Rules
person person
System Administrators and Issuer Addministrators
Access can also be granted to Business Admin and Helpdesk users at System Admin level.
Whether these users have read only or full access is determined by their Admins settings.
This section is used to set up and manage business rules and the sequence in which they are applied for Issuers that have rules functionality enabled.
The rules that can be applied are determined by whether the authentication server is remote or local. Authentication exemption rules and settings can be applied for local and remote authentication servers and registration enforcement rules can be applied for local authentication servers.
You can set up and maintain Issuer authentication exemption business rule settings for the local or remote ACS (CAAS). These business rules are configurable settings, which provide Issuers with control over the customer process during 3-D Secure transactions as described in the table below. Rules can be configured using 3-D Secure transaction parameters such as Transaction Amount, Merchant ID, Merchant Name, Acquirer BIN or Merchant Country. The sequence in which the rules are applied can be defined by setting Priority values for each rule.
Rule Management has the following tabs:
Registration - allows two pre-defined rules to be used for checking authentication requests processed or transparently authenticated by a local authentication server. The Rules are:
Amount Threshold
Merchant Blacklist
These rules can be enabled, disabled and have their order of priority changed.
Authentication
Soft Launch List
Merchant Whitelist
Merchant Watchlist
Location Watchlist
Domestic & International Transaction Amount Threshold
These rules can be enabled, disabled and have their order of priority changed.
Settings - used to set up transaction number and / or amount thresholds to be used for determining if authentication is to be initiated or bypassed. Also used to define the authentication response (PARes) to be sent for any transactions where authentication is bypassed.
Rules can be set to apply by default and not just for exceptions.
Registration¶
Rules > Rule Management > Registration
This section is used to set up and maintain settings for business rules that force customer registration. These business rules are configurable settings which provide issuers control over the customer process during 3-D Secure transactions.
These rules can be configured using 3-D Secure transaction parameters such as the Transaction Amount, Merchant ID, Merchant Name, Acquirer BIN or Merchant Country.
The sequence in which the rules are applied can be changed by setting a Priority for each rule.
Rule | Description | Parameters | Behaviour | |
---|---|---|---|---|
Amount Threshold | A threshold that determines if pre-registered cardholders are to be forced to opt-in to Activation During Shopping. | Transaction amount (AUD or converted to AUD) | Greater than or equal to threshold: No Opt-Out option available on the ADS page, only cancel | Less than threshold: Opt-Out option will be available on the ADS page Opt-Out - sets transaction status to 'A' |
Merchant Blacklist | Merchant criteria that initiate the authentication. | Merchant Merchant ID Merchant name Acquirer BIN Merchant country | On list: No Opt-Out option available on the ADS page, only cancel Cancel - sets Transaction Status to 'N'. | Not on list: Opt-Out option will be available on the ADS page Opt-Out - sets transaction status to 'A' |
Use the following fields to view / edit the Rules:
If the required Issuer or an Issuer Group is not displayed, select it from the appropriate drop down list.
Click the Refresh button.
Note
These fields are not displayed if the user is assigned to a single issuer.
The following fields and links are displayed for each rule:
Select checkbox to be used in conjunction with the Enable and Disable buttons.
Rule Name link to the Rule Details page
Priority sequence in which the rules are applied, can be changed by clicking Move Up or Move Down
Status - Enabled, Disabled or Not Configured
Use the following steps to enable or disable a rule:
Choose one or more rules by clicking the Select checkbox adjacent to the Rule Name
Click the Enable or Disable button as appropriate.
A confirmation message will be displayed.
Amount Threshold¶
Rules > Rule Management > Registration > Amount Threshold
The Amount Threshold rule allows an issuer to encourage pre-registered cardholders to register for 3-D Secure based on the value of the transaction.
When this rule is enabled, the cardholder is pre-registered and when they purchase from a 3-D Secure enabled merchant, if the value of the transaction is equal to or exceeds the threshold amount, the cardholder will be presented with the standard ADS page but will not be given the opportunity to Opt-Out. Instead, the cardholder will only be able to Cancel the transaction and the authentication result that will be returned to the merchant will be, N.
If the transaction is in a currency other than the one selected for the rule, a conversion will be made to convert the value of the transaction into the currency of the rule, so that the converted value can be compared with the threshold to determine the appropriate action.
