Generating Credentials

To configure CyberSource within the Elastic Path Payments framework, you must create a security certificate and Secure Acceptance Profile in the Cybersource administrative console. Elastic Path makes secure calls to CyberSource for operations such as, pre-authorization, capture, and credit.

Generating REST API Credentials

First, we need to generate REST API credentials, which are used to allow Self-Managed Commerce services to communicate with CyberSource.

1. Sign in to the CyberSource admin console.

2. In the CyberSource console, go to Payment Configuration --> Key Management.

3. Click Generate Key, located in the upper right corner of the page.

4. Select REST - Shared Secret.

   

5. Click Generate key.

6. Make note of the following values. They will not be displayed again.

   • Key
   • Shared Secret

Generating Secure Acceptance Credentials

Next, we need to generate Secure Acceptance credentials, which are used to allow your front-end to communicate with CyberSource.

1. In the CyberSource console, go to Payment Configuration --> Secure Acceptance Settings.

2. Click New Profile, located in the upper right corner of the page.

3. Enter a profile name, such as Elastic Path Secure Acceptance Profile.

4. Select an integration method:

   1. Select Checkout API for Direct Post to host the payment information fields on your own checkout pages.
   2. Select Hosted Checkout for Hosted Page to redirect the shopper to the CyberSource hosted payment page.

5. Enter the company name and contact information.

6. In Added Value Services, click Payment Tokenization.

   note

   If you don’t see the payment tokenization option, it is not enabled on your CyberSource account. Contact CyberSource support.

   

7. Click Submit.

8. Click the Payment Settings tab.

   

9. Select the card types that you want to accept.

10. Click the Security tab.

11. In the Security Keys list, click +.

12. Give the key a name, such as CyberSource Signing Lambda, and leave the other options as default.

13. Click Create.

    

14. Copy the access key and secret key.

    warning

    The secret key disappears within 30 seconds.

15. Click Customer Response.

16. Enter a URL to save the profile.

    The URL can be any URL, such as https://www.sampleurl.com. The URL is overridden by the request.

    

17. Click Save to make the profile active.

18. Click the checkbox icon to promote the profile.

19. Make note of the following values. They will not be displayed again.

    • Secure Acceptance Profile ID
    • Secure Acceptance Access Key
    • Secure Acceptance Secret Key