)—describes how to get
started using the Simple Order API.

Recurring Billing Using the Simple Order API for CyberSource Essentials (PDF |
HTML)—describes how to create customer subscriptions and perform recurring and
installment payments.

Reporting User Guide (PDF | HTML)—describes how to view and configure Business
Center reports.

Secure Acceptance Web/Mobile Configuration Guide (PDF | HTML)—describes how
to create a Secure Acceptance profile and integrate seamlessly with Secure
Acceptance Web/Mobile.

Secure Acceptance Silent Order POST Development Guide (PDF | HTML)—
describes how to create a Secure Acceptance profile and integrate seamlessly with
Secure Acceptance Silent Order POST.

Simple Order API and SOAP Toolkit API Documentation and Downloads page.

Simple Order API and SOAP Toolkit API Testing Information page.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
8
About This Guide
Refer to the Support Center for complete CyberSource technical documentation:
http://www.cybersource.com/support_center/support_documentation
Customer Support
For support information about any CyberSource service, visit the Support Center:
http://www.cybersource.com/support
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
9
CHAPTER
Introduction
1
Terminology
Payment Tokenization
Tokenization is the process of replacing sensitive card information and billing information
with a unique identifier that cannot be reverse-engineered. The unique identifier is called a
profile ID, also known as a payment token (see page 11) which you store on your server.
Tokenization protects sensitive cardholder information in order to comply with industry
standards and government regulations and can prevent the theft of card information in
storage.
The payment tokenization solution is compatible with the Visa and MasterCard Account
Updater service. All payment information stored with CyberSource is automatically
updated by participating banks, thereby reducing payment failures. See the Account
Updater User Guide (PDF | HTML) for more information.
CyberSource payment tokenization and payment network tokenization are
different features:
Important

The CyberSource token (the profile ID) is created by CyberSource and
can be used only with CyberSource payment services.

The payment network token is created by a token service provider and
can be used throughout the financial network.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
10
Chapter 1
Introduction
Profile ID
Contact CyberSource Customer Support to have your account configured for a
16-digit profile ID, or to update from a 22-digit profile ID to a 16-digit profile ID.
Important
The profile ID, also known as the payment token, identifies the card and retrieves the
associated billing, shipping, and card information of a customer profile. No sensitive card
information is stored on your servers, reducing your PCI DSS obligations.
There are three types of profile IDs:

22 digit—the default profile ID.

16 digit—displays the last 4 digits of the primary account number (PAN) and passes
Luhn mod-10 checks. This profile ID is for card customer profiles.

16 digit—displays 99 as the two leading digits and passes Luhn mod-10 checks. If
your business rules prohibit using 99 as the leading digits, you must modify your
system to accept the other 16-digit profile ID.
On-Demand Customer Profile
Important
For information about recurring and installment customer profiles, see
Recurring Billing Using the Simple Order API for CyberSource Essentials (PDF
| HTML).
An on-demand customer profile contains specific information about a customer that you
store in the CyberSource database for future billing. After you create a customer profile,
the following tasks are available to you:

Update customer profile information (see page 25).

Process an on-demand transaction using the customer profile details. You can
process an authorization, credit, eCheck credit, and an eCheck debit (see page 28).

Retrieve customer profile information (see page 30).

Delete a customer profile (see page 30).

Share customer profiles (see page 32).
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
11
Chapter 1
Introduction
Secure Acceptance
Payment Token
If you are using Secure Acceptance to process transactions, the payment token is the
customer profile ID (see page 11). The payment token identifies the card and retrieves the
associated billing, shipping, and card information. For Secure Acceptance documentation,
see "Related Documents," page 8.
Supported Processors and
Payment Methods
Each customer profile has an associated payment method: card, eCheck, or other.
Note
Important
Table 1
The other payment method enables you to store data securely in a customer
profile. This payment method is useful if you do not intend to use the customer
profile for payment transactions. You must use the CyberSource API services
to submit a customer profile request with the other payment method. See
"Optional Data Storage," page 31.
All the processors listed in the table below support automatic
preauthorizations and manual preauthorizations. Unless stated otherwise,
each processor in the table below supports 1.00 preauthorizations using all
credit card types.
Supported Processors and Payment Methods
Processor
Payment Method
Chase Paymentech Solutions

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express,
Discover, and Diners Club cards.

Electronic check.

Visa Bill Payments—see page 32.
CyberSource ACH Service
Electronic check.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
12
Chapter 1
Table 1
Introduction
Supported Processors and Payment Methods (Continued)
Processor
Payment Method
FDC Compass

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express, and
Discover cards.

Visa Bill Payments—see page 32.

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express,
Discover, Diners Club, and JCB (US Domestic) cards.

Visa Bill Payments—see page 32.

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express,
Discover, Diners Club, and JCB (US Domestic) cards.

Visa Bill Payments—see page 32.

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express,
Discover, and JCB (US Domestic) cards.

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express,
Discover, Diners Club, and JCB cards.
FDC Nashville Global
FDMS Nashville
FDMS South
GPN


Visa Bill Payments—see page 32.
Moneris
Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.
RBS WorldPay Atlanta

Credit card—supports 0.00 preauthorizations for Visa and
MasterCard cards.

Electronic check.
TeleCheck
Electronic check—supports 1.00 preauthorizations.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
13
Chapter 1
Table 1
Introduction
Supported Processors and Payment Methods (Continued)
Processor
Payment Method
TSYS Acquiring Solutions

Credit card—supports 0.00 preauthorizations using Visa,
MasterCard, American Express, and Discover cards.

Debit card and pre-paid card—supports partial
authorizations for Visa, MasterCard, American Express,
Discover, Diners Club, and JCB cards.

Visa Bill Payments—see page 32.
Important Does not support automatic preauthorization
reversals.
Types of Authorizations
Table 2
Types of Authorizations
Authorization
Description
Automatic Preauthorization
Automatically preauthorize a credit card when you create a
customer profile, or automatically preauthorize a bank
account when you create a customer profile with new
eCheck information. See .
Depending on the payment method and if your account is
configured for Smart Authorization, CyberSource
automatically runs several fraud checks during a
preauthorization: AVS and CVN checks for cards, and
Smart Authorization for cards and eChecks.
Note Partial authorizations for prepaid cards and debit
cards cannot be performed for automatic
preauthorizations.
Important Contact your merchant account provider to
determine whether you will be charged a fee for a
preauthorization.
Manual Preauthorization
Manually preauthorize a customer’s account for a nominal
or zero amount when you create a customer profile. This
feature is available only with the CyberSource API. See .
Important Contact your merchant account provider to
determine whether you will be charged a fee for a
preauthorization.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
14
Chapter 1
Table 2
Introduction
Types of Authorizations (Continued)
Authorization
Description
Automatic Preauthorization
Reversal
If your processor supports full authorization reversal, you
can contact CyberSource Customer Support to
automatically reverse preauthorizations when you create a
customer profile. CyberSource does not charge you for
reversing automatic preauthorizations. If you cannot create
a customer profile for any reason, or if the preauthorization
amount is 0.00, CyberSource does not reverse the
automatic preauthorization.
Important TSYS Acquiring Solutions, American Express
Brighton, and HSBC do not support automatic
preauthorization reversals.
Partial Authorization
When the balance on a debit card or prepaid card is lower
than the requested authorization amount, the issuing bank
can approve a partial amount.
Authorization Consents
Authorization for Electronic Checks
To support customer profiles that use electronic checks, you must display a separate
consent agreement accepted by the customer before you create the customer profile. The
authorization statement must:

Be readily identifiable as an authorization.

Clearly and conspicuously state its terms including the transaction amount and the
effective date of the transfer.

Include the routing number and bank account number to be debited.

Specify the frequency of the debits and the period of time during which the customer’s
payment authorization is granted.

Include instructions for revoking the authorization.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
15
Chapter 1
Introduction
Reporting
Subscription Detail Report
The Subscription Detail report provides detailed information about on-demand customer
profiles and their transactions.
The Subscription Detail Report is available in XML and CSV formats. You can view the
report on the Business Center, or you can use a client API to programmatically download
the report.
For a detailed description of the Subscription Detail Report, and for details about
downloading the report, see the Reporting Developer Guide (PDF | HTML).
Transaction Endpoints
Contact CyberSource Customer Support to configure your account for
Payment Tokenization.
Important
For live transactions, send requests to the production server:
https://ics2wsa.ic3.com/commerce/1.x/transactionProcessor
For test transactions, send requests to the test server:
https://ics2wstesta.ic3.com/commerce/1.x/transactionProcessor
When you use the test server, the payment method you are testing determines whether
you use test card numbers (see page 17) or test account numbers. Search for and view
your test subscriptions in the test version of the Business Center:
https://ebctest.cybersource.com
When you use the production server, the payment method you are testing determines
whether you use real card numbers or real account numbers. Create customer
subscriptions that use small amounts, such as 1.50. Search for and view your live
customer subscriptions in the production version of the Business Center:
https://businesscenter.cybersource.com
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
16
Chapter 1
Introduction
Test Card Numbers
You may use the following test credit card numbers for transactions:
Credit Card Type
Test Account Number
Visa
4111111111111111
MasterCard
5555555555554444
American Express
378282246310005
Discover
6011111111111117
JCB
3566111111111113
Diners Club
38000000000006
Maestro International (16 digits)
6000340000009859
Maestro Domestic (16 digits)
6759180000005546
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
17
CHAPTER
Requesting Payment
Tokenization Services
2
Relaxed Requirements for
Address Data and Expiration Date
Services:

Authorization

On-Demand credit
Processors:

Chase Paymentech Solutions

FDC Compass

FDC Nashville Global

FDMS South

GPN
To enable relaxed requirements for address data and expiration date, contact
CyberSource Customer Support to have your account configured for this feature.
Historically, this data was mandated by CyberSource. With the advent of digital payments
and an increasingly global e-commerce environment, CyberSource decided to relax the
requirements for address data and expiration date.
Relaxed requirements for address data make the following fields optional when creating
customer profiles:

billTo_city

billTo_country

billTo_email

billTo_firstname

billTo_lastname

billTo_postalCode: if you include this field in your request, you must also include
billTo_country.

billTo_state

billTo_street1
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
18
Chapter 2
Requesting Payment Tokenization Services
Relaxed requirements for expiration date make the following fields optional when updating
customer profiles:

card_expirationMonth: if you include this field in your request, you must also include
card_expirationYear.