Note
If currency conversion is not available, the default will be for registration to be enforced.
The following fields and links are displayed:
Select checkbox for selecting one or more sets of rules.
BIN links to the Edit Amount Threshold page.
Delete button used in conjunction with selected rules.
Links for Manage Exchange Rates and Add.
To manually create currency exchange values:
Click the Manage Exchange Rates link.
The Manage Exchange Rate page is displayed.
To add Amount Threshold rules:
Rules > Force Registration > Amount Threshold > Add
Click the Add link.
The Add Amount Threshold page is displayed.
Note
The Add link is disabled when a rule has been set for All BINs of the selected issuer.
To delete a rule:
Select the checkbox adjacent to the BIN and click the Delete button.
Confirmation of the deletion is displayed.
To set transaction amount thresholds:
Issuer name is displayed and cannot be changed.
Select the BIN to be used for the threshold from the drop down list.
Enter an Amount for the threshold.
Select the default currency to be used for the domestic threshold from the Currency drop down list.
Click the Apply button to save changes.
A confirmation message will be displayed.
Merchant Blacklist¶
The Merchant Blacklist rule allows an issuer to encourage pre-registered cardholders to register for 3-D Secure based on merchant related transaction parameters. If the attributes of the business rule match the merchant related transaction parameters, the cardholder will not be allowed to Opt-Out of the Activation During Shopping process and will only be able to cancel the transaction. Issuers can use any combination of Merchant ID, Merchant Name, Acquirer BIN and Merchant Country to create a rule to encourage cardholders to register.
If the cardholder cancels the transaction, the authentication result returned to the merchant will be an N.
When checking the Merchant details from a transaction against the Merchant Blacklist, the Merchant is considered to be a match if any of the Merchant details (Merchant ID, Merchant name, Acquirer BIN or Merchant country) from the PAReq match the corresponding details on the Blacklist.
You can set a maximum number of rules for the Merchant Blacklist, import a file of Merchant details or add individual Merchant details to the list, delete Merchant details and edit Merchant details.
Merchant Blacklist Details¶
Rules > Rule Management > Registration > Merchant Blacklist > Merchant Blacklist Search Results
You can add individual Merchant details or import a file of Merchant details to the list or select any Merchant details to delete or edit.
The following fields and links are displayed:
Maximum no of rules in blacklist (default is 50)
Select checkbox for selecting one or more sets of Merchant details
Delete button used in conjunction with selected Merchant details
Merchant ID, Merchant Name, Acquirer BIN and Merchant Country links to the Edit Merchant Blacklist page
Links for Add and Import
To change the number of rules permitted in the blacklist:
Enter the Maximum no of rules in blacklist.
Click the Apply button.
To add individual Merchant details:
Click the Add link.
The Add Merchant Blacklist page is displayed.
To import a file of Merchant details:
Click the Import link.
The Import Merchant Blacklist page is displayed.
Note
The supported file formats for uploading rule configurations are .csv and .xml. The following is an example of a sample .xml file:
<MerchantBlacklist> <Merchant> <Id>1</Id> <Name>hi</Name> <AcquirerBIN>412345</AcquirerBIN> <CountryCode>024</CountryCode> </Merchant> <Merchant> <Id>12134567890</Id> <Name>hi</Name> <AcquirerBIN>412345</AcquirerBIN> </Merchant> </MerchantBlacklist>
To delete Merchant details:
Select the checkbox adjacent to the Merchant ID and click the Delete button.
Confirmation of the deletion is displayed.
Edit Merchant Blacklist¶
Rules > Rule Management > Registration > Merchant Blacklist > Edit Merchant Blacklist
To edit the Merchant Blacklist:
Issuer name is displayed and cannot be changed.
Edit any of the Merchant fields:
Merchant ID
Merchant Name
Acquirer BIN
Merchant Country.
Click the Apply button. A confirmation message will be displayed.
When checking whether a transaction matches the Merchant Blacklist, the system will compare the Merchant ID, Merchant Name, Acquirer BIN and Merchant Country from the PAReq, with the values entered.
- Click the Back button to return to the Merchant Blacklist.
