IMPORTANT NOTICE:
The new Authorize API Gateway is now available!
If you don't know if you have the most recent version of Authorize.net gateway installed yet, or have noticed a break in service, please reach out to support for assistance. Again, this article is for any ProductCart merchant who is using Authorize.net or plans to use it with ProductCart versions 5.2.1 to v5.4.1. If you want to guarantee uninterrupted service and have a more secure checkout, then the new API will be a requirement.
For those who wish to install this upgrade for their own store and have an active Support and Updates Plan, log into your ProductCart control panel, and click HELP >> CHECK FOR UPDATES and look for Authorize API.
For install instructions and setting, read this article:
INSTALL ARTICLE: https://docs.productcart.com/link/article/new-authorize-api-install-settings
NOTE: Depending on the time of reading this article and if you are running v5.4.1 or older, you may be able to also install the AIM patch to fix the endpoint issue from October 2024. This is a temporary solution which may not be future compatible or dependable long term. If you install this patch, or the new API, please ensure you adhere to the information below in the Pre-Install Checklist for Hosting.
Pre-Install Checklist for Hosting
If you are not hosting with NetSource Technologies, you will need to verify the following things are handled by your website hosting (click links to view Authorize Support articles):
New Authorize.NET API Additional Features
- Batch Processing is Enabled on ProductCart.
- Ability to Capture Funds for “Authorized” Orders through ProductCart.
- Ability to Void Payments for “Cancelled” Orders through ProductCart.
- Supersedes and Replaces Legacy Authorize.net AIM Integration
- Fraud management through Authrize.net Gateway.
Limitations
- This update is NOT intended to fix the Legacy Integration endpoints. Read article here https://support.authorize.net/knowledgebase/Knowledgearticle/?code=KA-07157
- Customer checkout and payment experience remain the same, with card form on it’s own page after the one-page-checkout.
What to Know Before Installing - FAQs
What versions of ProductCart will the New Authorize.net integration be compatible?
This one install set will work for ProductCart versions v5.2.1 to v5.4.1.
Does your account type or connection need updated?
Account type and credentials should remain the same. As far as connections, merchant clients may need to go into their Authorize Account and create a set of NEW keys for API access and plug the into the ProductCart Authorize.net configuration screen. However, these things should be handled through the onboarding process automatically after installation.
How to set up Authorize.net after installation?
Please refer to our INSTALL ARTICLE for full details.
Does the New Authorize use 3DS?
No it doesn't use 3DS secure.
Is the New Authorize API more secure?
Yes, the new Authorize API has improved PCI compliance since it uses OAuth 2.0 which is a current industry standard and credit cards are no longer be stored on the ProductCart database as in the previous AIM integration.
The API also provides better security than its predecessors (like AIM) due to the fact it runs on frequently changing access tokens which validate the merchant with Authorize. Previous integrations use fixed keys which are at higher risk of a "middle man" attack if secret keys are compromised. This is not the case with the new API, as the secure validation is checked and renewed constantly.
What existing folders/files are affected?
New files will overlay over the Legacy AIM integration files, with the additional new gateway files which shouldn’t interfere with other payment applications.
What other payment options exist?
For a list of complete payment solutions through ProductCart, read about our Supported Gateways.
Do I need the New Authorize.net API?
Yes, all previous integrations have been depreciated and are considered legacy by Authorize.
Are there install instructions for New Authorize API?
Yes, please refer to our INSTALL ARTICLE for full details.
Does the New Authorize API Look Different?
Both the Legacy AIM integration and API look almost identical. The major differences is that the New API has only four steps in settings compared to five steps, and a "Connect/Refresh" button on the top of the settings page for connecting your account or a different account.
NOTE: The new API doesn't store credit cards on ProductCart to reauthorize and charge customers anything more than the original order total. However, if your business model requires the flexibility to charge more after a completed "Authorized" order, it is still possible. You just need to add a processing fee by a fixed amount or percentage on Step 2 of settings to accommodate the need for making increased price adjustments after taxes, shipping or other fees are calculated post completed order.
NEW Authorize API Screenshot (When Connected)
Legacy Authorize AIM Screenshot
Helpful Authorize Links
This page shows that new Authorize API is the current alternative and replacing SOAP API + AIM -> https://developer.authorize.net/api/upgrade_guide.html
Features and Details of API -> https://support.authorize.net/knowledgebase/Knowledgearticle/?code=000001271
For information about the ProductCart Authorize Patch for AIM Integration, click here!