Skip to content

Rules

person person
System Administrators and Issuer Addministrators
Access can also be granted to Business Admin and Helpdesk users at System Admin level.
Whether these users have read only or full access is determined by their Admins settings.

Reports tab

This section is used to set up and manage business rules and the sequence in which they are applied for Issuers that have rules functionality enabled.

The rules that can be applied are determined by whether the authentication server is remote or local. Authentication exemption rules and settings can be applied for local and remote authentication servers and registration enforcement rules can be applied for local authentication servers.

You can set up and maintain Issuer authentication exemption business rule settings for the local or remote ACS (CAAS). These business rules are configurable settings, which provide Issuers with control over the customer process during 3-D Secure transactions as described in the table below. Rules can be configured using 3-D Secure transaction parameters such as Transaction Amount, Merchant ID, Merchant Name, Acquirer BIN or Merchant Country. The sequence in which the rules are applied can be defined by setting Priority values for each rule.

Rule Management has the following tabs:

  • Registration - allows two pre-defined rules to be used for checking authentication requests processed or transparently authenticated by a local authentication server. The Rules are:

    • Amount Threshold

    • Merchant Blacklist

    These rules can be enabled, disabled and have their order of priority changed.

  • Authentication

    • Soft Launch List

    • Merchant Whitelist

    • Merchant Watchlist

    • Location Watchlist

    • Domestic & International Transaction Amount Threshold

    These rules can be enabled, disabled and have their order of priority changed.

  • Settings - used to set up transaction number and / or amount thresholds to be used for determining if authentication is to be initiated or bypassed. Also used to define the authentication response (PARes) to be sent for any transactions where authentication is bypassed.

Rules can be set to apply by default and not just for exceptions.

Registration

Rules > Rule Management > Registration

This section is used to set up and maintain settings for business rules that force customer registration. These business rules are configurable settings which provide issuers control over the customer process during 3-D Secure transactions.

These rules can be configured using 3-D Secure transaction parameters such as the Transaction Amount, Merchant ID, Merchant Name, Acquirer BIN or Merchant Country.

The sequence in which the rules are applied can be changed by setting a Priority for each rule.

RuleDescriptionParametersBehaviour
Amount ThresholdA threshold that determines if pre-registered cardholders are to be forced to opt-in to Activation During Shopping.Transaction amount (AUD or converted to AUD)Greater than or equal to threshold:
No Opt-Out option available on the ADS page, only cancel
Less than threshold:
Opt-Out option will be available on the ADS page Opt-Out - sets transaction status to 'A'
Merchant BlacklistMerchant criteria that initiate the authentication.Merchant Merchant ID Merchant name Acquirer BIN Merchant countryOn list:
No Opt-Out option available on the ADS page, only cancel Cancel - sets Transaction Status to 'N'.
Not on list:
Opt-Out option will be available on the ADS page Opt-Out - sets transaction status to 'A'

Use the following fields to view / edit the Rules:

  • If the required Issuer or an Issuer Group is not displayed, select it from the appropriate drop down list.

  • Click the Refresh button.

Note

These fields are not displayed if the user is assigned to a single issuer.

The following fields and links are displayed for each rule:

  • Select checkbox to be used in conjunction with the Enable and Disable buttons.

  • Rule Name link to the Rule Details page

  • Priority sequence in which the rules are applied, can be changed by clicking Move Up or Move Down

  • Status - Enabled, Disabled or Not Configured

Use the following steps to enable or disable a rule:

  • Choose one or more rules by clicking the Select checkbox adjacent to the Rule Name

  • Click the Enable or Disable button as appropriate.

    A confirmation message will be displayed.

Amount Threshold

Rules > Rule Management > Registration > Amount Threshold

The Amount Threshold rule allows an issuer to encourage pre-registered cardholders to register for 3-D Secure based on the value of the transaction.

When this rule is enabled, the cardholder is pre-registered and when they purchase from a 3-D Secure enabled merchant, if the value of the transaction is equal to or exceeds the threshold amount, the cardholder will be presented with the standard ADS page but will not be given the opportunity to Opt-Out. Instead, the cardholder will only be able to Cancel the transaction and the authentication result that will be returned to the merchant will be, N.

If the transaction is in a currency other than the one selected for the rule, a conversion will be made to convert the value of the transaction into the currency of the rule, so that the converted value can be compared with the threshold to determine the appropriate action.