Import Merchant Blacklist¶
Rules > Rule Management > Registration > Merchant Blacklist > Import Merchant Blacklist
This page is used to import a file of merchant Blacklist rules to add to the Merchant Blacklist. The format of the file should be CSV, with each record incorporating values for any of the required Merchant ID, Merchant Name, Acquirer BIN and Merchant Country fields necessary to define the rule.
Note
Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code>/< ISO 3166-1 country name>
For example:
008/Albania
024/Angola
036/Australia
To import a file of merchant watchlist rules:
Issuer name is displayed and cannot be changed.
Click the Choose File / Browse button adjacent to File name, to locate and select a file to import.
The No file chosen message will be replaced with the name of the file to be imported.
Note
A maximum of 1000 records can be imported at one time.
Click the Apply button.
A confirmation message will be displayed.
Authentication¶
Rules > Rule Management > Authentication
Rule | Description | Parameters | If on list | If not on list |
---|---|---|---|---|
Soft Launch List | Primary Account Numbers that will not be allowed to bypass the authentication procedure. | Cardholder: Primary Account Number | Other business rules applied in the specified sequence. | Cardholder transparently authenticated. Transaction Status set to 'Y' or 'A', as configured under the Settings tab. |
Merchant Whitelist | Merchant criteria that allow the authentication procedure to be bypassed. | Merchant: Merchant ID Merchant name Acquirer BIN Merchant country | Cardholder transparently authenticated. Transaction Status set to 'Y' or 'A', as configured under the Settings tab. | Other business rules applied in the specified sequence. |
Merchant Watchlist | Merchant criteria that initiate the authentication procedure. | Merchant: Merchant ID Merchant name Acquirer BIN Merchant country | Initiates authentication procedure. | Other business rules applied in the specified sequence. |
Location Watchlist | Merchant countries that initiate the authentication procedure | Merchant country: Country / Currency code | Initiates authentication procedure. | Other business rules applied in the specified sequence. |
Domestic & International Transaction Amount Threshold | A threshold that determines if the authentication procedure is to be initiated or bypassed. Domestic threshold used for the set default transaction purchase currency, otherwise, International threshold used. | Transaction amount | Greater than or equal to threshold: Initiates authentication procedure. | Less than threshold or currency not in file: Cardholder transparently authenticated. Transaction Status set to ‘Y’ or 'A', as configured under the Settings tab. |
Stand-In Transaction | A threshold that determines if the authentication procedure is to be bypassed when the remote authentication server (CAAS) cannot be contacted or is not responding at the Verify Registration (first message to CAAS) stage. | Transaction amount (AUD or converted to AUD) | Greater than or equal to Stand-in threshold: Unable to authenticate Transaction Status set to ‘U’ | Less than Stand-In threshold: Cardholder transparently authenticated. Transaction Status set to ‘Y’ or 'A', as configured under the Settings tab. |
- Click the Rules tab, if it is not already selected.
Use the following fields to view / edit the Rules:
If the required Issuer or an Issuer Group is not displayed, select it from the appropriate drop down list.
Click the Refresh button.
Note
These fields are not displayed if the user is assigned to a single issuer.
The following fields and links are displayed for each rule:
Select checkbox to be used in conjunction with the Enable and Disable buttons.
Rule Name link to the Rule Details page
Once two or more rules are enabled, the Priority sequence in which the rules are applied can be changed by clicking Move Up or Move Down. Once Priority is customised, click Reset to Default, to reset the sequence in which the rules are applied back to the system default.
Status - Enabled, Disabled or Not Configured
To enable or disable a rule:
Choose one or more rules by clicking the Select checkbox adjacent to the Rule Name
Click the Enable or Disable button as appropriate.
A confirmation message will be displayed.
Soft Launch List Rule¶
If the cardholder’s Primary Account Number is on the Soft Launch List, the authentication procedure will not be bypassed, and the other business rules will be applied in the specified sequence.
Warning
If the cardholder is not on the list, the cardholder will be considered to be transparently authenticated and transaction status will be set to Y or A, as configured under the Settings tab.
You can search for PANs in the Soft Launch List, import a file of PANs or add an individual PAN to the list and edit a PAN.
The first page in this section is Search Soft Launch List.
Search Soft Launch List¶
Rules > Rule Management > Soft Launch List > Search Soft Launch List
This page displays:
Issuer name = cannot be changed.
Search button to search for cardholder PANs already in the Soft Launch List.