card_expirationYear: If you include this field in your request, you must also include
card_expirationDate.
Important
When relaxed requirements for address data and expiration date are enabled
for your CyberSource account, and your service request does not include one
or more of the fields in the preceding list, you increase the risk of declined
transactions and fraud depending on your location, your processor, and the
cardholder's issuing bank.
It is your responsibility to determine whether a field is required for the
transaction you are requesting. For example, effective October 2014, an
issuing bank can decline an authorization request for a recurring transaction
with a Visa Europe card if the expiration date is incorrect, invalid, or missing. If
you do not provide the correct expiration date for a recurring transaction the
authorization request may be declined.
Validating a Customer Profile
Three validation methods are available to you to validate a card or eCheck customer
profile before it is created.
Charging a Setup Fee
You can charge a setup fee only for card and eCheck payments. It is a one-time optional
fee that you can charge only when you are creating a customer profile. Include the setup
fee in the purchaseTotals_grandTotalAmount field. See "Credit Card With a Setup Fee,"
page 23.
Important
CyberSource recommends that you do not enable partial authorizations for
setup fees. If the issuing bank approves a partial amount for the setup fee, the
customer profile is not created.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
19
Chapter 2
Requesting Payment Tokenization Services
Automatically Preauthorizing an Account
Automatic preauthorizations are available only for card payments and eCheck payments,
and CyberSource does not charge you for this feature. Before you create a customer
profile, CyberSource authorizes a small amount against the payment method you enter for
the customer profile. Each payment processor supports different preauthorization
amounts. See "Payment Tokenization," page 10.
When you configure your account to use automatic preauthorizations, CyberSource will
automatically run several fraud checks during a preauthorization depending on the
payment method for the new customer profile:

AVS checks—credit card only.

CVN checks—credit card only.

Smart Authorization—credit card and electronic checks.
If your payment processor supports full authorization reversals you can contact
CyberSource Customer Support to automatically reverse preauthorizations. When you
create a customer profile with automatic preauthorizations and automatic preauthorization
reversals enabled, the order of services is:
1
Credit card authorization for the preauthorization.
2
Profile creation—only if the authorization was successful.
3
Full authorization reversal—only if the authorization was successful and the
preauthorization amount was not 0.00.
To enable or disable automatic preauthorizations:
Step 1
Log in to the Business Center:

Live Transactions: https://ebc.cybersource.com

Test Transactions: https://ebctest.cybersource.com
Step 2
In the left navigation pane, choose Payment Tokenization > Settings.
Step 3
Check Perform an automatic preauthorization before creating profile.
Step 4
Click Submit Changes.
To disable automatic preauthorizations:
Step 1
Request the paySubscriptionCreateService service. See "Creating a Customer Profile,"
page 22.
Step 2
In the paySubscriptionCreateService request, set the
paySubscriptionCreateService_disableAutoAuth field to true.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
20
Chapter 2
Requesting Payment Tokenization Services
Manually Preauthorizing an Account
Manually preauthorizing an account is available only for card payments and eCheck
payments. You can manually preauthorize a customer’s account when you create a
customer profile.
Important
If your processor supports full authorization reversals and if you charged more
than $0 for the preauthorization, CyberSource recommends that you
subsequently request a full authorization reversal. See "Supported
Processors and Payment Methods," page 12.
To manually preauthorize a card customer profile:
Step 1
Set the paySubscriptionCreateService_run service field to true. See "Credit Card
Without a Setup Fee," page 22.
Step 2
Include the following fields:

ccAuthService_run—set to true.

purchaseTotals_grandTotalAmount—set to 0.00 or a small amount.
For all card types on Atos and for MasterCard and American Express
transactions on FDC Nashville Global, include the following fields:
Note

ccAuthService_commerceIndicator=recurring

ccAuthService_firstRecurringPayment=TRUE

card_cvNumber
See Credit Card Services Using the Simple Order API (PDF | HTML) for
detailed descriptions of the above request fields.
To manually preauthorize an eCheck customer profile:
Step 1
Set the paySubscriptionCreateService_run service field to true. See "eCheck,"
page 24.
Step 2
Include the following fields:

ecDebitService_run—set to true.

ecDebitService_paymentMode—set to 1.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
21
Chapter 2
Requesting Payment Tokenization Services
Creating a Customer Profile
Credit Card Without a Setup Fee
You must validate the customer account before the customer profile is created.
See "Validating a Customer Profile," page 19.
Important
To create a customer a profile without a setup fee
Step 1
Set the paySubscriptionCreateService_run service field to true.
Step 2
Include the following fields in the request:

billTo_firstName

billTo_lastName

billTo_city

billTo_country

billTo_email

billTo_postalCode

billTo_state

billTo_street1

card_accountNumber

card_cardType

card_expirationMonth

card_expirationYear

merchantID

merchantReferenceCode

purchaseTotals_currency

recurringSubscriptionInfo_frequency—set to on-demand.
See "API Fields," page 38 for detailed descriptions of the request and reply fields. See
Appendix B, "Examples," on page 66 for a request and reply example.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
22
Chapter 2
Requesting Payment Tokenization Services
Credit Card With a Setup Fee
You must validate the customer account before the customer profile is created.
See "Validating a Customer Profile," page 19.
Important
To create a customer a profile with a 5.00 setup fee
Step 1
Set the paySubscriptionCreateService_run service field to true.
Step 2
Set the ccAuthService_run service field to true—authorizes the setup fee.
Step 3
Set the ccCaptureService_run service field to true—captures the setup fee.
Step 4
Include the following fields in the request:

purchaseTotals_grandTotalAmount—the setup fee amount.

billTo_firstName

billTo_lastName

billTo_city

billTo_country

billTo_email

billTo_postalCode

billTo_state

billTo_street1

card_accountNumber

card_cardType

card_expirationMonth

card_expirationYear

merchantID

merchantReferenceCode

purchaseTotals_currency

recurringSubscriptionInfo_frequency—set to on-demand.
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
23
Chapter 2
Requesting Payment Tokenization Services
eCheck
You must validate the customer account before the customer profile is created.
See "Validating a Customer Profile," page 19.
Important
To create an eCheck customer a profile:
Step 1
Set the paySubscriptionCreateService_run service field to true.
Step 2
Include the following fields in the request:

subscription_paymentMethod—set to check.

billTo_firstName

billTo_lastName

billTo_city

billTo_country

billTo_email

billTo_postalCode

billTo_state

billTo_street1

billTo_phoneNumber—contact your payment processor representative to learn
whether this field is required or optional.

merchantID

merchantReferenceCode

purchaseTotals_currency

recurringSubscriptionInfo_frequency—set to on-demand.

billTo_dateOfBirth

billTo_driversLicenseNumber—contact your TeleCheck representative to learn
whether this field is required or optional.

billTo_driversLicenseState—contact your TeleCheck representative to learn whether
this field is required or optional.

billTo_companyTaxID—contact your TeleCheck representative to learn whether this
field is required or optional.

check_accountNumber

check_accountType

check_bankTransitNumber

check_secCode—this field is required if your processor is TeleCheck.

check_checkNumber—contact your payment processor representative to learn
whether this field is required or optional.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
24
Chapter 2
Requesting Payment Tokenization Services
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Updating a Customer Profile
You cannot update the recurringSubscriptionInfo_frequency field. In the
example below the customer’s card account number is updated.
Important
Note
If your account is configured to use a 16 digit format-preserving profile ID (see
page 11) and you update the card number, you receive a new profile ID if the
last four digits of the new card number are different from the previous card
number. The status of the previous profile ID changes to superseded. You
cannot update, delete, or cancel a customer profile that has a status of
superseded.
Updating Card Account Number
To update a customer’s card account number:
Step 1
Set the paySubscriptionUpdateService_run service field to true.
Step 2
Include the following fields in the request:

card_accountNumber

card_cardType

card_expirationMonth—this field is optional if your CyberSource account is configured
for relaxed requirements for address data and expiration date. See page 18.

card_expirationYear—this field is optional if your CyberSource account is configured
for relaxed requirements for address data and expiration date. See page 18.

merchantID

merchantReferenceCode

recurringSubscriptionInfo_subscriptionID
Note
When you update the card number for a customer profile, CyberSource
recommends that you validate the customer profile. See "Validating a
Customer Profile," page 19.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
25
Chapter 2
Requesting Payment Tokenization Services
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See page 68 for a request and reply example.
Removing Card Expiration Dates
To remove a customer’s card expiration dates:
Step 1
Set the paySubscriptionUpdateService_run service field to true.
Step 2
Include the following fields in the request:

card_expirationMonth—include an empty value in this field.

card_expirationYear—include an empty value in this field.

merchantID

merchantReferenceCode

recurringSubscriptionInfo_subscriptionID
Note
When you update the card number for a customer profile, CyberSource
recommends that you validate the customer profile. See "Validating a
Customer Profile," page 19.
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
26
Chapter 2
Requesting Payment Tokenization Services
Changing the Payment Method of
a Customer Profile
You must validate the customer account before the customer profile is created.
See "Validating a Customer Profile," page 19.
Important
You can change the payment method of a customer profile from:

Card to eCheck.

eCheck to card.
To change the payment method of a customer profile:
Step 1
Set the paySubscriptionUpdateService_run service field to true.
Step 2
Include the following fields in the request:

subscription_paymentMethod—change to card (see page 22) or check (see
page 24.)

merchantID

merchantReferenceCode

recurringSubscriptionInfo_subscriptionID
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
27
Chapter 2
Requesting Payment Tokenization Services
Requesting an On-Demand
Transaction
The on-demand transactions that you can request are:

Credit cards—authorization, sale (a bundled authorization and capture), and credit.