Note

If currency conversion is not available, the default will be for registration to be enforced.

The following fields and links are displayed:

  • Select checkbox for selecting one or more sets of rules.

  • BIN links to the Edit Amount Threshold page.

  • Delete button used in conjunction with selected rules.

  • Links for Manage Exchange Rates and Add.

To manually create currency exchange values:

  • Click the Manage Exchange Rates link.

    The Manage Exchange Rate page is displayed.

To add Amount Threshold rules:

Rules > Force Registration > Amount Threshold > Add

  • Click the Add link.

    The Add Amount Threshold page is displayed.

Note

The Add link is disabled when a rule has been set for All BINs of the selected issuer.

To delete a rule:

  • Select the checkbox adjacent to the BIN and click the Delete button.

    Confirmation of the deletion is displayed.

To set transaction amount thresholds:

  • Issuer name is displayed and cannot be changed.

  • Select the BIN to be used for the threshold from the drop down list.

  • Enter an Amount for the threshold.

  • Select the default currency to be used for the domestic threshold from the Currency drop down list.

  • Click the Apply button to save changes.

    A confirmation message will be displayed.

Merchant Blacklist

The Merchant Blacklist rule allows an issuer to encourage pre-registered cardholders to register for 3-D Secure based on merchant related transaction parameters. If the attributes of the business rule match the merchant related transaction parameters, the cardholder will not be allowed to Opt-Out of the Activation During Shopping process and will only be able to cancel the transaction. Issuers can use any combination of Merchant ID, Merchant Name, Acquirer BIN and Merchant Country to create a rule to encourage cardholders to register.

If the cardholder cancels the transaction, the authentication result returned to the merchant will be an N.

When checking the Merchant details from a transaction against the Merchant Blacklist, the Merchant is considered to be a match if any of the Merchant details (Merchant ID, Merchant name, Acquirer BIN or Merchant country) from the PAReq match the corresponding details on the Blacklist.

You can set a maximum number of rules for the Merchant Blacklist, import a file of Merchant details or add individual Merchant details to the list, delete Merchant details and edit Merchant details.

Merchant Blacklist Details

Rules > Rule Management > Registration > Merchant Blacklist > Merchant Blacklist Search Results

You can add individual Merchant details or import a file of Merchant details to the list or select any Merchant details to delete or edit.

The following fields and links are displayed:

  • Maximum no of rules in blacklist (default is 50)

  • Select checkbox for selecting one or more sets of Merchant details

  • Delete button used in conjunction with selected Merchant details

  • Merchant ID, Merchant Name, Acquirer BIN and Merchant Country links to the Edit Merchant Blacklist page

  • Links for Add and Import

To change the number of rules permitted in the blacklist:

  • Enter the Maximum no of rules in blacklist.

  • Click the Apply button.

To add individual Merchant details:

  • Click the Add link.

    The Add Merchant Blacklist page is displayed.

To import a file of Merchant details:

  • Click the Import link.

    The Import Merchant Blacklist page is displayed.

Note

The supported file formats for uploading rule configurations are .csv and .xml. The following is an example of a sample .xml file:

<MerchantBlacklist>
    <Merchant>
        <Id>1</Id>
        <Name>hi</Name>
        <AcquirerBIN>412345</AcquirerBIN>
        <CountryCode>024</CountryCode>
    </Merchant>
    <Merchant>
        <Id>12134567890</Id>
        <Name>hi</Name>
        <AcquirerBIN>412345</AcquirerBIN>
    </Merchant>
</MerchantBlacklist>

To delete Merchant details:

  • Select the checkbox adjacent to the Merchant ID and click the Delete button.

    Confirmation of the deletion is displayed.

Edit Merchant Blacklist

Rules > Rule Management > Registration > Merchant Blacklist > Edit Merchant Blacklist

To edit the Merchant Blacklist:

  • Issuer name is displayed and cannot be changed.

  • Edit any of the Merchant fields:

    • Merchant ID

    • Merchant Name

    • Acquirer BIN

    • Merchant Country.

  • Click the Apply button. A confirmation message will be displayed.

When checking whether a transaction matches the Merchant Blacklist, the system will compare the Merchant ID, Merchant Name, Acquirer BIN and Merchant Country from the PAReq, with the values entered.

  • Click the Back button to return to the Merchant Blacklist.