Import button to import a list of PANs to add to the list
Add button to add an individual PAN to the list
Note
The supported file formats for uploading rule configurations are .csv and .xml.
To search for a cardholder PAN:
- Enter a Primary Account Number and click the Search button. Leave the field blank to search for all PANs.
The Soft Launch List page is displayed.
Soft Launch List¶
Rules > Rule Management > Authentication > Soft Launch List > Soft Launch List Search Results
PANs are listed according to the search criteria you entered on the Search Soft Launch List page. You can add an individual PAN or import a list of PANs to the list or select any PAN to delete or edit it.
The following fields and links are displayed:
Select checkbox - for selecting the Primary Account Number in conjunction with the Delete button
Primary Account Number link to the Edit Soft Launch List page
Links for Add and Import
To edit a PAN:
Click the Primary Account Number link.
The Edit Soft Launch List page is displayed.
To add an individual PAN:
Click the Add link.
The Add Soft Launch List page is displayed.
To import a file of PANs:
Click the Import link.
The Import Soft Launch List page is displayed.
To delete a PAN:
- Select the checkbox adjacent to the Primary Account Number and click the Delete button.
Edit Soft Launch List¶
Rules > Rule Management > Authentication > Soft Launch List > Search Soft Launch List > Edit Soft Launch List
To edit the Soft Launch List:
Issuer name is displayed and cannot be changed.
Edit the Primary Account Number.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Soft Launch List Search Results.
Add to Soft Launch List¶
Rules > Rule Management > Authentication > Soft Launch List > Add Soft Launch List
This page is used to add individual PANs to the Soft Launch List.
To add to the Soft Launch List:
Issuer name is displayed and cannot be changed.
Enter a Primary Account Number.
Click the Apply button.
A confirmation message will be displayed.
Import Soft Launch List¶
Rules > Rule Management > Authentication > Soft Launch List > Import Soft Launch List
This page is used to import a file of cardholder PANs to add to the Soft Launch List. The format of the file should be CSV, with each record incorporating a PAN value.
To import a file of PANs:
Issuer name is displayed and cannot be changed.
Click the Choose File / Browse… button adjacent to File name, to locate and select a file to import.
The No file chosen message will be replaced with the name of the file to be imported.
Note
A maximum of 1000 records can be imported at one time.
Click the Apply button.
A confirmation message will be displayed.
Merchant Whitelist Rule¶
If any of the Merchant details are on the Merchant Whitelist, the authentication procedure will be bypassed and the other business rules will be applied in the specified sequence.
Note
If any of the merchant's details are on the list, the cardholder will be considered to be transparently authenticated and transaction status will set to Y or A, as configured under the Settings tab.
When checking the Merchant details from a transaction against the Merchant Whitelist, the Merchant is considered to be a match if any of the Merchant details (Merchant ID, Merchant name, Acquirer BIN or Merchant country) from the PAReq match the corresponding details on the Whitelist.
You can search for Merchant details in the Merchant Whitelist, import a file of merchant details or add Merchant details to the list and edit Merchant details.
The first page in this section is Search Merchant Whitelist.
Search Merchant Whitelist¶
Rules > Rule Management > Merchant Whitelist > Search Merchant Whitelist
This page displays:
Search button to search for Merchant details already in the Merchant Whitelist.
Import button to import a file of Merchant details to add to the list
Note
The supported file formats for uploading rule configurations are .csv and .xml. The following is an example of a sample .xml file:
<MerchantWhitelist> < Merchant> <Id>1</Id> <Name>hi</Name> <AcquirerBIN>412345</AcquirerBIN> <CountryCode>024</CountryCode> </Merchant> <Merchant> <Id>12134567890</Id> <Name>hi</Name> <AcquirerBIN>412345</AcquirerBIN> </Merchant> </MerchantWhitelist>
- Add button to add individual Merchant details to the list
To search for a Merchant:
Issuer name is displayed and cannot be changed.
Enter Merchant details as follows, or leave them blank to display all Merchants on the Whitelist:
Enter a Merchant ID
Enter a Merchant name
Enter an Acquirer BIN
Select a Merchant country from the drop down list. Default is All.
Click the Search button.
The Merchant Whitelist page is displayed.