Electronic checks—debit and credit.
To request an on-demand sale transaction:
Step 1
Set the ccAuthService_run service field to true.
Step 2
Set the ccCaptureService_run service field to true.
Step 3
Include the following fields in the request:

merchantID

merchantReferenceCode

purchaseTotals_currency

purchaseTotals_grandTotalAmount

recurringSubscriptionInfo_subscriptionID
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
To request an on-demand credit transaction:
Step 1
Set the ccCreditService_run service field to true.
Step 2
Include the following fields in the request:

merchantID

merchantReferenceCode

purchaseTotals_currency

purchaseTotals_grandTotalAmount

recurringSubscriptionInfo_subscriptionID
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
28
Chapter 2
Requesting Payment Tokenization Services
Converting a Transaction to a
Customer Profile
Transaction information resides in the CyberSource database for 60 days
after the transaction is processed.
Important
Note
When you create a customer profile from an existing transaction, the account is
already validated. You can charge a setup fee. See "Charging a Setup Fee,"
page 19.
To convert a transaction to a customer profile:
Step 1
Set the paySubscriptionCreateService_run service field to true.
Step 2
Include the following fields in the request:

merchantID

merchantReferenceCode

recurringSubscriptionInfo_frequency—set to on-demand.

paySubscriptionCreateService_paymentRequestID—include the requestID value
returned from the original transaction request.
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
29
Chapter 2
Requesting Payment Tokenization Services
Retrieving a Customer Profile
To retrieve a customer profile:
Step 1
Set the paySubscriptionRetrieveService_run service field to true.
Step 2
Include the following fields in the request:

merchantID

merchantReferenceCode

recurringSubscriptionInfo_subscriptionID
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Deleting a Customer Profile
Deleting a customer profile is permanent. When a profile is deleted, any
profiles it superseded are also deleted.
Important
To delete a customer profile:
Step 1
Set the paySubscriptionDeleteService_run service field to true.
Step 2
Include the following fields in the request:

merchantID

merchantReferenceCode

recurringSubscriptionInfo_subscriptionID
See Appendix A, "API Fields," on page 38 for detailed descriptions of the request and
reply fields. See Appendix B, "Examples," on page 66 for a request and reply example.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
30
CHAPTER
Additional Features
3
Optional Data Storage
Each payment method enables you to store data securely in a customer profile. If you are
using the Other payment method, you must use CyberSource API services to submit a
customer profile request. This payment method is useful if you do not intend to use the
customer profile for payment transactions.
You can include two types of data storage fields in a customer profile:

merchantSecureData_field1 to 4—CyberSource encrypts this data before storing it
in the database. The validation performed on these fields is a size check. Fields 1 to 3
are string (100) and the fourth field is string (2K). You can include any data in the
encrypted fields.

merchantDefinedData_field1 to 4—CyberSource does not encrypt these fields
before storing them in the database. Legal limitations exist on the type of data that you
can include in the unencrypted fields.
Warning
Note
Merchant-defined data fields are not intended to and MUST NOT be used
to capture personally identifying information. Accordingly, merchants are
prohibited from capturing, obtaining, and/or transmitting any personally
identifying information in or via the merchant-defined data fields.
Personally identifying information includes, but is not limited to, card
number, social security number, driver's license number, state-issued
identification number, passport number, and card verification numbers
(CVV, CVC2, CVV2, CID, CVN). In the event CyberSource discovers that a
merchant is capturing and/or transmitting personally identifying information
via the merchant-defined data fields, intentionally or not, CyberSource
WILL immediately suspend the merchant's account, which will result in a
rejection of any and all transaction requests submitted by the merchant
after the point of suspension.
When you create a customer profile based on an existing transaction, the
merchant-defined data fields are not transferred to the new customer
profile.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
31
Chapter 3
Additional Features
Visa Bill Payment Program
This feature is a transaction indicator for specific authorization or credit requests that Visa
wants to differentiate from other types of purchases and credits. Customers can use their
Visa cards to pay bills, such as monthly utility bills. Visa requests that you flag the bill
payments and credits so that they can be easily identified.
When creating a customer profile using a Visa card, set the recurringsubscrptionInfo_
billPayment to true. This value is case sensitive.
When processing a one-time payment, set the ccAuthService_billPayment field to true
This value is case sensitive. Set the debtIndicator field to true.
When processing a one-time credit, set the ccCreditService_billPayment field to true.
This value is case sensitive. Set the debtIndicator field to true.
For more information about the Visa Bill Payment Program and the processors that
support it, see Credit Card Services User Guide (PDF | HTML).
Customer Profile Sharing
Contact CyberSource Customer Support to enable your account for profile
sharing.
Important
When you create a customer profile, your CyberSource merchant ID is associated with
that profile. You can share customer profiles among merchant IDs, and you can access
customer profiles that were created with other CyberSource merchant IDs.
You can:

Create a customer subscription by converting an existing transaction that was
processed with a CyberSource merchant ID other than your own.

Retrieve customer profile information—in your request include your merchant ID and
the profile ID of the customer profile (see page 30). If the customer profile is not
enabled for profile sharing, CyberSource returns the reason code 150 (see page 59).

Update customer profile information—In your request include your merchant ID and
the profile ID of the customer profile (see page 25). If the customer profile is not
enabled for profile sharing, CyberSource returns the reason code 150 (see page 59).

Perform an on-demand transaction using the customer profile—In your request
include your merchant ID and the profile ID of the customer profile (see page 28). If
the customer profile is not enabled for profile sharing, CyberSource returns the reason
code 150 (see page 59).
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
32
Chapter 3
Additional Features
You cannot delete a customer profile that has a merchant ID other than your own.
Account Updater
You must comply with the Account Updater Terms of Use. See the Account
Updater User Guide (PDF | HTML).
Important
CyberSource Account Updater is integrated with the Recurring Billing functionality so that
your customer subscriptions can be kept up-to-date with the latest credit card data
changes. These changes can include a new expiration date, a new credit card number, or
a brand change such as a change from Visa to MasterCard.
You must enroll in the Visa Account Updater program and the MasterCard Automatic
Billing Updater program or both before you can use CyberSource Account Updater.
Contact your account representative to enroll in Account Updater. CyberSource will
submit enrollment forms on your behalf to both MasterCard and Visa. The enrollment
process can take up to 10 business days.
After your enrollment forms are processed, CyberSource:

Configures your account to automatically update your customer subscriptions with
updated credit card data.

Updates your customer subscriptions once per month.

Requests updates only for customer subscriptions with a status of active or on-hold.
Updates for customer subscriptions with a status of completed or cancelled cannot be
requested.
To have your customer subscriptions updated on a particular day of the month to coincide
with your billing cycle, contact Customer Support to make this request. It is best practice to
request updates for your customer subscriptions 3 to 5 days before your billing cycle
begins. You can choose any calendar day, 1 through 28.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
33
Chapter 3
Additional Features
Account Updater Profile Update Report
From 24 to 48 hours after your scheduled customer subscription update, an Account
Updater Profile Update report is available for download. You can download the report from
the Business Center or through a query API with a client application.
To download the Profile Update report:
Step 1
In the left navigation panel, choose Reports > Report Search. The Report Search
window appears.
Step 2
From the Report drop-down list, choose All.
Step 3
From the Frequency drop-down list, choose Daily.
Step 4
Choose the day that your reports were processed.
Step 5
Click Submit. The report is listed in the Downloadable Reports table.
Step 6
Click the Download link next to the report name.
To connect to the report server, your client application must support HTTPS connections:

HTTP/1.0 or HTTP/1.1

TLS 1.2 or above
Your client application must use Basic Access Authentication to send the username and
password. Many HTTPS client libraries implement this authentication method. For more
information about Basic Access Authentication, see:
http://www.ietf.org/rfc/rfc2617.txt
To request a report, your client application must send an HTTP GET message to the
report server. Use this URL format for the request:
https://<server_name>/DownloadReport/YYYY/MM/DD/<merchant_ID>/<report_
name>.<report_format>
Table 3
Report URL Values
Variable
Description
<server_name>
Name of the server from which to download the report. Use one of these
values:

Test server: ebctest.cybersource.com/ebctest

Production server: ebc.cybersource.com/ebc
YYYY
Four-digit year.
MM
Two-digit month.
DD
Two-digit day.
<merchant_id>
CyberSource merchant ID.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
34
Chapter 3
Table 3
Additional Features
Report URL Values (Continued)
Variable
Description
<report_name>
Name of the report to download:
<merchant_id>au.response.ss
<report_format>
Report format to download:
csv
Records in the Account Updater Profile
Update Report
Header Records
Table 4
Header Records
Order
Field Name
Description
Max. No. of
Characters
1
Record Identifier
Constant value indicating the record type.
Format: H
1
2
File Classification
Indicates file type.
Format: cybs.au.response.ss
30
3
Merchant ID
CyberSource Merchant ID.
Format: Alphanumeric
30
4
Batch ID
Unique identifier for the batch, generated by CyberSource.
Format: Numeric
30
Details Records
Table 5
Details Records
Order
Field Name
Description
Max. No. of
Characters
1
Record Identifier
Constant value indicating the record type.
Format: D
1
2
Account Updater
Request ID
Unique CyberSource identifier for the record.
Format: Numeric
30
3
Profile ID
The value that identifies the profile. CyberSource returned
this value when the profile was created.
Format: Numeric
16 or 22
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
35
Chapter 3
Table 5
Additional Features
Details Records (Continued)
Order
Field Name
Description
Max. No. of
Characters
4
New Card Number
New card number with 8 digits masked.
Format: Alphanumeric
19
If no new card number is available, this field is populated
with the current card number.
5
Response Code
Return code for the record.1
Customer profiles with a response code of ACL are moved
to a cancelled state.
Format: Alphabetic
3
6
Reason Code
Reason code for the record.1
Format: Numeric
3
7
Old Card Number
Old card number with 8 digits masked.
Format: Alphanumeric
19
8
Old Card Expiry Month
Expiration month of the old card.
Format: MM
2
9
Old Card Expiry Year
Expiration year of the old card.
Format: YY
2
10
New Card Expiry
Month
Expiration date of the new card.
Format: MM
2
11
New Card Expiry Year
Expiration year of the new card.
Format: YY
2
12
New Profile ID
The new value that identifies the customer profile. This
value supersedes the previous profile ID. CyberSource
returns this value when the profile is updated.
16
Format: Numeric
1
For more information, see the “Record Level Response Codes” and “Record Level Reason Codes” sections in the Account
Updater User Guide (PDF | HTML).
Footer Records
Table 6
Footer Records
Order
Field Name
Description
Max. No. of
Characters
1
Record Identifier
Constant value indicating the record type.
Format: F
1
2
Record Count
The number of detail records in the file.
Format: Numeric
—
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
36
Chapter 3
Table 6
Additional Features
Footer Records (Continued)
Order
Field Name
Description
Max. No. of
Characters
3
Response Code
Indicates the overall response.1
Format: Alphabetic
Possible values:
3
DEC: Declined
COM: Completed
4
Reason Code
Indicates the overall reason for the response code.1
Format: Numeric
3
1 For more information, see the “Record Level Response Codes” and “Record Level Reason Codes” sections in the Account
Updater User Guide (PDF | HTML).
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
37
APPENDIX
A
API Fields
The Payment Tokenization service names in the API field tables have been shortened:
Service Name
Shortened Service Name
paySubscriptionCreateService
Create
paySubscriptionDeleteService
Delete
paySubscriptionUpdateService
Update
paySubscriptionRetrieveService
Retrieve
Data Type Definitions
For more information about these data types, see the World Wide Web Consortium (W3C)
XML Schema Part 2: Datatypes specification.
Data Type
Description
Integer
Whole number {..., -3, -2, -1, 0, 1, 2, 3, ...}
String
Sequence of letters, numbers, spaces, and special characters
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
38
Appendix A
API Fields
Request Fields
Table 7
Request Fields
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
billTo_city
City of the billing address.
Create (R)1
String (50)
Update (O)
billTo_company
Name of the customer’s company.
Create (O)
String (60)
Update (O)
billTo_companyTaxID
Tax identifier for the customer’s company.
Important Contact your TeleCheck
representative to find out whether this field
is required or optional.
billTo_customerID
Your identifier for the customer.
Create (see
description)
String (9)
Update (see
description)
Create (O)
String (100)
Update (O)
billTo_dateOfBirth
billTo_driversLicenseNumber
Customer date of birth.
Create (O)
Format: YYYY-MM-DD or YYYYMMDD
Update (O)
Customer’s driver’s license number.
Create (see
description)
Important Contact your TeleCheck
representative to find out whether this field
is required or optional.
billTo_driversLicenseState
State or province in which the customer’s
driver’s license was issued. Use the twocharacter ISO state and province code.
Important Contact your TeleCheck
String (10)
String (30)
Update (see
description)
Create (see
description)
String (2)
Update (see
description)
representative to find out whether this field
is required or optional.
billTo_email
Customer email address.
Create (R)1
String (255)
Update (O)
billTo_firstName
Customer first name.
Create (R)1
String (60)
Update (O)
billTo_lastName
Customer last name.
Create (R)1
String (60)
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
39
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
billTo_phoneNumber
Customer phone number. When creating a
customer profile, the requirements depend
on the payment method:
Create (see
description)
String (15)
billTo_postalCode

