• Toll-free  888-665-8637
  • International  +1 717-220-0012
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

zimmer
#1 Posted : Thursday, April 30, 2009 12:27:14 PM(UTC)
zimmer

Rank: Member

Joined: 12/6/2005(UTC)
Posts: 26

We have a client who is asking us what is involved in using Authorize.Net's Server Integration Method (SIM) Implementation.



From a quick glance at the code, I do not know if BV 5 is using SIM or AIM. Since one of the features of SIM is that it will allow the credit card info to be stored on Authorize.Net's server, instead of the server running BV, I am assuming BV uses Advanced Integration Method (AIM).



If my assumption is correct, can someone tell me what is involed in make the change for BV? Does anything besides the BVSoftware.BVC5.Payment.AuthorizeNet project need to be modified? Also has anyone already made this change, and want to sell us their code?



-Michael
Marcus
#2 Posted : Thursday, April 30, 2009 1:35:55 PM(UTC)
Marcus

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 1,786

BV uses AIM which keeps the customer at your web site. SIM redirect the customer to Authorize.Net to checkout.
birdsafe
#3 Posted : Saturday, May 2, 2009 8:29:45 PM(UTC)
birdsafe

Rank: Member

Joined: 2/21/2007(UTC)
Posts: 1,113

Before I went and spent money on that -- is SIM going to be a viable option in the future with PCI compliance? I thought that your entire operation - and that would include third parties like Auth.net -- could not store a customer's cc number.
Marcus
#4 Posted : Sunday, May 3, 2009 2:25:18 PM(UTC)
Marcus

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 1,786

Joe,

You can store the credit card number but there are specific requirements for how it is stored and accessed. Authorize.net already meets those criteria so SIM method would be PCI compliant.

What you can't store long term is the CVV number for the card. You're also not supposed to ever display the full card number once it has been entered. That means that those merchants who want to process cards off line/manually can never be PCI compliant with an online shopping cart.

I will be sticking with the AIM method for our BV Commerce integration with Authorize.net because it fits the vast majority of our customers who want to keep their shoppers on their web site during checkout.
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

©2024 Develisys. All rights reserved.
  • Toll-free  888-665-8637
  • International  +1 717-220-0012