Import Merchant Blacklist

Rules > Rule Management > Registration > Merchant Blacklist > Import Merchant Blacklist

This page is used to import a file of merchant Blacklist rules to add to the Merchant Blacklist. The format of the file should be CSV, with each record incorporating values for any of the required Merchant ID, Merchant Name, Acquirer BIN and Merchant Country fields necessary to define the rule.

Note

Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code>/< ISO 3166-1 country name>

For example:

008/Albania

024/Angola

036/Australia

To import a file of merchant watchlist rules:

  • Issuer name is displayed and cannot be changed.

  • Click the Choose File / Browse button adjacent to File name, to locate and select a file to import.

    The No file chosen message will be replaced with the name of the file to be imported.

    Note

    A maximum of 1000 records can be imported at one time.

  • Click the Apply button.

    A confirmation message will be displayed.

Authentication

Rules > Rule Management > Authentication

RuleDescriptionParametersIf on listIf not on list
Soft Launch ListPrimary Account Numbers that will not be allowed to bypass the authentication procedure.Cardholder: Primary Account NumberOther business rules applied in the specified sequence.Cardholder transparently authenticated. Transaction Status set to 'Y' or 'A', as configured under the Settings tab.
Merchant WhitelistMerchant criteria that allow the authentication procedure to be bypassed.Merchant: Merchant ID Merchant name Acquirer BIN Merchant countryCardholder transparently authenticated. Transaction Status set to 'Y' or 'A', as configured under the Settings tab.Other business rules applied in the specified sequence.
Merchant WatchlistMerchant criteria that initiate the authentication procedure.Merchant: Merchant ID Merchant name Acquirer BIN Merchant countryInitiates authentication procedure.Other business rules applied in the specified sequence.
Location WatchlistMerchant countries that initiate the authentication procedureMerchant country: Country / Currency codeInitiates authentication procedure.Other business rules applied in the specified sequence.
Domestic & International Transaction Amount ThresholdA threshold that determines if the authentication procedure is to be initiated or bypassed.
Domestic threshold used for the set default transaction purchase currency, otherwise, International threshold used.
Transaction amountGreater than or equal to threshold:
Initiates authentication procedure.
Less than threshold or currency not in file:
Cardholder transparently authenticated.
Transaction Status set to ‘Y’ or 'A', as configured under the Settings tab.
Stand-In TransactionA threshold that determines if the authentication procedure is to be bypassed when the remote authentication server (CAAS) cannot be contacted or is not responding at the Verify Registration (first message to CAAS) stage.Transaction amount (AUD or converted to AUD)Greater than or equal to Stand-in threshold:
Unable to authenticate Transaction Status set to ‘U’
Less than Stand-In threshold: Cardholder transparently authenticated.
Transaction Status set to ‘Y’ or 'A', as configured under the Settings tab.
  • Click the Rules tab, if it is not already selected.

Use the following fields to view / edit the Rules:

  • If the required Issuer or an Issuer Group is not displayed, select it from the appropriate drop down list.

  • Click the Refresh button.

    Note

    These fields are not displayed if the user is assigned to a single issuer.

The following fields and links are displayed for each rule:

  • Select checkbox to be used in conjunction with the Enable and Disable buttons.

  • Rule Name link to the Rule Details page

  • Once two or more rules are enabled, the Priority sequence in which the rules are applied can be changed by clicking Move Up or Move Down. Once Priority is customised, click Reset to Default, to reset the sequence in which the rules are applied back to the system default.

  • Status - Enabled, Disabled or Not Configured

To enable or disable a rule:

  • Choose one or more rules by clicking the Select checkbox adjacent to the Rule Name

  • Click the Enable or Disable button as appropriate.
    A confirmation message will be displayed.

Soft Launch List Rule

If the cardholder’s Primary Account Number is on the Soft Launch List, the authentication procedure will not be bypassed, and the other business rules will be applied in the specified sequence.

Warning

If the cardholder is not on the list, the cardholder will be considered to be transparently authenticated and transaction status will be set to Y or A, as configured under the Settings tab.

You can search for PANs in the Soft Launch List, import a file of PANs or add an individual PAN to the list and edit a PAN.

The first page in this section is Search Soft Launch List.

Search Soft Launch List

Rules > Rule Management > Soft Launch List > Search Soft Launch List

This page displays:

  • Issuer name = cannot be changed.

  • Search button to search for cardholder PANs already in the Soft Launch List.

  • Import button to import a list of PANs to add to the list

  • Add button to add an individual PAN to the list

    Note

    The supported file formats for uploading rule configurations are .csv and .xml.