Credit cards—optional.

Electronic checks—contact your
payment processor representative to find
out if this field is required or optional.
Postal code for the billing address. The
postal code must consist of 5 to 9 digits.
Update (see
description)
Create (R)1
String (10)
Update (O)
If the billing country is the U.S., the 9-digit
postal code must follow this format:
[5 digits][dash][4 digits]
Example: 12345-6789
If the billing country is Canada, the 6-digit
postal code must follow this format:
[alpha][numeric][alpha][space]
[numeric][alpha][numeric]
Example: A1B 2C3
billTo_state
State or province in the billing address. Use
the two-character ISO state and province
code.
Create (See
description)1
String (2)
Update (O)
Important Required when the billing
country is the U.S. or Canada; otherwise,
optional.
billTo_street1
First line of the billing address.
Create (R)1
Update (O)
Moneris:
String (50)
All other
processors:
String (60)
billTo_street2
Second line of the billing address.
Create (O)
Update (O)
Moneris:
String (50)
All other
processors:
String (60)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
40
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
businessRules_
declineAVSFlags
List of AVS codes that cause the customer
profile creation request to be declined for
AVS reasons. Use a space to separate the
codes in the list. Use this field only if you
are using automatic preauthorization. See
"AVS and CVN Codes," page 62.
Create (O)
String (255)
Create (O)
String (5)
Create (R for
card payments)
String (20)
Important You must include the value N
in the list if you want to receive declines for
the AVS code N.
businessRules_
ignoreAVSResult
Indicates whether CyberSource should
ignore the results of the AVS check and
create the customer profile even if the credit
card does not pass the AVS check. Use this
field only if you are using automatic
preauthorization.
Important Do not use this field if you are
using Smart Authorization to alert you to
authorizations that fail AVS or CVN checks.
Possible values:

true: Ignore the results of the AVS check
and create the customer profile.

false (default): If the AVS check fails, do
not create the customer profile.
When this value is true, the list in the
businessRules_declineAVSFlags field is
ignored.
card_accountNumber
Card account number.
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
41
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
card_cardType
Type of card to authorize. For more
information about which cards can be
handled by each processor, see "Supported
Processors and Payment Methods,"
page 12.
Create (R for
card payments)
String (3)
Update (O)
Possible values:

001: Visa

002: MasterCard, Eurocard—European
regional brand of MasterCard

003: American Express

004: Discover

005: Diners Club

006: Carte Blanche

007: JCB

014: EnRoute

021: JAL

024: Maestro (UK Domestic)

031: Delta—use this value only for
Global Collect. For other processors, use
001 for all Visa card types.

033: Visa Electron

034: Dankort

036: Carte Bleu

037: Carta Si

042: Maestro (International)

043: GE Money UK card—before setting
up your system to work with GE Money
UK cards, contact the CyberSource UK
Support Group.
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
42
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
card_cvIndicator
Indicates whether a card verification
number was included in the request.
Possible values:
Create (O)
String with
numbers only
(1)
Create (O)
String with
numbers only
(4)
Create (R for
card payments)
String (2)
card_cvNumber

0 (default): CVN service not requested.
This default is used if you do not include
card_cvNumber in the request.

1 (default): CVN service requested and
supported. This default is used if you
include card_cvNumber in the request.

2: CVN on credit card is illegible.

9: CVN was not imprinted on credit card.
Card verification number. Include this field
only if you are using automatic
preauthorization and want to run the CVN
check. See .
Do not include this field if your processor is
Global Collect.
card_expirationMonth
Expiration month.
Format: MM
Update1
card_expirationYear
Expiration year.
Format: YYYY
FDC Nashville Global and FDMS South
Create (R for
card payments)
Update1
You can send in 2 digits or 4 digits. When
you send in 2 digits, they must be the last 2
digits of the year.
card_issueNumber
Indicates the number of times a Maestro
(UK Domestic) card has been issued to the
account holder. The card might or might not
have an issue number; the field is required
if the card has an issue number. The
number can consist of one or two digits, and
the first digit might be a zero. Include
exactly what is printed on the card—a value
of 2 is different than a value of 02. Do not
include the field, even with a blank value, if
the card is not a Maestro (UK Domestic)
card.
FDC Nashville
Global and
FDMS South:
String (See
description)
All other
processors:
String (4)
Create (see
description)
String (5)
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
43
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
card_startMonth
Month of the start of the Maestro (UK
Domestic) card validity period. The card
might or might not have a start date printed
on it; the field is required if the card has a
start date. Do not include the field, even
with a blank value, if the card is not a
Maestro (UK Domestic) card.
Create (see
description)
Integer (2)
Update (O)
Format: MM
Possible values: 01 to 12.
card_startYear
Year of the start of the Maestro (UK
Domestic) card validity period. The card
might or might not have a start date printed
on it; the field is required if the card has a
start date. Do not include the field, even
with a blank value, if the card is not a
Maestro (UK Domestic) card.
Create (see
description)
Integer (4)
Update (O)
Format: YYYY
check_accountNumber
Checking account number.
Create (R for
eCheck
payments)
String (17)
Update (O)
check_accountType
check_bankTransitNumber
Checking account type. Possible values:

C: checking

S: savings (USD only)

X: corporate checking (USD only)
Bank routing number. This value is also
known as the transit number.
Create (R for
eCheck
payments)
String (1)
Update (O)
Create R for
eCheck
payments)
String (9)
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
44
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
check_secCode
Important This field is required if your
processor is TeleCheck.
Create (R)
String (3)
Update (O)
Code that specifies the authorization
method for the transaction. Possible values:

CCD: Corporate cash disbursement—
charge or credit to a business checking
account. You can use one-time or
recurring CCD transactions to transfer
funds to or from a corporate entity.

PPD: Prearranged payment and deposit
entry—charge or credit to a personal
checking or savings account. You can
originate a PPD entry only when the
payment and deposit terms between you
and the customer are prearranged. A
written authorization from the customer is
required for one-time transactions.

TEL: Telephone-initiated entry—one-time
charge to a personal checking or savings
account. You can originate a TEL entry
only when there is a business
relationship between you and the
customer or when the customer initiates
a telephone call to you. For a TEL entry,
you must obtain a payment authorization
from the customer over the telephone.

WEB: Internet-initiated entry—charge to
a personal checking or savings account.
You can originate a one-time or recurring
WEB entry when the customer initiates
the transaction over the Internet. For a
WEB entry, you must obtain payment
authorization from the customer over the
Internet.
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
45
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
decisionManager_enabled
Indicates whether to use Smart
Authorization for a customer profile.
Create (O)
String (5)
Create (O)
String (5)
Use this field only if you are using Smart
Authorization and are configured to use
automatic preauthorizations as described in
"Automatically Preauthorizing an Account,"
page 20. Also see "Supported Processors
and Payment Methods," page 12.
If you account is enabled for Smart
Authorization, Smart Authorization will be
used on the preauthorization that occurs
before the customer profile is created. You
can use this field to turn off Smart
Authorization for the preauthorization for
this specific customer profile. Possible
values:
ignoreCardExpiration

false: Do not use Smart Authorization for
this customer profile.

true (default): Use Smart Authorization
for this customer profile. Decision
Manager Developer Guide Using the
Simple Order API (PDF | HMTL)
Indicates whether to ignore a card
expiration date when creating a
subscription.
Possible values:

false: Do not ignore the card expiration
date.

