{"section":"tutorials","requestedLocale":"en","requestedSlug":"setting-up-3ds-2-authentication-flow","locale":"en","slug":"setting-up-3ds-2-authentication-flow","path":"docs/en/tutorials/payments/antifraud-and-security/authentication-and-tokenization/setting-up-3ds-2-authentication-flow.md","branch":"main","content":"3DS 2 (EMV 3-D Secure) is a protocol that allows the card-issuing bank to authenticate the buyer during credit and debit card payments. In this tutorial, you'll enable 3DS 2 on the payment provider and validate the authentication flow at checkout. To understand how the protocol works and which versions are in use, see [3D Secure](/docs/tutorials/what-is-3d-secure).\n\n## Before you begin\n\nOn VTEX, 3DS 2 is supported only by select providers and can only be implemented via a [Payment App](https://developers.vtex.com/docs/guides/payments-integration-payment-app#scenario-2-payment-app-and-3d-secure-2), which the provider itself develops to display the authentication challenge at checkout. Before following the next steps, confirm the information with your payment provider:\n\n- **3DS 2 support:** The provider supports 3DS 2 on VTEX and makes the Payment App available.\n- **Authentication type:** Which 3DS authentication types are available under your contract.\n- **Credentials:** What access data the provider requires to authenticate transactions.\n\nYou also need to have the provider configured in **Store Settings** > **Payment** > **Providers**.\n\n## Enabling 3DS 2 on the payment provider\n\n1. In the VTEX Admin, go to **Store Settings** > **Payment** > **Providers**, or type **Providers** in the search bar at the top of the page.\n2. Click the payment provider.\n3. Complete the authentication fields based on the provider's documentation, since field names vary. For example:\n   - **Adyen V3:** In the **3DS Authentication Type** field, choose the authentication type. Full authentication includes buyer interaction and transfers liability for fraud to the issuing bank. Data Only sends risk data without buyer interaction, so that fraud liability may remain with the merchant. This type is only allowed for credit cards in BRL (Brazilian Real). For more details, see [Adyen Connector V3](https://developers.vtex.com/docs/apps/adyen.payment-provider-v3#3ds-authentication-type-required).\n   - **CieloEcommerce:** In the **UseMpi** field, select **True** and complete the Mpi credentials fields. See [Setting up payments with CieloEcommerce](/docs/tutorials/setting-up-payments-with-cieloecommerce).\n4. Click `Save`.\n\n## Validating the authentication flow at checkout\n\n> ℹ️ If the provider has a test mode, such as the **Enable test mode** option in **Payment Control**, validate the flow in that mode before processing real transactions.\n\n1. In your store, add a product to the cart and proceed to checkout.\n2. Select the card payment condition associated with the provider configured in the previous step.\n3. Pay with a single card and complete the purchase.\n4. If the issuing bank requests authentication, confirm your identity in the window displayed at checkout.\n5. In the VTEX Admin, go to **Orders** > **Transactions**, or type **Transactions** in the search bar at the top of the page.\n6. Click the test purchase transaction and check the provider's response in the interactions log. To learn more about the log, see [Viewing transaction details in Orders](/docs/tutorials/how-to-view-the-orders-details).\n\nAfter authentication, the result depends on the payment status:\n\n- If the payment is authorized or still processing, checkout displays the order confirmation.\n- If the payment is denied or canceled, checkout displays a notification and returns to payment method selection.\n\n> ℹ️ In a frictionless authentication, the issuing bank completes 3DS 2 without displaying the challenge. That's why the absence of an authentication window during a test purchase doesn't mean 3DS 2 is inactive.\n\n## Limitations\n\n### Purchases with two cards\n\nOn VTEX, 3DS 2 doesn't support purchases using two credit cards. If an order is placed under these conditions, the payment will be canceled."}