To search for a cardholder PAN:

  • Enter a Primary Account Number and click the Search button. Leave the field blank to search for all PANs.

The Soft Launch List page is displayed.

Soft Launch List

Rules > Rule Management > Authentication > Soft Launch List > Soft Launch List Search Results

PANs are listed according to the search criteria you entered on the Search Soft Launch List page. You can add an individual PAN or import a list of PANs to the list or select any PAN to delete or edit it.

The following fields and links are displayed:

  • Select checkbox - for selecting the Primary Account Number in conjunction with the Delete button

  • Primary Account Number link to the Edit Soft Launch List page

  • Links for Add and Import

To edit a PAN:

  • Click the Primary Account Number link.

    The Edit Soft Launch List page is displayed.

To add an individual PAN:

  • Click the Add link.

    The Add Soft Launch List page is displayed.

To import a file of PANs:

  • Click the Import link.

    The Import Soft Launch List page is displayed.

To delete a PAN:

  • Select the checkbox adjacent to the Primary Account Number and click the Delete button.

Edit Soft Launch List

Rules > Rule Management > Authentication > Soft Launch List > Search Soft Launch List > Edit Soft Launch List

To edit the Soft Launch List:

  • Issuer name is displayed and cannot be changed.

  • Edit the Primary Account Number.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Soft Launch List Search Results.

Add to Soft Launch List

Rules > Rule Management > Authentication > Soft Launch List > Add Soft Launch List

This page is used to add individual PANs to the Soft Launch List.

To add to the Soft Launch List:

  • Issuer name is displayed and cannot be changed.

  • Enter a Primary Account Number.

  • Click the Apply button.

    A confirmation message will be displayed.

Import Soft Launch List

Rules > Rule Management > Authentication > Soft Launch List > Import Soft Launch List

This page is used to import a file of cardholder PANs to add to the Soft Launch List. The format of the file should be CSV, with each record incorporating a PAN value.

To import a file of PANs:

  • Issuer name is displayed and cannot be changed.

  • Click the Choose File / Browse… button adjacent to File name, to locate and select a file to import.

    The No file chosen message will be replaced with the name of the file to be imported.

    Note

    A maximum of 1000 records can be imported at one time.

  • Click the Apply button.

    A confirmation message will be displayed.

Merchant Whitelist Rule

If any of the Merchant details are on the Merchant Whitelist, the authentication procedure will be bypassed and the other business rules will be applied in the specified sequence.

Note

If any of the merchant's details are on the list, the cardholder will be considered to be transparently authenticated and transaction status will set to Y or A, as configured under the Settings tab.

When checking the Merchant details from a transaction against the Merchant Whitelist, the Merchant is considered to be a match if any of the Merchant details (Merchant ID, Merchant name, Acquirer BIN or Merchant country) from the PAReq match the corresponding details on the Whitelist.

You can search for Merchant details in the Merchant Whitelist, import a file of merchant details or add Merchant details to the list and edit Merchant details.

The first page in this section is Search Merchant Whitelist.

Search Merchant Whitelist

Rules > Rule Management > Merchant Whitelist > Search Merchant Whitelist

This page displays:

  • Search button to search for Merchant details already in the Merchant Whitelist.

  • Import button to import a file of Merchant details to add to the list

    Note

    The supported file formats for uploading rule configurations are .csv and .xml. The following is an example of a sample .xml file:

   <MerchantWhitelist>
         < Merchant>
             <Id>1</Id>
             <Name>hi</Name>
             <AcquirerBIN>412345</AcquirerBIN>
             <CountryCode>024</CountryCode>
         </Merchant>
         <Merchant>
             <Id>12134567890</Id>
             <Name>hi</Name>
             <AcquirerBIN>412345</AcquirerBIN>
         </Merchant>
     </MerchantWhitelist>
  • Add button to add individual Merchant details to the list

To search for a Merchant:

  • Issuer name is displayed and cannot be changed.

  • Enter Merchant details as follows, or leave them blank to display all Merchants on the Whitelist:

    • Enter a Merchant ID

    • Enter a Merchant name

    • Enter an Acquirer BIN

    • Select a Merchant country from the drop down list. Default is All.

  • Click the Search button.

The Merchant Whitelist page is displayed.

