Two months ago we added Accept.js support to our Authorize.Net AIM extension, allowing merchants to meet the lowest of PCI compliance standards (SAQ A-EP compliance), blending improved security with effective, on-site checkout processes. Today we’re pleased to announce that the same security improvements have been added to our Authorize.Net CIM extension!
How Accept.js Works
When Accept.js is enabled, the way payment data is communicated to Authorize.Net behind the scenes is altered. However, the checkout form on your site will look and operate exactly the same, so any merchant can upgrade to using Accept.js without issue 🙂
Without Accept.js, payment data is posted directly from your site, through your servers, to the payment processor. This puts a security burden on your site, as to achieve PCI compliance, you must ensure your server environment is compliant since payment data is passed through it (or deal with non-compliance fees each month from your merchant account).
To enable Accept.js support for your site, you’ll need to configure 2 additional settings in the Authorize.Net CIM plugin. You can enable Accept.js, and enter a client key, which is generated in your Authorize.Net account.
Any merchant can generate this key without the need for additional services or fees and begin using Accept.js.
That’s all it takes! Now your checkout process has become more secure, and meets the lower PCI compliance requirements.
While this release greatly improves processing credit cards, we couldn’t let it go by without love for the eCheck gateway! We’ve also added an optional checkout authorization message to enhance ACH compliance. This message can be customized in the plugin settings, and even provides placeholders so details like order total and date can be auto-populated.
If configured, this message is automatically shown for eCheck transactions at checkout.
For WooCommerce Subscriptions users, we’ve gone even further and added the ability to a separate recurring authorization message. So whenever a customer is checking out with a subscription in their cart, the eCheck authorization message can be customized to reflect the recurring payment details.
The message for recurring authorizations is automatically shown at checkout when a subscription is purchased, along with when a user switches a subscription payment method to use an eCheck.