true: Ignore the card expiration date.
Note If set to true, the
paySubscriptionCreateService_
disableAutoAuth field must also be set to
true.
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
46
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
item_0_unitPrice
Use this field or the purchaseTotals_
grandTotalAmount field to specify the
amount for a setup fee or for a manual
preauthorization. These features are not
available for all payment methods. See ,
"Charging a Setup Fee," page 19, and
"Manually Preauthorizing an Account,"
page 21.
Create (see
description)
String (15)
Four fields that you can use to store
information. These values are displayed on
the Subscription Transaction Details
page on the Business Center. To
understand the different kinds of data
storage fields see "Optional Data Storage,"
page 31.
Create (O)
merchantDefinedData_field1
merchantDefinedData_field2
merchantDefinedData_field3
merchantDefinedData_field4
Update (O)
String (255)
Update (O)
Warning Merchant-defined data fields are
not intended to and MUST NOT be used to
capture personally identifying information.
Accordingly, merchants are prohibited from
capturing, obtaining, and/or transmitting any
personally identifying information in or via
the merchant-defined data fields.
Personally identifying information includes,
but is not limited to, card number, bank
account number, social security number,
driver's license number, state-issued
identification number, passport number, and
card verification numbers (CVV, CVC2,
CVV2, CID, CVN). In the event
CyberSource discovers that a merchant is
capturing and/or transmitting personally
identifying information via the merchantdefined data fields, whether or not
intentionally, CyberSource WILL
immediately suspend the merchant's
account, which will result in a rejection of
any and all transaction requests submitted
by the merchant after the point of
suspension.
Note If you are creating a customer profile
based on an existing transaction, the
merchant-defined data fields do not get
transferred to the new customer profile.
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
47
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
merchantID
Your CyberSource merchant ID.
Required for all
services
String (30)
merchantReferenceCode
Merchant-generated order reference or
tracking number.
Required for all
services
String (50)
merchantSecureData_field1
Storage fields for any type of data. The only
validation performed on these fields is a
size check. The data is encrypted before it
is stored in the database. To understand the
different kinds of data storage fields see
"Optional Data Storage," page 31.
Create (O)
String (100)
Storage field for any type of data. The only
validation performed on this field is a size
check. The data is encrypted before it is
stored in the database. To understand the
different kinds of data storage fields see
"Optional Data Storage," page 31.
Create (O)
merchantSecureData_field2
merchantSecureData_field3
merchantSecureData_field4
Update (O)
String (2K)
Update (O)
Note The maximum number of characters
allowed is 2071.
paySubscriptionCreateService
_disableAutoAuth
paySubscriptionCreateService
_paymentRequestID
Indicates whether to turn off the
preauthorization check when creating this
customer profile, as described in "Optional
Data Storage," page 31. Use this field if
your CyberSource account is configured for
automatic preauthorizations but for this
specific customer profile you want to
override that setting. Possible values:

false: No, go ahead and perform the
preauthorization for this customer profile.

true: Yes, turn off the preauthorization
check for this customer profile.
The requestID value returned from a
previous request for a credit card
authorization. This value links the previous
request to the current follow-on request.
Create (O)
String (5)
Create (see
description)
String (26)
Create (R)
String (5)
Important This field is required when
converting an existing authorization to a
customer profile.
purchaseTotals_currency
Currency used by the customer.
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
48
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
purchaseTotals_
grandTotalAmount
Use this field or item_0_unitPrice to
specify the amount for a setup fee or for a
manual preauthorization. These features
are not available for all payment methods.
See "Validating a Customer Profile,"
page 19.
Create (see
description)
String (15)
recurringSubscriptionInfo_
amount
Amount of the customer profile payments.
This value can be 0.
Create (O)
recurringSubscriptionInfo_
billPayment
Flag that indicates that this is a payment for
a bill or for an existing contractual loan. See
"Visa Bill Payment Program," page 32. This
value is case sensitive. Possible values:
Create (O)
recurringSubscriptionInfo_
frequency

false (default): Not a bill payment or loan
payment.

true: Bill payment or loan payment.
Frequency of payments for the customer
profile.
Update (O)
String (15)
Update (O)
String (1)
Update (O)
Create (R)
String (20)
String (26)
Value: on-demand.
recurringSubscriptionInfo_
subscriptionID
Value that identifies the customer profile for
which the service is being requested. This
value was sent to you when the customer
profile was created.
Update (R)
shipTo_city
City of the shipping address.
Create (O)
Retrieve (R)
String (50)
Update (O)
shipTo_country
shipTo_firstName
shipTo_lastName
Country code for the shipping address. Use
the two-character ISO country codes.
Create (O)
First name of the person receiving the
product.
Create (O)
Last name of the person receiving the
product.
Create (O)
String (2)
Update (O)
String (60)
Update (O)
String (60)
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
49
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
shipTo_phoneNumber
Phone number of the person receiving the
product. When creating a customer profile,
the requirements depend on the payment
method:
Create (see
description)
String (15)
shipTo_postalCode

Credit cards—optional.

Electronic checks—contact your
payment processor representative to find
out if this field is required or optional.
Postal code for the shipping address. The
postal code must consist of 5 to 9 digits.
Update (see
description)
Create (O)
String (10)
Update (O)
If the billing country is the U.S., the 9-digit
postal code must follow this format:
[5 digits][dash][4 digits]
Example: 12345-6789
If the billing country is Canada, the 6-digit
postal code must follow this format:
[alpha][numeric][alpha][space]
[numeric][alpha][numeric]
Example: A1B 2C3
If the postal code for the shipping address is
not included in the request message,
CyberSource uses the postal code for the
billing address. If the postal code for the
billing address is not included in the request
message, the postal code for the shipping
address is required.
shipTo_state
shipTo_street1
shipTo_street2
State or province in the shipping address.
Use the two-character ISO state and
province code.
Create (O)
First line of the street address in the
shipping address.
Create (O)
Second line of the street address in the
shipping address.
Create (O)
String (2)
Update (O)
String (60)
Update (O)
String (60)
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
50
Appendix A
Table 7
API Fields
Request Fields (Continued)
Field Name
Description
Used By &
Required (R)/
Optional (O)
Data Type &
Length
subscription_paymentMethod
Method of payment. See "Supported
Processors and Payment Methods,"
page 12.
Create (see
description)
String (20)
Update (O)
Possible values:
subscription_title

card (default when creating a customer
profile)

check

other
Name or title for the customer profile.
Create (O)
String (60)
Update (O)
1. This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date.
See "Relaxed Requirements for Address Data and Expiration Date," page 18. Important It is your responsibility to determine
whether a field is required for the transaction you are requesting.
Reply Fields
Table 8
Reply Fields
Field Name
Description
Returned by
Data Type &
Length
ccAuthReply_amount
Amount that was authorized.
Create
String (15)
ccAuthReply_
authorizationCode
Authorization code. Returned only when the
processor returns this value. For encoded
account numbers and zero amount
authorizations, see the Credit Card
Services User Guide (PDF | HTML) (PDF |
HTML).
Create
String (7)
ccAuthReply_
authorizationDateTime
Time of authorization.
Create
String (20)
ccAuthReply_avsCode
AVS results. See "AVS and CVN Codes,"
page 62.
Create
String (1)
ccAuthReply_avsCodeRaw
AVS result code sent directly from the
processor. See "AVS and CVN Codes,"
page 62.
Create
String (1)
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
51
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
ccAuthReply_
processorResponse
For most processors, this is the error
message sent directly from the bank.
Returned only when the processor returns
this value.
Create
String (10)
Important Do not use this value to
evaluate the result of the transaction.
ccAuthReply_reasonCode
Numeric value corresponding to the result
of the authorization request. See "Reason
Codes," page 59.
Create
Integer (5)
ccAuthReply_reconciliationID
Reference number for the transaction. This
value is not returned for all processors.
Create
String (60)
See Getting Started with CyberSource
Essentials (PDF | HTML) for information
about order tracking and reconciliation.
ccCaptureReply_amount
Amount that was captured.
Create
String (15)
ccCaptureReply_reasonCode
Numeric value corresponding to the result
of the capture request. See "Reason
Codes," page 59.
Create
Integer (5)
ccCaptureReply_
reconciliationID
Reference number for the transaction. This
value is not returned for all processors.
Create
String (60)
See Getting Started with CyberSource
Essentials (PDF | HTML) for information
about order tracking and reconciliation.
ccCaptureReply_
requestDateTime
Time of capture.
Create
String (20)
decision
Summarizes the overall results for the
request. Possible values:
All services
String (6)

ACCEPT

ERROR

REJECT
invalidField_0...N
Fields in the request that contained invalid
values. These reply fields are included as
an aid to software developers only. Do not
use these fields to communicate with
customers.
All services
String (100)
merchantReference
Code
Order reference or tracking number that you
provided in the request.
All services
String (50)
missingField_0...N
Required fields that were missing from the
request. These reply fields are included as
an aid to software developers only. Do not
use these fields to communicate with
customers.
All services
String (100)
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
52
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscriptionCreate
Reply_reasonCode
Numeric value corresponding to the result
of the service request. See "Reason
Codes," page 59.
Create
Integer (5)
paySubscriptionCreate
Reply_subscriptionID
Identifier for the customer profile.
Create
String (26)
paySubscriptionDelete
Reply_reasonCode
Numeric value corresponding to the result
of the service request. See "Reason
Codes," page 59.
Delete
Integer (5)
paySubscriptionDelete
Reply_subscriptionID
Identifier for the customer profile.
Delete
String (26)
paySubscription
RetrieveReply_
merchantDefinedData
Field1
Four fields for storing information. To
understand the kinds of data storage fields
see "Optional Data Storage," page 31.
Retrieve
String (64)
Data that was encrypted. CyberSource
decrypts the data before returning it. To
understand the different kinds of data
storage fields see "Optional Data Storage,"
page 31.
Retrieve
String (100)
paySubscription
RetrieveReply_
_postalCode
Postal code of the billing address.
Retrieve
String (10)
paySubscription
RetrieveReply_approval
Required
This field is not meaningful for customer
profiles.
Retrieve
String (5)
paySubscription
RetrieveReply_
merchantDefinedData
Field2
paySubscription
RetrieveReply_
merchantDefinedData
Field3
paySubscription
RetrieveReply_
merchantDefinedData
Field4
paySubscription
RetrieveReply_
merchantSecureData
Field1
paySubscription
RetrieveReply_
merchantSecureData
Field2
paySubscription
RetrieveReply_
merchantSecureData
Field3
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
53
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscription
RetrieveReply_
automaticRenew
This field is not meaningful for customer
profiles.
Retrieve
String (5)
paySubscription
RetrieveReply_bill
Payment
Indicates whether the payments for this
customer profile are for the Visa Bill
Payment program. Possible values:
Retrieve
String (1)

N (default): Not a Visa Bill Payment.