Merchant Whitelist¶
Rules > Rule Management > Authentication > Merchant Whitelist > Merchant Whitelist Search Results
Merchant details are listed according to the search criteria you entered on the Search Merchant Whitelist page. You can add an individual Merchant or import a file of Merchants to the list or select any Merchant to delete or edit it.
The following fields and links are displayed:
Select checkbox for selecting one or more sets of Merchant details
Delete button used in conjunction with selected Merchant details
Merchant Id, Merchant Name, Acquirer BIN and Merchant Country links to the Edit Merchant Whitelist page
Links for Add and Import
To add individual Merchant details:
Click the Add link.
The Add Merchant Whitelist page is displayed.
To import a file of Merchant details:
Click the Import link.
The Import Merchant Whitelist page is displayed.
To delete Merchant details:
Select the checkbox adjacent to the Merchant ID and click the Delete button.
Confirmation of the deletion is displayed.
Edit Merchant Whitelist¶
Rules > Rule Management > Authentication > Merchant Whitelist > Edit Merchant Whitelist
To edit the Merchant Whitelist:
Issuer name is displayed and cannot be changed.
Edit any of the Merchant fields:
Merchant ID
Merchant Name
Acquirer BIN
Merchant Country.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Merchant Whitelist Search Results.
Add to Merchant Whitelist¶
Rules > Rule Management > Authentication > Merchant Whitelist > Add to Merchant Whitelist
This page is used to add Merchant details to the Merchant Whitelist.
When checking whether a transaction matches the Merchant Whitelist, the system will compare the Merchant Id, Merchant Name, Acquirer BIN and Merchant Country from the PAReq, with the values entered.
To add to the Merchant Whitelist:
Issuer name is displayed and cannot be changed.
Enter a value into any of the Merchant fields:
Merchant Id
Merchant Name
Acquirer BIN
Merchant Country select from the drop down list.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Merchant Whitelist Search Results.
Import Merchant Whitelist¶
Rules > Rule Management > Authentication > Merchant Whitelist > Import Merchant Whitelist
This page is used to import a file of merchant whitelist rules to add to the Merchant Whitelist. The format of the file should be CSV, with each record incorporating values for any of the required Merchant Id, Merchant Name, Acquirer BIN and Merchant Country fields necessary to define the rule.
Note
Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code > / < ISO 3166-1 country name>
For example:
008/Albania
024/Angola
036/Australia
To import a file of merchant whitelist rules:
Issuer name is displayed and cannot be changed.
Click the Choose File / Browse… button adjacent to File name, to locate and select a file to import.
The No file chosen message will be replaced with the name of the file to be imported.
Note
A maximum of 1000 records can be imported at one time.
Click the Apply button.
A confirmation message will be displayed.
Merchant Watchlist¶
If any of the Merchant's details are on the Merchant Watchlist, the authentication procedure will be initiated. If the Merchant's details are not on the list, the other business rules will be applied in the specified sequence.
Note
If any of the merchant details are on the list, the authentication procedure will be initiated.
When checking the Merchant details from a transaction against the Merchant Watchlist, the Merchant is considered to be a match if any of the Merchant details (Merchant ID, Merchant name, Acquirer BIN or Merchant country) from the PAReq match the corresponding details on the Watchlist.
You can search for Merchant details in the Merchant Watchlist, import a file of Merchant details or add individual Merchant details to the list and edit Merchant details.
The first page in this section is Search Merchant Watchlist.
Search Merchant Watchlist¶
Rules > Rule Management > Authentication > Merchant Watchlist > Search Merchant Watchlist
This page displays:
Search button to search for Merchant details already in the Merchant Watchlist.
Import button to import a file of Merchant details to add to the list
Note
The supported file formats for uploading rule configurations are .csv and .xml
Add button to add individual Merchant details to the list
To search for a Merchant:
Issuer name is displayed and cannot be changed.
Enter Merchant details as follows, or leave them blank to display all Merchants on the Watchlist:
Enter a Merchant ID
Enter a Merchant name
Enter an Acquirer BIN
Select a Merchant country from the drop down list. Default is All.
Click the Search button.
The Merchant Watchlist page is displayed.
