I or one of my merchants use an external 3DS operator and “pass-through” 3DS result data. Do I have to make any changes?
No, not regarding the transaction API in IXOPAY itself. However, any merchants using either their own or an external 3DS server should take Mastercard’s mandate into account, which comes into effect from 1 August 2023. 3DS sessions must always be initiated with v2.2.0 whenever possible (see Mastercard’s AN7264 for details). IXOPAY does not verify whether 3DS result data has been obtained according to Mastercard’s data integrity requirements and assumes no liability for passing on 3DS result data that does not adhere to Mastercard’s Data Integrity requirements.