Introduction

Welcome to the Intershop Cybersource Service Connector. The service connector adds Cybersource payment methods to your Intershop installation.

This document provides important product information, including version information and dependencies. It also outlines the basic setup and configuration steps.

PCI Compliance

The least burdensome level of PCI compliance is SAQ A. To achieve this compliance, the connector securely captures sensitive payment data using the validated Cybersource APIs.
To meet this requirement, UI integration has to render secure iframes for the payment card and card verification number input fields by using Cybersource's Flex Microform. These iframes are hosted by Cybersource and payment data is submitted directly to Cybersource through the secure Flex API, never touching your systems.

This UI integration is provided by the PWA by accessing the connector through the Intershop REST API.

Glossary

References

• Guide - Setup Cybersource Service Connector
• Concept - Payment Framework
• Cookbook - Payment
• Concept - Intershop Reference Payment Services
• Cybersource Developer Documentation
• Wireframes - Cybersource Service Connector

Version Information and Dependencies

This delivery and the accompanying documentation are valid for the following combination of software versions:

* Please see PWA release documentation in GitHub for details.

The next table provides information about the cartridges included in the package.

Cartridge	Description	Required
ac_payment_cybersource	Includes all base functionality and business logic which is used.

The Cybersource Service Connector is based on the Payment API introduced in IS 7.6.

Supported Application Types

The Cybersource Service Connector can be used for the following application types:

Documentation for the REST API can be found here:

• Cybersource REST API Reference

Setup

For information on setup, customization and configuration, please refer to Guide - Setup Cybersource Service Connector.

Feature Overview

Payment Methods

The Cybersource Service Connector adds the following payment methods to your Intershop 7 system:

Payment Method Type	Payment Method	Auto Capture	Manual Capture*	Cancel*	Reduce	Refund
Credit Card	Credit Card Payment supported by Cybersource

* Only available if the corresponding payment method's Capture Mode is set to manual.

Payment Management Options

The following table lists all options for payment transactions that can be triggered manually in ICM:

Data Handling

The following table describes transmitted data by the Cybersource Service Connector from ICM to Cybersource during the payment process:

	Description	Cybersource Payment Methods
		Credit Card
Initial amount	Amount for the transaction
Currency details	Currency code e.g. USD
Customer details	Customer first name, last name, and e-mail
Merchant order id	Order reference generated by the merchant
Commerce indicator	Type of transaction (internet, moto, install, recurring, and recurring_internet)
Address details	Invoice and shipping address details
Line items details	Details regarding product, shipping, discount, tax, gift card
Payment instrument Id	Tokenized identifier for customer account that can be stored and used for future transactions
Credit card details	Card number, CVC, expiry date. Sensitive data is handled via Flex Microform iframes only and is never stored at the merchant.

Limitations

No known limitations.

Changelog

Version CYBERSOURCE/1.3.1

• Fixed: The locality value for the billing address order information was not correctly mapped
• Extended the billing address information with address line 2 and 3

Version CYBERSOURCE/1.3.0

• Upgrade to AuthenticationSDK 0.0.29 to fulfill requirements of REST API : Http Signature Authentication – Critical Security Update
• Extended failure logging in capabilities

Version CYBERSOURCE/1.2.5

• New feature: save credit card for later reuse
• Fixed: payment method not applicable on incomplete configuration
• Fixed: no error log entries written for business use cases

Version CYBERSOURCE/1.1.2

• Upgrade of used Cybersource SDKs (to solve Log4j cve-2021-44832, cve-2021-45105)

Version CYBERSOURCE/1.1.1

• Upgrade of used Cybersource SDKs (includes fix for CVE-2021-44228 vulnerability in Apache Log4j library)

Version CYBERSOURCE/1.1.0

• Reduced dependencies to increase compatibility to used Tomcat versions (before 7.10.31.2: Tomcat 7; 7.10.31.2 and above: Tomcat 9)

Version CYBERSOURCE/1.0.0

• First release including credit card payment method