Merchant Watchlist Search Results¶
Rules > Rule Management > Authentication > Merchant Watchlist > Merchant Watchlist Search Results
Merchant details are listed according to the search criteria you entered on the Search Merchant Watchlist page. You can add an individual Merchant or import a file of Merchants to the list or select any Merchant to delete or edit it.
The following fields and links are displayed:
Select checkbox for selecting one or more sets of Merchant details
Delete button used in conjunction with selected Merchant details
Merchant Id, Merchant Name, Acquirer BIN and Merchant Country links to the Edit Merchant Watchlist page
Links for Add and Import
To add individual Merchant details:
Click the Add link.
The Add Merchant Watchlist page is displayed.
To import a file of Merchant details:
Click the Import link.
The Import Merchant Watchlist page is displayed.
Note
The supported file formats for uploading rule configurations are .csv and .xml
To delete Merchant details:
Select the checkbox adjacent to the Merchant ID and click the Delete button.
Confirmation of the deletion is displayed.
Edit Merchant Watchlist¶
Rules > Rule Management > Authentication > Merchant Watchlist > Edit Merchant Watchlist
To edit the Merchant Watchlist:
Issuer name is displayed and cannot be changed.
Edit any of the Merchant fields:
Merchant Id
Merchant Name
Acquirer BIN
Merchant Country.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Merchant Watchlist Search Results.
Add to Merchant Watchlist¶
Rules > Rule Management > Authentication > Merchant Watchlist > Add to Merchant Watchlist
This page is used to add Merchant details to the Merchant Watchlist.
A new Merchant Watchlist rule can be created by entering a value in at least one of the fields on the page:
When checking whether a transaction matches the Merchant Watchlist, the system will compare the Merchant Id, Merchant Name, Acquirer BIN and Merchant Country from the PAReq, with the values entered.
To add to the Merchant Watchlist:
Issuer name is displayed and cannot be changed.
Enter a value into any of the Merchant fields:
Merchant ID
Merchant Name
Acquirer BIN
Merchant Country select from the drop down list.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Merchant Watchlist Search Results.
Import Merchant Watchlist¶
Rules > Rule Management > Authentication > Merchant Watchlist > Import Merchant Watchlist
This page is used to import a file of merchant watchlist rules to add to the Merchant Watchlist. The format of the file should be CSV, with each record incorporating values for any of the required Merchant Id, Merchant Name, Acquirer BIN and Merchant Country fields necessary to define the rule.
Note
Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code> < ISO 3166-1 country name>
For example:
008/Albania
024/Angola
036/Australia
To import a file of merchant watchlist rules:
Issuer name is displayed and cannot be changed.
Click the Choose File / Browse button to locate and select the File name.
The No file chosen message will be replaced with the name of the file to be imported.
Note
A maximum of 1000 records can be imported at one time.
Click the Apply button.
A confirmation message will be displayed.
Location Watchlist¶
If the merchant's country is on the Location Watchlist, the authentication procedure will be initiated. If the merchant's country is not on the list, the remaining business rules will be applied.
Note
If the merchant's country is not on the list, the cardholder will be considered to be transparently authenticated and transaction status will set to Y or A, as configured under the Settings tab.
You can search for Locations, import a file of Locations or add an individual Location to the list.
The first page in this section is Search Location Watchlist.
Search Location Watchlist¶
Rules > Rule Management > Authentication > Location Watchlist > Search Location Watchlist
This page displays:
Search button to search for countries already in the Location Watchlist.
Import button to import a file of countries to add to the list
Note
The supported file formats for uploading rule configurations are .csv and .xml.
Add button to add individual countries to the list
To search for a Location:
Issuer name is displayed and cannot be changed.
Select a Merchant country from the drop down list. Default is All.
Click the Search button.
The Location Watchlist page is displayed.
Location Watchlist Search Results¶
Rules > Rule Management > Authentication > Location Watchlist > Location Watchlist Search Results
Merchant countries are listed according to the search criteria you entered on the Search Location Watchlist page. You can add an individual Merchant country or import a file of Merchant countries to the list or select any Merchant country to delete or edit it.
The following fields and links are displayed:
Select checkbox for selecting one or more Merchant Countries
Delete button used in conjunction with selected Merchant Countries
Merchant Country link to the Edit Location Watchlist page
Links for Add and Import
To add individual Merchant countries:
Click the Add link.
The Add Location Watchlist page is displayed.