Merchant Whitelist

Rules > Rule Management > Authentication > Merchant Whitelist > Merchant Whitelist Search Results

Merchant details are listed according to the search criteria you entered on the Search Merchant Whitelist page. You can add an individual Merchant or import a file of Merchants to the list or select any Merchant to delete or edit it.

The following fields and links are displayed:

  • Select checkbox for selecting one or more sets of Merchant details

  • Delete button used in conjunction with selected Merchant details

  • Merchant Id, Merchant Name, Acquirer BIN and Merchant Country links to the Edit Merchant Whitelist page

  • Links for Add and Import

To add individual Merchant details:

  • Click the Add link.

    The Add Merchant Whitelist page is displayed.

To import a file of Merchant details:

  • Click the Import link.

    The Import Merchant Whitelist page is displayed.

To delete Merchant details:

  • Select the checkbox adjacent to the Merchant ID and click the Delete button.

    Confirmation of the deletion is displayed.

Edit Merchant Whitelist

Rules > Rule Management > Authentication > Merchant Whitelist > Edit Merchant Whitelist

To edit the Merchant Whitelist:

  • Issuer name is displayed and cannot be changed.

  • Edit any of the Merchant fields:

    • Merchant ID

    • Merchant Name

    • Acquirer BIN

    • Merchant Country.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Merchant Whitelist Search Results.

Add to Merchant Whitelist

Rules > Rule Management > Authentication > Merchant Whitelist > Add to Merchant Whitelist

This page is used to add Merchant details to the Merchant Whitelist.

When checking whether a transaction matches the Merchant Whitelist, the system will compare the Merchant Id, Merchant Name, Acquirer BIN and Merchant Country from the PAReq, with the values entered.

To add to the Merchant Whitelist:

  • Issuer name is displayed and cannot be changed.

  • Enter a value into any of the Merchant fields:

    • Merchant Id

    • Merchant Name

    • Acquirer BIN

    • Merchant Country select from the drop down list.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Merchant Whitelist Search Results.

Import Merchant Whitelist

Rules > Rule Management > Authentication > Merchant Whitelist > Import Merchant Whitelist

This page is used to import a file of merchant whitelist rules to add to the Merchant Whitelist. The format of the file should be CSV, with each record incorporating values for any of the required Merchant Id, Merchant Name, Acquirer BIN and Merchant Country fields necessary to define the rule.

Note

Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code > / < ISO 3166-1 country name>

For example:

008/Albania

024/Angola

036/Australia

To import a file of merchant whitelist rules:

  • Issuer name is displayed and cannot be changed.

  • Click the Choose File / Browse… button adjacent to File name, to locate and select a file to import.

    The No file chosen message will be replaced with the name of the file to be imported.

    Note

    A maximum of 1000 records can be imported at one time.

  • Click the Apply button.

A confirmation message will be displayed.

Merchant Watchlist

If any of the Merchant's details are on the Merchant Watchlist, the authentication procedure will be initiated. If the Merchant's details are not on the list, the other business rules will be applied in the specified sequence.

Note

If any of the merchant details are on the list, the authentication procedure will be initiated.

When checking the Merchant details from a transaction against the Merchant Watchlist, the Merchant is considered to be a match if any of the Merchant details (Merchant ID, Merchant name, Acquirer BIN or Merchant country) from the PAReq match the corresponding details on the Watchlist.

You can search for Merchant details in the Merchant Watchlist, import a file of Merchant details or add individual Merchant details to the list and edit Merchant details.

The first page in this section is Search Merchant Watchlist.

Search Merchant Watchlist

Rules > Rule Management > Authentication > Merchant Watchlist > Search Merchant Watchlist

This page displays:

  • Search button to search for Merchant details already in the Merchant Watchlist.

  • Import button to import a file of Merchant details to add to the list

    Note

    The supported file formats for uploading rule configurations are .csv and .xml

  • Add button to add individual Merchant details to the list

To search for a Merchant:

  • Issuer name is displayed and cannot be changed.

  • Enter Merchant details as follows, or leave them blank to display all Merchants on the Watchlist:

    • Enter a Merchant ID

    • Enter a Merchant name

    • Enter an Acquirer BIN

    • Select a Merchant country from the drop down list. Default is All.

  • Click the Search button.

The Merchant Watchlist page is displayed.

Merchant Watchlist Search Results

Rules > Rule Management > Authentication > Merchant Watchlist > Merchant Watchlist Search Results

Merchant details are listed according to the search criteria you entered on the Search Merchant Watchlist page. You can add an individual Merchant or import a file of Merchants to the list or select any Merchant to delete or edit it.