Y: Visa Bill Payment.
See "Visa Bill Payment Program," page 32.
paySubscription
RetrieveReply_card
AccountNumber
Card account number.
Retrieve
String (20)
paySubscription
RetrieveReply_card
ExpirationMonth
Expiration month for the card.
Retrieve
Integer (2)
paySubscription
RetrieveReply_card
ExpirationYear
Expiration year for the card.
Retrieve
Integer (4)
paySubscription
RetrieveReply_card
IssueNumber
Issue number for the Maestro (UK
Domestic) card.
Retrieve
String (5)
paySubscription
RetrieveReply_card
StartMonth
Start month for the Maestro (UK Domestic)
card.
Retrieve
Integer (2)
paySubscription
RetrieveReply_card
StartYear
Start year for the Maestro (UK Domestic)
card.
Retrieve
Integer (4)
paySubscription
RetrieveReply_card
Type
Card type.
Retrieve
String (3)
paySubscription
RetrieveReply_check
AccountNumber
Bank account number.
Retrieve
Numeric (17)
paySubscription
RetrieveReply_check
AccountType
Account type. Possible values:
Retrieve
String (1)
Retrieve
Numeric (32)
paySubscription
RetrieveReply_check
AuthenticateID
Format: MM
Format: YYYY
Format: MM
Format: YYYY

C: checking

S: savings (USD only)

X: corporate checking (USD only)
Identification number returned when an
Authenticate request is processed and
returned in subsequent monetary
transactions.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
54
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscription
RetrieveReply_check
BankTransitNumber
Bank routing number.
Retrieve
Numeric (9)
paySubscription
RetrieveReply_checkSecCode
Code that specifies the authorization
method for the transaction. Possible values:
Retrieve
String (3)

CCD: Corporate cash disbursement—A
charge or credit against a business
checking account. You can use one-time
or recurring CCD transactions to transfer
funds to or from a corporate entity. A
standing authorization is required for
recurring transactions.

PPD: Prearranged payment and deposit
entry—A charge or credit against a
personal checking or savings account.
You can originate a PPD entry only when
the payment and deposit terms between
you and the customer are prearranged. A
written authorization from the customer is
required for one-time transactions and a
written standing authorization is required
for recurring transactions.

TEL: Telephone-initiated entry—A onetime charge against a personal checking
or savings account. You can originate a
TEL entry only when there is a business
relationship between you and the
customer or when the customer initiates
a telephone call to you. For a TEL entry,
you must obtain a payment authorization
from the customer over the telephone.
There is no recurring billing option for
TEL.

WEB: Internet-initiated entry—A charge
against a personal checking or savings
account. You can originate a one-time or
recurring WEB entry when the customer
initiates the transaction over the Internet.
For a WEB entry, you must obtain
payment authorization from the customer
over the Internet.
paySubscription
RetrieveReply_city
City of the customer’s address.
Retrieve
String (50)
paySubscription
RetrieveReply_
comments
Comments that you included for the
customer profile.
Retrieve
String (255)
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
55
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscription
RetrieveReply_
companyName
Name of the customer’s company.
Retrieve
String (40)
paySubscription
RetrieveReply_companyTaxID
Company tax identifier.
Retrieve
Numeric (9)
paySubscription
RetrieveReply_country
Country code for the billing address. Use
the two-character ISO codes.
Retrieve
String (2)
paySubscription
RetrieveReply_currency
Currency used by the customer.
Retrieve
String (5)
paySubscription
RetrieveReply_
customerAccountID
Your identifier for the customer.
Retrieve
String (50)
paySubscription
RetrieveReply_dateOfBirth
Date of birth of the customer.
Retrieve
String (10)
paySubscription
RetrieveReply_
driversLicenseNumber
Driver’s license number of the customer.
Retrieve
String (30)
paySubscription
RetrieveReply_
driversLicenseState
State or province in which the customer’s
driver’s license was issued.
Retrieve
String (2)
paySubscription
RetrieveReply_email
Customer’s email address.
Retrieve
String (255)
paySubscription
RetrieveReply_endDate
This field is not meaningful for customer
profiles.
Retrieve
String (8)
paySubscription
RetrieveReply_first
Name
Customer first name.
Retrieve
String (60)
paySubscription
RetrieveReply_
frequency
Frequency of payments for the customer
profile. Possible value:
Retrieve
String (20)
Format: YYYY-MM-DD or YYYYMMDD.

on-demand: No payment schedule
paySubscription
RetrieveReply_last
Name
Customer last name.
Retrieve
String (60)
paySubscription
RetrieveReply_
merchantReference
Code
Merchant-generated order reference or
tracking number.
Retrieve
String (50)
paySubscription
RetrieveReply_
merchantSecureData
Field4
Data that was encrypted. CyberSource
decrypts the data before returning it. To
understand the different kinds of data
storage fields see "Optional Data Storage,"
page 31.
Retrieve
String (2048)
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
56
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscription
RetrieveReply_
merchantSecureData
Field4
Data that was encrypted. CyberSource
decrypts the data before returning it. See
"Optional Data Storage," page 31.
Retrieve
String (2k)
paySubscription
RetrieveReply_owner
MerchantID
CyberSource merchant ID that was used to
create the customer profile for which the
service was requested. This field is returned
only if you are using profile sharing and only
if you requested this service for a customer
profile that was created with a CyberSource
merchant ID for which sharing is enabled.
See "Customer Profile Sharing," page 32.
Retrieve
String (30)
paySubscription
RetrieveReply_
phoneNumber
Customer’s phone number.
Retrieve
String (20)
paySubscription
RetrieveReply_reason
Code
Numeric value corresponding to the result
of the service request. See "Reason
Codes," page 59.
Retrieve
Integer (5)
paySubscription
RetrieveReply_
recurringAmount
Payment amount for the customer profile.
Retrieve
String (15)
paySubscription
RetrieveReply_setup
Amount
Amount of the setup fee.
Retrieve
String (15)
paySubscription
RetrieveReply_shipTo
City
City of the shipping address.
Retrieve
String (50)
paySubscription
RetrieveReply_shipTo
Company
Name of the company that is receiving the
product.
Retrieve
String (60)
paySubscription
RetrieveReply_shipTo
Country
Country code for the shipping address. Use
the two-character ISO codes.
Retrieve
String (2)
paySubscription
RetrieveReply_shipTo
FirstName
First name of the person receiving the
product.
Retrieve
String (60)
paySubscription
RetrieveReply_shipTo
LastName
Last name of the person receiving the
product.
Retrieve
String (60)
paySubscription
RetrieveReply_shipTo
PostalCode
Postal code in the shipping address.
Retrieve
String (10)
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
57
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscription
RetrieveReply_shipTo
State
State or province of shipping address. Use
the two-character ISO state and province
codes.
Retrieve
String (2)
paySubscription
RetrieveReply_shipTo
Street1
First line of the shipping address.
Retrieve
String (60)
paySubscription
RetrieveReply_shipTo
Street2
Second line of the shipping address.
Retrieve
String (60)
paySubscription
RetrieveReply_start
Date
This field is not meaningful for customer
profiles.
Retrieve
String (8)
paySubscription
RetrieveReply_state
State or province of billing address. Use the
two-character ISO state and province
codes.
Retrieve
String (2)
paySubscription
RetrieveReply_status
Status of the customer profile. Possible
values:
Retrieve
String (9)

Cancelled: The customer profile has
been cancelled.

Current: The customer profile is active.

Superseded: The profile ID for the
customer profile has been superseded
with a new profile ID.
paySubscription
RetrieveReply_subscriptionID
Identifier for the customer profile.
Retrieve
String
(16 or 22)
paySubscription
RetrieveReply_
subscriptionIDNew
Identifier for the customer profile.
Retrieve
String (16)
Note This 16-digit profile ID supersedes
the previous profile ID for the same
customer profile.
paySubscription
RetrieveReply_title
Name or title for the customer profile.
Retrieve
String (60)
paySubscription
UpdateReply_owner
MerchantID
CyberSource merchant ID that was used to
create the customer profile for which the
service was requested. This field is returned
only if you are using profile sharing and only
if you requested this service for a customer
profile that was created with a CyberSource
merchant ID for which sharing is enabled.
See "Customer Profile Sharing," page 32.
Update
String (30)
paySubscriptionUpdate
Reply_reasonCode
Numeric value corresponding to the result
of the service request. See "Reason
Codes," page 59.
Update
Integer (5)
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
58
Appendix A
Table 8
API Fields
Reply Fields (Continued)
Field Name
Description
Returned by
Data Type &
Length
paySubscriptionUpdate
Reply_subscriptionID
Identifier for the customer profile.
Update
String
(16 or 22)
paySubscription
UpdateReply_
subscriptionIDNew
Identifier for the customer profile.
Update
String (16)
Note This 16-digit profile ID supersedes
the previous profile ID for the same
customer profile.
reasonCode
Numeric value corresponding to the result
of the entire request. See "Reason Codes,"
page 59.
All services
Integer (5)
requestID
Identifier for the request.
All services
String (26)
requestToken
Request token data created by
CyberSource for each reply. The field is an
encoded string that contains no confidential
information, such as an account or card
verification number.
All Services
String (256)
Reason Codes
The following table describes the reason codes returned by the Simple Order API for
customer profiles. For a discussion of replies, decisions, and reason codes, see the
information about handling replies in Getting Started with CyberSource Essentials (PDF |
HTML).
Because CyberSource can add reply fields and reason codes at any time, you
must:
Important
Note

Parse the reply data according to the names of the fields instead of their
order in the reply. For more information on parsing reply fields, see the
documentation for your client.

