Public Release Note - Cybersource Service Connector 1

1 Introduction

Welcome to the Intershop Cybersource Service Connector. The service connector adds Cybersource payment methods to your Intershop installation.

This document provides important product information, including version information and dependencies. It also outlines the basic setup and configuration steps.

1.1 PCI Compliance

The least burdensome level of PCI compliance is SAQ A. To achieve this compliance, the connector securely captures sensitive payment data using the validated Cybersource APIs.
To meet this requirement, UI integration has to render secure iframes for the payment card and card verification number input fields by using Cybersource's Flex Microform. These iframes are hosted by Cybersource and payment data is submitted directly to Cybersource through the secure Flex API, never touching your systems.

This UI integration is provided by the PWA by accessing the connector through the Intershop REST API.

1.2 Glossary

Oops, it seems that you need to place a table or a macro generating a table within the Table Filter macro.

The table is being loaded. Please wait for a bit ...

APIApplication Programming Interface
CVCCard Validation Code
ICMIntershop Commerce Management
motoMobile Order / Telephone Order
PWAProgressive Web App

REpresentational State Transfer

UIUser Interface

1.3 References

1.4 Version Information and Dependencies

This delivery and the accompanying documentation are valid for the following combination of software versions:

IntershopSupported Application TypesPWACybersource Service Connector


The next table provides information about the cartridges included in the package.

ac_payment_cybersourceIncludes all base functionality and business logic which is used.(tick)

The Cybersource Service Connector is based on the Payment API introduced in IS 7.6.

1.5 Supported Application Types

The Cybersource Service Connector can be used for the following application types:

Application TypeApplication Type IDDescription
Progressive Web Appintershop.RESTBusiness to Customer and Business Channel via REST API

Documentation for the REST API can be found here:

2 Setup

For information on setup, customization and configuration, please refer to Guide - Setup Cybersource Service Connector.

3 Feature Overview

3.1 Payment Methods

The Cybersource Service Connector adds the following payment methods to your Intershop 7 system:

Payment Method TypePayment MethodAuto CaptureManual Capture*Cancel*ReduceRefund
Credit Card

Credit Card Payment supported by Cybersource

(tick)(tick)(tick)    (error)(error)

* Only available if the corresponding payment method's Capture Mode is set to manual.

3.2 Payment Management Options

The following table lists all options for payment transactions that can be triggered manually in the ICM:

CaptureRequest for settling the payment. This action is only available if the corresponding payment method's Capture Mode is set to manual.
CancelRequest for abandoning a payment settlement. This action is only available if the corresponding payment method's Capture Mode is set to manual.

4 Data Handling

The following table describes transmitted data by the Cybersource Service Connector from ICM to Cybersource during the payment process:

DescriptionCybersource Payment Methods

Credit Card
Initial amountAmount for the transaction(tick)
Currency detailsCurrency code e.g. USD(tick)
Customer detailsCustomer first name, last name, and e-mail(tick)
Merchant order idOrder reference generated by the merchant(tick)
Commerce indicatorType of transaction (internet, moto, install, recurring, and recurring_internet)(tick)
Address detailsInvoice and shipping address details(tick)
Line items detailsDetails regarding product, shipping, discount, tax, gift card(tick)
Payment instrument IdTokenized identifier for customer account that can be stored and used for future transactions(tick)
Credit card details

Card number, CVC, expiry date. Sensitive data is handled via Flex Microform iframes only and is never stored at the merchant.


Flow Diagram

5 Limitations

  • Token generated for a credit card payment instrument is valid only for 15 minutes. The order fails at Cybersource in case the token is expired. This is planned within release 1.1 or 1.2 with ISCS-78.

6 Changelog

6.1 Version CYBERSOURCE/1.0.0

  • First release including credit card payment method


The information provided in the Knowledge Base may not be applicable to all systems and situations. Intershop Communications will not be liable to any party for any direct or indirect damages resulting from the use of the Customer Support section of the Intershop Corporate Web site, including, without limitation, any lost profits, business interruption, loss of programs or other data on your information handling system.

Customer Support
Knowledge Base
Product Resources