The following fields and links are displayed:

  • Select checkbox for selecting one or more sets of Merchant details

  • Delete button used in conjunction with selected Merchant details

  • Merchant Id, Merchant Name, Acquirer BIN and Merchant Country links to the Edit Merchant Watchlist page

  • Links for Add and Import

To add individual Merchant details:

  • Click the Add link.

    The Add Merchant Watchlist page is displayed.

To import a file of Merchant details:

  • Click the Import link.

    The Import Merchant Watchlist page is displayed.

    Note

    The supported file formats for uploading rule configurations are .csv and .xml

To delete Merchant details:

  • Select the checkbox adjacent to the Merchant ID and click the Delete button.

    Confirmation of the deletion is displayed.

Edit Merchant Watchlist

Rules > Rule Management > Authentication > Merchant Watchlist > Edit Merchant Watchlist

To edit the Merchant Watchlist:

  • Issuer name is displayed and cannot be changed.

  • Edit any of the Merchant fields:

    • Merchant Id

    • Merchant Name

    • Acquirer BIN

    • Merchant Country.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Merchant Watchlist Search Results.

Add to Merchant Watchlist

Rules > Rule Management > Authentication > Merchant Watchlist > Add to Merchant Watchlist

This page is used to add Merchant details to the Merchant Watchlist.

A new Merchant Watchlist rule can be created by entering a value in at least one of the fields on the page:

When checking whether a transaction matches the Merchant Watchlist, the system will compare the Merchant Id, Merchant Name, Acquirer BIN and Merchant Country from the PAReq, with the values entered.

To add to the Merchant Watchlist:

  • Issuer name is displayed and cannot be changed.

  • Enter a value into any of the Merchant fields:

    • Merchant ID

    • Merchant Name

    • Acquirer BIN

    • Merchant Country select from the drop down list.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Merchant Watchlist Search Results.

Import Merchant Watchlist

Rules > Rule Management > Authentication > Merchant Watchlist > Import Merchant Watchlist

This page is used to import a file of merchant watchlist rules to add to the Merchant Watchlist. The format of the file should be CSV, with each record incorporating values for any of the required Merchant Id, Merchant Name, Acquirer BIN and Merchant Country fields necessary to define the rule.

Note

Merchant country is defined by a country code and name and uses the format:

< ISO 3166-1 numeric code> < ISO 3166-1 country name>

For example:

008/Albania

024/Angola

036/Australia

To import a file of merchant watchlist rules:

  • Issuer name is displayed and cannot be changed.

  • Click the Choose File / Browse button to locate and select the File name.

    The No file chosen message will be replaced with the name of the file to be imported.

    Note

    A maximum of 1000 records can be imported at one time.

  • Click the Apply button.

    A confirmation message will be displayed.

Location Watchlist

If the merchant's country is on the Location Watchlist, the authentication procedure will be initiated. If the merchant's country is not on the list, the remaining business rules will be applied.

Note

If the merchant's country is not on the list, the cardholder will be considered to be transparently authenticated and transaction status will set to Y or A, as configured under the Settings tab.

You can search for Locations, import a file of Locations or add an individual Location to the list.

The first page in this section is Search Location Watchlist.

Search Location Watchlist

Rules > Rule Management > Authentication > Location Watchlist > Search Location Watchlist

This page displays:

  • Search button to search for countries already in the Location Watchlist.

  • Import button to import a file of countries to add to the list

    Note

    The supported file formats for uploading rule configurations are .csv and .xml.

  • Add button to add individual countries to the list

To search for a Location:

  • Issuer name is displayed and cannot be changed.

  • Select a Merchant country from the drop down list. Default is All.

  • Click the Search button.

    The Location Watchlist page is displayed.

Location Watchlist Search Results

Rules > Rule Management > Authentication > Location Watchlist > Location Watchlist Search Results

Merchant countries are listed according to the search criteria you entered on the Search Location Watchlist page. You can add an individual Merchant country or import a file of Merchant countries to the list or select any Merchant country to delete or edit it.

The following fields and links are displayed:

  • Select checkbox for selecting one or more Merchant Countries

  • Delete button used in conjunction with selected Merchant Countries

  • Merchant Country link to the Edit Location Watchlist page

  • Links for Add and Import

To add individual Merchant countries:

  • Click the Add link.

    The Add Location Watchlist page is displayed.