To import a file of Merchant countries:
Click the Import link.
The Import Location Watchlist page is displayed.
Note
The supported file formats for uploading rule configurations are .csv and .xml.
To delete Merchant countries:
Select the checkbox adjacent to the Merchant Country and click the Delete button.
Confirmation of the deletion is displayed.
Edit Location Watchlist¶
Rules > Rule Management > Authentication > Location Watchlist > Edit Location Watchlist
Editing a Merchant country replaces the selected country with the new country selected.
To edit the Location Watchlist:
Issuer name is displayed and cannot be changed.
Edit Merchant country by selecting a different country from the drop down list.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Location Watchlist Search Results.
Add to Location Watchlist¶
Rules > Rule Management > Authentication > Location Watchlist > Add to Location Watchlist
This page is used to add individual Merchant countries to the Location Watchlist.
When checking whether a transaction matches the Merchant Watchlist, the system will compare the Merchant Country from the PAReq, with the Merchant countries entered on the watchlist.
To add to the Location Watchlist:
Issuer name is displayed and cannot be changed.
Select a Merchant Country from the drop down list.
Click the Apply button.
A confirmation message will be displayed.
Click the Back button to return to the Merchant Watchlist Search Results.
Import Location Watchlist¶
Rules > Rule Management > Authentication > Location Watchlist > Import Location Watchlist
This page is used to import a file of merchant countries to add to the Location Watchlist. The format of the file should be CSV, with each record incorporating a Merchant country value.
Note
Merchant country is defined by a country code and name and uses the format:
< ISO 3166-1 numeric code>/< ISO 3166-1 country name>
For example:
008/Albania
024/Angola
036/Australia
To import a file of Location watchlist rules:
Issuer name is displayed and cannot be changed.
Click the Choose File / Browse button to locate and select the File name.
Note
A maximum of 1000 records can be imported at one time.
Click the Apply button.
A confirmation message will be displayed.
Domestic & International Transaction Amount Threshold¶
Rules > Rule Management > Authentication > Domestic & International Transaction Amount Threshold
The domestic and international transaction thresholds determine if the authentication procedure is to be initiated or bypassed.
The Domestic threshold is used when the transaction purchase currency is the selected Default Currency; otherwise, the International threshold is used.
If the transaction amount is less than the defined transaction amount threshold, the cardholder will be transparently authenticated.
If the transaction amount is greater than or equal to the threshold, the authentication procedure will be initiated.
Note
If the transaction currency is not in the currency file, the default will be for the Issuer ACS to pass the PARes back to the merchant indicating Cardholder Transparently Authenticated.
The following fields and links are displayed:
Select checkbox for selecting one or more sets of rules.
BIN links to the Edit Domestic & International Transaction Amount Threshold page.
Delete button used in conjunction with selected rules.
Links for Manage Exchange Rates and Add.
To manually create currency exchange values:
Click the Manage Exchange Rates link.
The Manage Exchange Rate page is displayed.
To add Domestic & International Transaction Amount Threshold rules:
Rules > Rule Management > Authentication > Authentication > Domestic & International Transaction Amount Threshold > Add
Click the Add link.
The Add Domestic & International Transaction Amount Threshold page is displayed.
Note
The Add link is disabled when a rule has been set for All BINs of the selected issuer.
To delete a rule:
Select the checkbox adjacent to the BIN and click the Delete button.
Confirmation of the deletion is displayed.
To set Domestic & International transaction amount thresholds:
Issuer name is displayed and cannot be changed.
Select the BIN to be used for the threshold from the drop down list.
Enter a Domestic amount for the threshold.
Enter an International amount for the threshold.
Select the currency to be used for the domestic threshold from the Default currency drop down list.
Click the Apply button to save changes.
A confirmation message will be displayed.
Manage Exchange Rates¶
Rules > Rule Management > Authentication > Domestic & International Transaction Amount Threshold > Manage Exchange Rates
Currency exchange values can be manually defined for each issuer to set customised exchange rates or for rates not available on the automated list. These rates take precedence over the general rates that are downloaded from external resources or manually defined by the system administrator in System Management > Exchange Configuration.
The following fields and links are displayed:
Select checkbox for selecting one or more defined exchange rates.
Base Currency links to the Edit Exchange Rate page.
Delete button used in conjunction with selected exchange rates.
