SCA validate saved cards at signup

What you’re asking about is a setting in WooCommerce Subscriptions if that is what you’re using for subscriptions and as such, this is an inappropriate forum to ask the question. By default, WooCommerce Subscriptions authenticates the credit card regardless of whether the checkout total is $0 so there is nothing to enable but would need to be disabled if it has been enabled and you wish to validate the cards at signup.

Sorry if I wasn’t clear. I am aware the credit card is always authorized at signup. But I want to make sure the SCA / 3DS / 2FA authorization (which is an extra level of authorization and a big thing in Europe) is also always forced at signup.

SCA / 3DS / 2FA authorization is normally only prompt on sales over EUR 30 or exceeds a total of EUR 100 or 5 transactions without authentication. So it wouldn’t normally be prompt for a free signup but then it would be an issue later.

See also https://support.stripe.com/questions/no-prompt-for-3d-secure-3ds-authentication-when-customer-creates-a-subscription-with-a-trial-period

I know it a feature in Stripe For WooCommerce. See this thread: https://www.ads-software.com/support/topic/woocommerce-subscriptions-48/

Thanks,
Andreas

Hi Andreas,

Thank you for providing more details.

We are checking regarding that with our developers, and we’ll get back to you as soon as possible with updates.

Hi Andreas,

I got feedback from our developers. ??

When checking out with a subscription with a free trial, the Stripe gateway will still prompt for SCA authorization in order to set the card up for renewal payments.

It means that it would work the same way that you see here: https://support.stripe.com/questions/no-prompt-for-3d-secure-3ds-authentication-when-customer-creates-a-subscription-with-a-trial-period

That said, things can always go wrong, and if — for whatever reason — a subscription renewal payment needs 3DS verification, the customer can go into their account on the store, open the subscription details, and pay for the renewal payment there — that should perform 3DS verification and it should not be required again for future renewals.

You can also go into the order details and send the customer the link to the “Customer payment page”. It would again proceed with 3DS if required and should not be required again.

Thanks for the update!

Just to be sure, does that mean that request_three_d_secure is set to “any” for all new payments as default or is it something that can be set in newer version of the plugin?

When was this implemented in the plugin? I am using an older version.

Hey there @bitma,

Just to be sure, does that mean that request_three_d_secure is set to “any” for all new payments as default or is it something that can be set in newer version of the plugin?

This feature isn’t related to any specific version of the plugin, wherein you can enable it for all payments by upgrading to plugin version X. The 3d secure feature might be enforced based on regulations in specific countries, parter banks etc, So there isn’t 100% control/guarantee on all transactions to go through 3Ds here.

You can view the changelog for the plugin here.

Hope that helps you understand this better.

“When you set request_three_d_secure to any, Stripe requires your customer to perform authentication to complete the payment successfully if 3D Secure authentication is available for a card. If 3D Secure is not available for the given card, the payment proceeds normally.” https://stripe.com/docs/payments/3d-secure

My question is if this feature is available in the plugin?

Hi, @bitma!

To clarify, according to our developers, our Stripe extension doesn’t set request_three_d_secure to any. They’ve suggested that you try using wc_stripe_generate_payment_request filter to add that parameter if you need it.

Hi again, @bitma! We haven’t heard back from you in a while, so I’m going to mark this as resolved. However, if you do have any further questions, feel free to start a new thread.