To import a file of Merchant countries:

  • Click the Import link.

    The Import Location Watchlist page is displayed.

    Note

    The supported file formats for uploading rule configurations are .csv and .xml.

To delete Merchant countries:

  • Select the checkbox adjacent to the Merchant Country and click the Delete button.

    Confirmation of the deletion is displayed.

Edit Location Watchlist

Rules > Rule Management > Authentication > Location Watchlist > Edit Location Watchlist

Editing a Merchant country replaces the selected country with the new country selected.

To edit the Location Watchlist:

  • Issuer name is displayed and cannot be changed.

  • Edit Merchant country by selecting a different country from the drop down list.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Location Watchlist Search Results.

Add to Location Watchlist

Rules > Rule Management > Authentication > Location Watchlist > Add to Location Watchlist

This page is used to add individual Merchant countries to the Location Watchlist.

When checking whether a transaction matches the Merchant Watchlist, the system will compare the Merchant Country from the PAReq, with the Merchant countries entered on the watchlist.

To add to the Location Watchlist:

  • Issuer name is displayed and cannot be changed.

  • Select a Merchant Country from the drop down list.

  • Click the Apply button.

    A confirmation message will be displayed.

  • Click the Back button to return to the Merchant Watchlist Search Results.

Import Location Watchlist

Rules > Rule Management > Authentication > Location Watchlist > Import Location Watchlist

This page is used to import a file of merchant countries to add to the Location Watchlist. The format of the file should be CSV, with each record incorporating a Merchant country value.

Note

Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code>/< ISO 3166-1 country name>

For example:

008/Albania

024/Angola

036/Australia

To import a file of Location watchlist rules:

  • Issuer name is displayed and cannot be changed.

  • Click the Choose File / Browse button to locate and select the File name.

    Note

    A maximum of 1000 records can be imported at one time.

  • Click the Apply button.

A confirmation message will be displayed.

Domestic & International Transaction Amount Threshold

Rules > Rule Management > Authentication > Domestic & International Transaction Amount Threshold

The domestic and international transaction thresholds determine if the authentication procedure is to be initiated or bypassed.

The Domestic threshold is used when the transaction purchase currency is the selected Default Currency; otherwise, the International threshold is used.

If the transaction amount is less than the defined transaction amount threshold, the cardholder will be transparently authenticated.

If the transaction amount is greater than or equal to the threshold, the authentication procedure will be initiated.

Note

If the transaction currency is not in the currency file, the default will be for the Issuer ACS to pass the PARes back to the merchant indicating Cardholder Transparently Authenticated.

The following fields and links are displayed:

  • Select checkbox for selecting one or more sets of rules.

  • BIN links to the Edit Domestic & International Transaction Amount Threshold page.

  • Delete button used in conjunction with selected rules.

  • Links for Manage Exchange Rates and Add.

To manually create currency exchange values:

  • Click the Manage Exchange Rates link.

    The Manage Exchange Rate page is displayed.

To add Domestic & International Transaction Amount Threshold rules:

Rules > Rule Management > Authentication > Authentication > Domestic & International Transaction Amount Threshold > Add

  • Click the Add link.

    The Add Domestic & International Transaction Amount Threshold page is displayed.

    Note

    The Add link is disabled when a rule has been set for All BINs of the selected issuer.

To delete a rule:

  • Select the checkbox adjacent to the BIN and click the Delete button.

    Confirmation of the deletion is displayed.

To set Domestic & International transaction amount thresholds:

  • Issuer name is displayed and cannot be changed.

  • Select the BIN to be used for the threshold from the drop down list.

  • Enter a Domestic amount for the threshold.

  • Enter an International amount for the threshold.

  • Select the currency to be used for the domestic threshold from the Default currency drop down list.

  • Click the Apply button to save changes.

    A confirmation message will be displayed.

Manage Exchange Rates

Rules > Rule Management > Authentication > Domestic & International Transaction Amount Threshold > Manage Exchange Rates

Currency exchange values can be manually defined for each issuer to set customised exchange rates or for rates not available on the automated list. These rates take precedence over the general rates that are downloaded from external resources or manually defined by the system administrator in System Management > Exchange Configuration.

The following fields and links are displayed:

  • Select checkbox for selecting one or more defined exchange rates.

  • Base Currency links to the Edit Exchange Rate page.

  • Delete button used in conjunction with selected exchange rates.