Add link to add an exchange rate.
To manually create currency exchange values:
Rules > Rule Management > Authentication > Domestic & International Transaction Amount Threshold > Manage Exchange Rates > Add
Click the Add link.
The Add Exchange Rate page is displayed.
To delete a defined exchange rate:
Select the checkbox adjacent to the Base Currency and click the Delete button.
Confirmation of the deletion is displayed.
To manually create currency exchange values:
Issuer name is displayed and cannot be changed.
Select the Base currency and Target currency to be used for the currency exchange rate from the drop down list.
Enter a Rate for the currency exchange.
Click the Apply button to save changes.
A confirmation message will be displayed.
Stand-In Transaction Threshold¶
Rules > Authentication Exemption > Stand-In Transaction Threshold
The Stand-In Transaction Threshold rule is applied if the remote authentication server (CAAS) cannot be contacted or is not responding at the Verify Registration (first message to CAAS) stage.
However, if the cardholder is in the middle of the authentication process and has commenced selection and the CAAS cannot be contacted or is not responding then the Issuer ACS will be unable to authenticate the transaction and Transaction Status will be set to 'U' (Unable to authenticate).
Note
If the transaction amount (AUD or converted to AUD) is less than the Stand-In threshold, the Issuer ACS will pass the PARes back to the merchant indicating Cardholder Transparently Authenticated.
The following fields and links are displayed:
Select checkbox for selecting one or more sets of rules.
BIN links to the Edit Stand-In Transaction Threshold page.
Delete button used in conjunction with selected rules.
Links for Manage Exchange Rates and Add.
To manually create currency exchange values:
Click the Manage Exchange Rates link.
The Manage Exchange Rate page is displayed.
To add Stand-In Transaction Threshold rules:
Rules > Authentication Exemption > Stand-In Transaction Threshold > Add
Click the Add link.
The Add Stand-In Transaction Threshold page is displayed.
Note
The Add link is disabled when a rule has been set for All BINs of the selected
issuer.
To delete a rule:
Select the checkbox adjacent to the BIN and click the Delete button.
Confirmation of the deletion is displayed.
To set Stand-In Transaction thresholds:
Issuer name is displayed and cannot be changed.
Select the BIN to be used for the threshold from the drop down list.
Enter an Amount for the threshold.
Select the default currency to be used for the threshold from the Currency drop down list.
Click the Apply button to save changes.
A confirmation message will be displayed.
Settings¶
Rules > Rule Management > Settings
This section is used to set thresholds, by issuer or issuer group, for the number of transactions and the transaction amounts total (which determine if the authentication procedure is to be initiated or bypassed). It is also used to define the authentication response (PARes) and transaction status for cardholders when authentication is bypassed.
If one threshold is specified - if the number of transactions or the transaction amounts total is less than the specified threshold, the cardholder will be transparently authenticated.
If both thresholds are specified, if the number of transactions and the transaction amounts total are less than the specified thresholds, the cardholder will be transparently authenticated.
If the number of transactions or the transaction amounts total is greater than or equal to the specified thresholds, the authentication procedure will be initiated.
Use the following fields to view / edit the Settings:
If the required Issuer or an Issuer Group is not displayed, select it from the appropriate drop down list.
Click the Refresh button.
Note
These fields are not displayed if the user is assigned to a single issuer.
To set a Number of transactions threshold, select the checkbox and enter a number from 1 to 1000 (inclusive) in Maximum number of transactions allowed exemption. This is the number of times a cardholder can be exempt, after which time they will be required to be authenticated. Once authenticated successfully, the transaction count is reset to 0.
To set a Transaction amounts total threshold, select the checkbox and enter an amount from 1 to 100000 (inclusive) in Maximum allowed sum of exempted transactions amounts. Once the cardholder is authenticated successfully, the transaction amounts total is reset to 0.
Select the Default currency, which will apply to the transaction amounts total, from the drop down list.
To select an Authentication action for exempt and non-exempt authentication, select from the appropriate drop down lists for the selected issuer or issuer group:
For exempt authentication - the options are:
Set PARes='A' (Attempted)
Set PARes='Y' (Approved)
For non-exempt authentication - the options are:
Set PARes='N' (Not approved)
Show authentication page
Click the Apply button to save changes.