Program your error handler to use the decision field to determine the
result if it receives a reason code that it does not recognize.
If your request includes other CyberSource services such as authorization or
capture, the reply will include reason codes that pertain to those services. For
more information, see the documentation for those services.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
59
Appendix A
Table 9
API Fields
Reason Codes for the Simple Order API
Reason
Code
Description
100
Successful transaction.
101
Missing required fields.
Possible action: See the reply fields missingField_0...N for which fields are
missing. Resend the request with the complete information.
102
Invalid data.
Possible action: See the reply fields invalidField_0...N for which fields are
invalid. Resend the request with the correct information.
110
Partial amount approved.
Possible action: See "Supported Processors and Payment Methods," page 12.
150
General system failure.
See the documentation for your CyberSource client for information about how
to handle retries in the case of system errors.
151
The request was received but there was a server timeout. This error does not
include timeouts between the client and the server.
To avoid duplicating the transaction, do not resend the request until you have
reviewed the transaction status at the Business Center. See the documentation
for your CyberSource client for information about how to handle retries in the
case of system errors.
152
The request was received, but a service did not finish running in time.
To avoid duplicating the transaction, do not resend the request until you have
reviewed the transaction status at the Business Center. See the documentation
for your CyberSource client for information about how to handle retries in the
case of system errors.
200
The authorization request was approved by the issuing bank but declined by
CyberSource because it did not pass the AVS check.
Possible action: You can capture the authorization, but consider reviewing the
order for the possibility of fraud.
201
The issuing bank has questions about the request. You will not receive an
authorization code programmatically, but you can obtain one verbally by calling
the processor.
Call your processor to possibly receive a verbal authorization. For contact
phone numbers, refer to your merchant bank information.
202
Expired card.
Request a different card or other form of payment.
203
General decline of the card. No other information provided by the issuing bank.
Request a different card or other form of payment.
204
Insufficient funds in the account.
Request a different card or other form of payment.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
60
Appendix A
Table 9
API Fields
Reason Codes for the Simple Order API (Continued)
Reason
Code
Description
205
Stolen or lost card.
Refer the transaction to your customer support center for manual review.
207
Issuing bank unavailable.
Wait a few minutes and resend the request.
208
Inactive card or card not authorized for card-not-present transactions.
Request a different card or other form of payment.
209
American Express Card Identification Digits (CIDs) did not match.
Request a different card or other form of payment.
210
The card has reached the credit limit.
Request a different card or other form of payment.
211
Invalid card verification number.
Request a different card or other form of payment.
220
The processor declined the request based on a general issue with the
customer’s account.
Request a different form of payment.
221
The customer matched an entry on the processor’s negative file.
Review the order and contact the payment processor.
222
The customer’s bank account is frozen.
Review the order or request a different form of payment.
230
The authorization request was approved by the issuing bank but declined by
CyberSource because it did not pass the CVN check.
You can capture the authorization, but consider reviewing the order for the
possibility of fraud.
231
Invalid account number.
Request a different card or other form of payment.
232
The card type is not accepted by the payment processor.
Contact your merchant bank to confirm that your account is set up to receive
the card in question.
233
General decline by the processor.
Request a different card or other form of payment.
234
There is a problem with your CyberSource merchant configuration.
Do not resend the request. Contact Customer Support to correct the
configuration problem.
236
Processor failure.
Wait a few minutes and resend the request.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
61
Appendix A
Table 9
API Fields
Reason Codes for the Simple Order API (Continued)
Reason
Code
Description
240
The card type sent is invalid or does not correlate with the card number.
Confirm that the card type correlates with the card number specified in the
request, then resend the request.
250
The request was received, but there was a timeout at the payment processor.
To avoid duplicating the transaction, do not resend the request until you have
reviewed the transaction status at the Business Center.
AVS and CVN Codes
An issuing bank uses the AVS code to confirm that your customer is providing the correct
billing address. If the customer provides incorrect data, the transaction might be
fraudulent. The international and U.S. domestic Address Verification Service (AVS) codes
are the Visa standard AVS codes, except for codes 1 and 2, which are CyberSource AVS
codes. The standard AVS return codes for other types of credit cards (including American
Express cards) are mapped to the Visa standard codes.
Important
When you populate billing street address 1 and billing street address 2,
CyberSource through VisaNet concatenates the two values. If the
concatenated value exceeds 40 characters, CyberSource through VisaNet
truncates the value at 40 characters before sending it to Visa and the issuing
bank. Truncating this value affects AVS results and therefore might impact risk
decisions and chargebacks.
International AVS Codes
These codes are returned only for Visa cards issued outside the U.S.
Table 10
International AVS Codes
Code
Response
Description
B
Partial match
Street address matches, but postal code is not verified.
C
No match
Street address and postal code do not match.
D&M
Match
Street address and postal code match.
I
No match
Address is not verified.
P
Partial match
Postal code matches, but street address is not verified.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
62
Appendix A
API Fields
U.S. Domestic AVS Codes
Table 11
Domestic AVS Codes
Code
Response
Description
A
Partial match
Street address matches, but 5-digit and 9-digit postal codes do
not match.
B
Partial match
Street address matches, but postal code is not verified.
C
No match
Street address and postal code do not match.
D&M
Match
Street address and postal code match.
E
Invalid
AVS data is invalid, or AVS is not allowed for this card type.
F
Partial match
Card member’s name does not match, but billing postal code
matches. Returned only for the American Express card type.
G
Not supported.
H
Partial match
Card member’s name does not match, but street address and
postal code match. Returned only for the American Express
card type.
I
No match
Address not verified.
J
Match
Card member’s name, billing address, and postal code match.
Shipping information verified and chargeback protection
guaranteed through the Fraud Protection Program. Returned
only if you are registered to use AAV+ with the American
Express Phoenix processor.
K
Partial match
Card member’s name matches, but billing address and billing
postal code do not match. Returned only for the American
Express card type.
L
Partial match
Card member’s name and billing postal code match, but billing
address does not match. Returned only for the American
Express card type.
M
Match
Street address and postal code match.
N
No match
One of the following:

Street address and postal code do not match.

Card member’s name, street address, and postal code do not
match. Returned only for the American Express card type.
O
Partial match
Card member’s name and billing address match, but billing
postal code does not match. Returned only for the American
Express card type.
P
Partial match
Postal code matches, but street address not verified.
Q
Match
Card member’s name, billing address, and postal code match.
Shipping information verified but chargeback protection not
guaranteed (Standard program). Returned only if you are
registered to use AAV+ with the American Express Phoenix
processor.
R
System unavailable
System unavailable.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
63
Appendix A
Table 11
API Fields
Domestic AVS Codes (Continued)
Code
Response
Description
S
Not supported
U.S.-issuing bank does not support AVS.
T
Partial match
Card member’s name does not match, but street address
matches. Returned only for the American Express card type.
U
System unavailable
Address information unavailable for one of these reasons:

The U.S. bank does not support non-U.S. AVS.

