The CyberSource integration lets your store accept credit card payments. To use the integration, you must have both a CyberSource merchant account and an activated CyberSource Secure Acceptance Silent Order Post (SOP) profile. If you do not already have a CyberSource account, go to www.cybersource.com/register to obtain an evaluation account. An evaluation account lets you configure and test the CyberSource integration. You will need to register for a paid merchant account (including both Payment Gateway and Tokenization) before your store can go live and accept payments from shoppers.
CyberSource Secure Acceptance Silent Order Post allows Commerce Cloud to send payment card data directly from a shopper’s browser to CyberSource. No credit card data is ever stored on Oracle servers. CyberSource securely stores all the card information, replacing it with a unique identifier called a payment token. The payment token is stored on CyberSource servers and in a property of the associated order on Oracle servers. The token is used in all processing tasks associated with the order, including settlement, refunds, and shipping.
To learn how to create a Silent Order Post profile, see Creating a Silent Order POST Profile in the CyberSource Secure Acceptance Silent Order POST Development Guide.
Note: Commerce Cloud uses HMAC-SHA256 to generate the request signature and validate the response signature for requests and responses sent as part of the CyberSource integration. For more information, see Secure Your Service.