  • Add link to add an exchange rate.

To manually create currency exchange values:

Rules > Rule Management > Authentication > Domestic & International Transaction Amount Threshold > Manage Exchange Rates > Add

  • Click the Add link.

    The Add Exchange Rate page is displayed.

To delete a defined exchange rate:

  • Select the checkbox adjacent to the Base Currency and click the Delete button.

    Confirmation of the deletion is displayed.

To manually create currency exchange values:

  • Issuer name is displayed and cannot be changed.

  • Select the Base currency and Target currency to be used for the currency exchange rate from the drop down list.

  • Enter a Rate for the currency exchange.

  • Click the Apply button to save changes.

    A confirmation message will be displayed.

Stand-In Transaction Threshold

Rules > Authentication Exemption > Stand-In Transaction Threshold

The Stand-In Transaction Threshold rule is applied if the remote authentication server (CAAS) cannot be contacted or is not responding at the Verify Registration (first message to CAAS) stage.

However, if the cardholder is in the middle of the authentication process and has commenced selection and the CAAS cannot be contacted or is not responding then the Issuer ACS will be unable to authenticate the transaction and Transaction Status will be set to 'U' (Unable to authenticate).

Note

If the transaction amount (AUD or converted to AUD) is less than the Stand-In threshold, the Issuer ACS will pass the PARes back to the merchant indicating Cardholder Transparently Authenticated.

The following fields and links are displayed:

  • Select checkbox for selecting one or more sets of rules.

  • BIN links to the Edit Stand-In Transaction Threshold page.

  • Delete button used in conjunction with selected rules.

  • Links for Manage Exchange Rates and Add.

To manually create currency exchange values:

  • Click the Manage Exchange Rates link.

    The Manage Exchange Rate page is displayed.

To add Stand-In Transaction Threshold rules:

Rules > Authentication Exemption > Stand-In Transaction Threshold > Add

  • Click the Add link.

    The Add Stand-In Transaction Threshold page is displayed.

    Note

    The Add link is disabled when a rule has been set for All BINs of the selected

    issuer.

To delete a rule:

  • Select the checkbox adjacent to the BIN and click the Delete button.

    Confirmation of the deletion is displayed.

To set Stand-In Transaction thresholds:

  • Issuer name is displayed and cannot be changed.

  • Select the BIN to be used for the threshold from the drop down list.

  • Enter an Amount for the threshold.

  • Select the default currency to be used for the threshold from the Currency drop down list.

  • Click the Apply button to save changes.

    A confirmation message will be displayed.

Settings

Rules > Rule Management > Settings

Settings tab

This section is used to set thresholds, by issuer or issuer group, for the number of transactions and the transaction amounts total (which determine if the authentication procedure is to be initiated or bypassed). It is also used to define the authentication response (PARes) and transaction status for cardholders when authentication is bypassed.

If one threshold is specified - if the number of transactions or the transaction amounts total is less than the specified threshold, the cardholder will be transparently authenticated.

If both thresholds are specified, if the number of transactions and the transaction amounts total are less than the specified thresholds, the cardholder will be transparently authenticated.

If the number of transactions or the transaction amounts total is greater than or equal to the specified thresholds, the authentication procedure will be initiated.

Use the following fields to view / edit the Settings:

  • If the required Issuer or an Issuer Group is not displayed, select it from the appropriate drop down list.

  • Click the Refresh button.

Note

These fields are not displayed if the user is assigned to a single issuer.

  • To set a Number of transactions threshold, select the checkbox and enter a number from 1 to 1000 (inclusive) in Maximum number of transactions allowed exemption. This is the number of times a cardholder can be exempt, after which time they will be required to be authenticated. Once authenticated successfully, the transaction count is reset to 0.

  • To set a Transaction amounts total threshold, select the checkbox and enter an amount from 1 to 100000 (inclusive) in Maximum allowed sum of exempted transactions amounts. Once the cardholder is authenticated successfully, the transaction amounts total is reset to 0.

  • Select the Default currency, which will apply to the transaction amounts total, from the drop down list.

  • To select an Authentication action for exempt and non-exempt authentication, select from the appropriate drop down lists for the selected issuer or issuer group:

  • For exempt authentication - the options are:

    Set PARes='A' (Attempted)

    Set PARes='Y' (Approved)

  • For non-exempt authentication - the options are:

    Set PARes='N' (Not approved)

    Show authentication page

  • Click the Apply button to save changes.