The AVS in a U.S. bank is not functioning properly.
V
Match
Card member’s name, billing address, and billing postal code
match. Returned only for the American Express card type.
W
Partial match
Street address does not match, but 9-digit postal code matches.
X
Match
Street address and 9-digit postal code match.
Y
Match
Street address and 5-digit postal code match.
Z
Partial match
Street address does not match, but 5-digit postal code matches.
1
Not supported
AVS is not supported for this processor or card type.
2
Unrecognized
The processor returned an unrecognized value for the AVS
response.
3
Match
Address is confirmed. Returned only for PayPal Express
Checkout.
4
No match
Address is not confirmed. Returned only for PayPal Express
Checkout.
CVN Codes
Table 12
CVN Codes
Code
Description
D
The transaction was considered suspicious by the issuing bank.
I
The CVN failed the processor's data validation.
M
The CVN matched.
N
The CVN did not match.
P
The CVN was not processed by the processor for an unspecified reason.
S
The CVN is on the card but was not included in the request.
U
Card verification is not supported by the issuing bank.
X
Card verification is not supported by the card association.
1
Card verification is not supported for this processor or card type.
2
An unrecognized result code was returned by the processor for the card
verification response.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
64
Appendix A
Table 12
API Fields
CVN Codes (Continued)
Code
Description
3
No result code was returned by the processor.
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
65
APPENDIX
Examples
B
Name-Value Pair Examples
Creating a Customer Profile without a
Setup Fee
Example
Request: Creating a Customer Profile without a Setup Fee
billTo_firstName=John
billTo_lastName=Doe
billTo_street1=1295 Charleston Road
billTo_city=Mountain View
billTo_state=CA
billTo_postalCode=94043
billTo_country=US
[email protected]
purchaseTotals_currency=USD
card_accountNumber=4111111111111111
card_expirationMonth=12
card_expirationYear=2018
card_cardType=001
merchantID=demoID
merchantReferenceCode=1111
recurringSubscriptionInfo_frequency=on-demand
paySubscriptionCreateService_run=true
Example
Reply: Creating a Customer Profile without a Setup Fee
decision=ACCEPT
merchantReferenceCode=1111
paySubscriptionCreateReply_reasonCode=100
paySubscriptionCreateReply_subscriptionID=0000562489861111
purchaseTotals_currency=USD
reasonCode=100
requestID=3790672461500176056470
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
66
Appendix B
Examples
Creating a Customer Profile with a 5.00
Setup Fee
Example
Request: Creating a Customer Profile with a 5.00 Setup Fee
billTo_firstName=John
billTo_lastName=Doe
billTo_street1=1295 Charleston Road
billTo_city=Mountain View
billTo_state=CA
billTo_postalCode=94043
billTo_country=US
[email protected]
card_accountNumber=4111111111111111
card_expirationMonth=12
card_expirationYear=2018
card_cardType=001
merchantID=demoID
merchantReferenceCode=1111
purchaseTotals_grandTotalAmount=5.00
purchaseTotals_currency=USD
recurringSubscriptionInfo_frequency=on-demand
ccAuthService_run=true
ccCaptureService_run=true
paySubscriptionCreateService_run=true
Example
Reply: Creating a Customer Profile with a 5.00 Setup Fee
ccAuthReply_amount=5.00
ccAuthReply_authorizationCode=888888
ccAuthReply_authorizedDateTime=2013-09-13T12:35:21Z
ccAuthReply_avsCode=X
ccAuthReply_reasonCode=100
ccAuthReply_reconciliationID=40372550MLIKQ25D
ccCaptureReply_amount=5.00
ccCaptureReply_reasonCode=100
ccCaptureReply_reconciliationID=40372550MLIKQ25D
ccCaptureReply_requestDateTime=2013-09-13T12:35:21Z
decision=ACCEPT
merchantReferenceCode=1111
paySubscriptionCreateReply_reasonCode=100
paySubscriptionCreateReply_subscriptionID=0000562549841111
purchaseTotals_currency=USD
reasonCode=100
requestID=3790757213580176056470
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
67
Appendix B
Examples
Updating a Customer Profile
Updating a Card Account Number
Example
Request: Updating a Card Account Number
merchantID=demoID
merchantReferenceCode=0001
card_accountNumber=4111111111111112
card_expirationMonth=12
card_expirationYear=2018
card_cardType=001
recurringSubscriptionInfo_subscriptionID=0000562489861111
paySubscriptionUpdateService_run=true
Example
Reply: Updating a Card Account Number
merchantReferenceCode=0001
requestID=3790686238410176056470
decision=ACCEPT
reasonCode=100
paySubscriptionUpdateReply_ownerMerchantID=demoID
paySubscriptionUpdateReply_reasonCode=100
paySubscriptionUpdateReply_subscriptionIDNew=0000458489191112
Removing Card Expiration Dates
Example
Request: Removing Card Expiration Dates
merchantID=demoID
merchantReferenceCode=0001
card_expirationMonth=
card_expirationYear=
recurringSubscriptionInfo_subscriptionID=0000562489861111
paySubscriptionUpdateService_run=true
Example
Reply: removing Card Expiration Dates
merchantReferenceCode=0001
requestID=3790686238410176056470
decision=ACCEPT
reasonCode=100
paySubscriptionUpdateReply_ownerMerchantID=demoID
paySubscriptionUpdateReply_reasonCode=100
paySubscriptionUpdateReply_subscriptionIDNew=0000458489191112
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
68
Appendix B
Examples
Retrieving a Customer Profile
Example
Request: Retrieving a Customer Profile
merchantID=demoID
merchantReferenceCode=1111
recurringSubscriptionInfo_subscriptionID=0000562489861111
paySubscriptionRetrieveService_run=true
Example
Reply: Retrieving a Customer Profile
merchantReferenceCode=1111
requestID=3790689247280176056442
decision=ACCEPT
reasonCode=100
paySubscriptionRetrieveReply_reasonCode=100
paySubscriptionRetrieveReply_approvalRequired=false
paySubscriptionRetrieveReply_automaticRenew=false
paySubscriptionRetrieveReply_cardAccountNumber=411111XXXXXX1111
paySubscriptionRetrieveReply_cardExpirationMonth=12
paySubscriptionRetrieveReply_cardExpirationYear=2018
paySubscriptionRetrieveReply_cardType=001
paySubscriptionRetrieveReply_city=The City
paySubscriptionRetrieveReply_country=US
paySubscriptionRetrieveReply_currency=USD
[email protected]
paySubscriptionRetrieveReply_firstName=JOHN
paySubscriptionRetrieveReply_frequency=on-demand
paySubscriptionRetrieveReply_lastName=DOE
paySubscriptionRetrieveReply_paymentMethod=credit card
paySubscriptionRetrieveReply_paymentsRemaining=0
paySubscriptionRetrieveReply_postalCode=94045
paySubscriptionRetrieveReply_state=CA
paySubscriptionRetrieveReply_status=CURRENT
paySubscriptionRetrieveReply_street1=123 The Street
paySubscriptionRetrieveReply_subscriptionID=0000562489861111
paySubscriptionRetrieveReply_ownerMerchantID=infodev1
Deleting a Customer Profile
Example
Request: Deleting a Customer Profile
merchantID=demoID
merchantReferenceCode=1111
recurringSubscriptionInfo_subscriptionID=0000562489861111
paySubscriptionDeleteService_run=true
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
69
Appendix B
Example
Examples
Reply: Deleting a Customer Profile
decision=ACCEPT
merchantReferenceCode=1111
paySubscriptionDeleteReply_reasonCode=100
paySubscriptionDeleteReply_subscriptionID=0000562489861111
reasonCode=100
requestID=3790698033130176056442
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
70
Appendix B
Examples
XML Examples
The XML schema for the Simple Order API is at:
https://ics2wsa.ic3.com/commerce/1.x/transactionProcessor
Creating a Customer Profile without a
Setup Fee
Example
Request: Creating a Customer Profile without a Setup Fee
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.92">
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Road</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<email>[email protected]</email>
</billTo>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<merchantID>infodev</merchantID>
<merchantReferenceCode>14344</merchantReferenceCode>
<recurringSubscriptionInfo>
<frequency>on-demand</frequency>
</recurringSubscriptionInfo>
<paySubscriptionCreateService run="true"/>
</requestMessage>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
71
Appendix B
Example
Examples
Reply: Creating a Customer Profile without a Setup Fee
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.92">
<c:ccAuthReply>
<c:amount>0.00</c:amount>
<c:authorizationCode>888888</c:authorizationCode>
<c:authorizationDateTime>2013-09-13T10:14:06Z</c:authorizationDateTime>
<c:avsCode>X</c:avsCode>
<c:reasonCode>100</c:reasonCode>
<c:reconciliationID>40368790XLILGOLX</c:reconciliationID>
</c:ccAuthReply>
<c:merchantReferenceCode>1111</c:merchantReferenceCode>
<c:requestID>3790672461500176056470</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:paySubscriptionCreateReply>
<c:reasonCode>100</c:reasonCode>
<c:subscriptionID>0000562489861111</c:subscriptionID>
</c:paySubscriptionCreateReply>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
</c:replyMessage>
Creating a Customer Profile with a 5.00
Setup Fee
Example
Request: Creating a Customer Profile with a 5.00 Setup Fee
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.92">
<merchantID>infodev</merchantID>
<merchantReferenceCode>14344</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Road</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<email>[email protected]</email>
<phoneNumber>650-965-6000</phoneNumber>
</billTo>
<purchaseTotals>
<currency>USD</currency>
<grandTotalAmount>5.00</grandTotalAmount>
</purchaseTotals>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
72
Appendix B
Examples
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<recurringSubscriptionInfo>
<frequency>on-demand</frequency>
</recurringSubscriptionInfo>
<paySubscriptionCreateService run="true"/>
<ccAuthService run="true"/>
<ccCaptureService run="true"/>
</requestMessage>
Example
Reply: Creating a Customer Profile with a 5.00 Setup Fee
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.92">
<c:ccAuthReply>
<c:amount>5.00</c:amount>
<c:authorizationCode>888888</c:authorizationCode>
<c:authorizationDateTime>2013-09-13T10:14:06Z</c:authorizationDateTime>
<c:avsCode>X</c:avsCode>
<c:reasonCode>100</c:reasonCode>
<c:reconciliationID>40368790XLILGOLX</c:reconciliationID>
</c:ccAuthReply>
<c:ccCaptureReply>
<c:amount>5.00</c:amount>
<c:requestDateTime>2013-09-13T10:14:06Z</c:requestDateTime>
<c:reasonCode>100</c:reasonCode>
<c:reconciliationID>40368790XLILGOLX</c:reconciliationID>
</c:ccCaptureReply>
<c:merchantReferenceCode>1111</c:merchantReferenceCode>
<c:requestID>3790672461500176056470</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:paySubscriptionCreateReply>
<c:reasonCode>100</c:reasonCode>
<c:subscriptionID>0000562489861111</c:subscriptionID>
</c:paySubscriptionCreateReply>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
</c:replyMessage>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
73
Appendix B
Examples
Updating a Customer Profile
Updating a Card Account Number
Example
Request: Updating a Customer Profile (Card Details)
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.92">
<merchantID>infodev</merchantID>
<merchantReferenceCode>14344</merchantReferenceCode>
<card>
<accountNumber>4111111111111234</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<recurringSubscriptionInfo>
<subscriptionID>0000562489861111</subscriptionID>
</recurringSubscriptionInfo>
<paySubscriptionUpdateService run="true"/>
</requestMessage>
Example
Reply: Updating a Customer Profile (Card Details)
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.92">
<c:paySubscriptionUpdateReply>
<c:ownerMerchantID>infodev1</c:ownerMerchantID>
<c:reasonCode>100</c:reasonCode>
<c:subscriptionID>0000562489861111</c:subscriptionID>
</c:paySubscriptionUpdateReply>
<c:requestID>3790672461500176056470</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:merchantReferenceCode>1111</c:merchantReferenceCode>
</c:replyMessage>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
74
Appendix B
Examples
Removing Card Expiration Dates
Example
Request: Removing Card Expiration Dates
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.92">
<merchantID>infodev</merchantID>
<merchantReferenceCode>14344</merchantReferenceCode>
<card>
<expirationMonth></expirationMonth>
<expirationYear></expirationYear>
</card>
<recurringSubscriptionInfo>
<subscriptionID>0000562489861111</subscriptionID>
</recurringSubscriptionInfo>
<paySubscriptionUpdateService run="true"/>
</requestMessage>
Example
Reply: Removing Card Expiration Dates
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.92">
<c:paySubscriptionUpdateReply>
<c:ownerMerchantID>infodev1</c:ownerMerchantID>
<c:reasonCode>100</c:reasonCode>
<c:subscriptionID>0000562489861111</c:subscriptionID>
</c:paySubscriptionUpdateReply>
<c:requestID>3790672461500176056470</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:merchantReferenceCode>1111</c:merchantReferenceCode>
</c:replyMessage>
Retrieving a Customer Profile
Example
Request: Retrieving a Customer Profile
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.92">
<merchantID>infodev</merchantID>
<merchantReferenceCode>14344</merchantReferenceCode>
<recurringSubscriptionInfo>
<subscriptionID>0000562489861111</subscriptionID>
</recurringSubscriptionInfo>
<paySubscriptionRetrieveService run="true"/>
</requestMessage>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
75
Appendix B
Example
Examples
Reply: Retrieving a Customer Profile
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.92">
<c:requestID>3790672461500176056470</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:merchantReferenceCode>1111</c:merchantReferenceCode>
<c:recurringSubscriptionRetrieveReply>
<c:approvalRequired>false</c:approvalRequired>
<c:automaticRenew>false</c:automaticRenew>
<c:cardAccountNumber>4111111111111111</c:cardAccountNumber>
<c:cardExpirationMonth>12</c:cardExpirationMonth>
<c:cardExpirationYear>2015</c:cardExpirationYear>
<c:cardType>001</c:cardType>
<c:city>The City</c:city>
<c:country>US</c:country>
<c:currency>USD</c:currency>
<c:email>[email protected]</c:email>
<c:firstName>John</c:firstName>
<c:frequency>on-demand</c:frequency>
<c:lastName>Doe</c:lastName>
<c:ownerMerchantID>infodev1</c:ownerMerchantID>
<c:paymentMethod>credit card</c:paymentMethod>
<c:paymentsRemaining>0</c:paymentsRemaining>
<c:postalCode>94045</c:postalCode>
<c:reasonCode>100</c:reasonCode>
<c:state>CA</c:state>
<c:status>CURRENT</c:status>
<c:street1>123 The Street</c:street1>
<c:subscriptionID>0000562489861111</c:subscriptionID>
</c:recurringSubscriptionRetrieveReply>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
</c:replyMessage>
Deleting a Customer Profile
Example
Request: Deleting a Customer Profile
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.92">
<merchantID>infodev</merchantID>
<merchantReferenceCode>14344</merchantReferenceCode>
<recurringSubscriptionInfo>
<subscriptionID>0000562489861111</subscriptionID>
</recurringSubscriptionInfo>
<paySubscriptionDeleteService run="true"/>
</requestMessage>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
76
Appendix B
Example
Examples
Reply: Deleting a Customer Profile
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.92">
<c:paySubscriptionDeleteReply>
<c:reasonCode>100</c:reasonCode>
<c:subscriptionID>0000562489861111</c:subscriptionID>
</c:paySubscriptionDeleteReply>
<c:requestID>3790672461500176056470</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:merchantReferenceCode>1111</c:merchantReferenceCode>
</c:replyMessage>
Payment Tokenization Using the Simple Order API for CyberSource Essentials | January 2016
77
">