Set up and configure a Worldpay 1.4 or Worldpay (Corporate Gateway) instance

Disable Capture Delay

It is very important that you disable capture delay in Worldpay, as Zuora issues a separate capture call after the authorization occurs. Log in to the Merchant Interface for the desired environment, and locate the setting Capture delay (days). Set this to -off to disable capture delay.

$0 Authorization Support

As is common with payment gateways, Worldpay can check that customer's credit card is valid by issuing an authorization for an amount of money. Worldpay provides you with the option to enable $0 authorization, so that authorizations can be issued without leaving a trace on the customer's card history. To enable this optional feature please contact Worldpay Support.

Whether or not requests for $0 amounts are authorized depends on the specific bank and currency the customer uses. Although many financial institutions accept small authorization amounts (for example, $0.01 or $0), there are a number of banks that do not. These banks will reject cards that may or may not be valid simply due to the size of the authorization amount. This will affect cards entered in the Zuora Payments UI as well as through the API. In these cases, you should increase the default authorization amount.

Risk Screening

Worldpay authorization supports Address Verification Service (AVS), and Card Verification Value / Card Verification Code (CVV2, CVC). These provide a mechanism for checking the authenticity of a transaction by comparing information entered by the shopper during the payment process, with details held by the card issuer. You can also configure whether to receive the AVS/CVC result code or message in the authorization response. If enabled, Zuora will record the value returned without interpretation.

Worldpay offers two fraud screening products; Risk Management Module (RMM) and Risk Guardian (RG). Both of these allow you to configure the mapping from the risk check results to the authorization result. If you choose to use either of these products, you must configure the settings in the Merchant Interface for both live and test environments.

Define Shop Name and Shop URL

Worldpay allows you to set values for ‘Shop name’ and ‘Shop Url’ (which define the name of your business and URL of your website). To do this, visit the Merchant Interface for the live or test environment and set the values in your profile, or contact Worldpay Support to request that they do this on your behalf.

Discover Card Support

Worldpay supports payments by Discover card, but this is disabled by default. If you would like to issue payments with Discover cards in Zuora, please contact Worldpay Support to enable this feature.

Single Euro Payment Area (SEPA) Direct Debit Payments 

By default, the Worldpay SEPA integration supports direct debit payments for these countries: Austria, Belgium, France, Germany, Ireland, Italy, Netherlands and Spain. SEPA trade schemes vary between countries and there is a settlement delay of 1 to 5 business days.

The following fields are required by Worldpay for saving a SEPA payment in Zuora:

• Select SEPA from the Bank Transfer Type drop-down 
• Valid Bank Transfer Account Number and Name.

e-Mandates

e-Mandates are online agreements between the shopper/consumer and Worldpay. It is the obligation of the merchant to create your own SEPA Direct Debit e-Mandate and present the e-Mandate to the shopper using this payment method. The following e-mandate fields need to be sent to Worldpay:

• Shopper email address
• Merchant name
• Mandate ID or reference information
• Account holder's name
• Mandate type (one-time, recurring, etc.)
• IBAN

Worldpay Credentials

Your credentials should be obtained from Worldpay and configured in Zuora. 

Merchant Code

The Merchant Code is a unique value that identifies a merchant account in the Worldpay system. The code is submitted with every payment transaction sent from Zuora to Worldpay. Worldpay uses the same Merchant code for test and live transactions (but different XML passwords).

It is possible to have more than one merchant code under an administration code, which is a unique code that identifies a Worldpay merchant. The administration code is a reference under which all the merchant codes that a merchant has with the Worldpay payment service are stored, however it is not used in the API calls.

Merchant code switching is not supported. If you would like to process transactions for different types of customer interactions (e.g. e-commerce or moto) or to have multiple settlement currencies, then you need to create separate Worldpay gateway instances for each. Each gateway instance has its own unique Worldpay merchant code.

User Name and Password

The password here is your XML password, used for making calls to the Worldpay API. It is not the password used for logging into the Merchant Interfaces.

For security reasons, the passwords for the live and test environments are different. Log in to the Worldpay Merchant Interface to find the XML password for the live environment, and log in to Worldpay Merchant Test Interface for the test environment.

Merchant ID

This field is only available in Worldpay 1.4. The merchant ID is unique per each merchant code assigned to your merchant account by Worldpay.

3D Secure 2.0 Organisational Unit Id

This field is only available in Worldpay 1.4 and is required if you want to enable 3D Secure 2.0. This is the identity associated with your merchant account for 3D Secure 2.0. Contact Worldpay Merchant Support to get this information.

3D Secure 2.0 Issuer

This field is only available in Worldpay 1.4 and is required if you want to enable 3D Secure 2.0. This is the identifier to indicate who is issuing the JWT for 3D Secure 2.0. Contact Worldpay Merchant Support to get this information.

3D Secure 2.0 JWT MAC Key

This field is only available in Worldpay 1.4 and is required if you want to enable 3D Secure 2.0. This is a base64url encoded hash value of the header and payload combined with a JWT MAC Key for 3D Secure 2.0. Contact Worldpay Merchant Support to get this information.

To enable 3D Secure 2.0 for Worldpay gateway integration, see Enable 3D Secure 2.0 for Worldpay gateway integration for more information.

Accessing Test or Live Environment from Zuora

When configuring the Worldpay payment gateway in Zuora, you can indicate whether you would like to use the Worldpay test environment or the Worldpay live environment. 

• If you select Use Gateway Test Environment, Zuora will direct payment transactions to your Worldpay test environment.
• If you do not select Use Gateway Test Environment, Zuora will direct payment transactions to your Worldpay live environment.

For additional information visit the Worldpay Support Center. Visit the Worldpay Developer Portal where you will find what you need to quickly start using Worldpay payment gateway and value-added services. 

Integration Testing

Zuora maintains the integration with Worldpay on an ongoing basis, thoroughly testing the integration with every new release. The Worldpay integration documentation is helpful if you are integrating Worldpay directly with your website, however, you do not need to perform any integration or certification testing to submit transactions to Worldpay via the Zuora application. The intended audience for the integration guides are technical integrators, however, these documents can be helpful to non-technical integrators who can refer to it for information on testing and troubleshooting gateway errors (as described below). 

Performance and Volume Testing

In general, gateway testing environments are intended to give merchants the opportunity to test their gateway and integrations to their gateway, in order to work out any bugs before going to the production environment. Some gateway test environments are shared amongst multiple merchants, and other gateways provide unique testing environments for each merchant. Additionally, gateway test environments (also referred to as certification or sandbox environments) do not have the same high availability or performance capability as production environments. As such, they are not intended for load testing. Merchants performing high volumes of load testing that puts a stress on a shared test environment may receive a warning from the gateway or have their access to the testing environment suspended

Make Sure You Are Not Re-Trying an Invalid Card Too Many Times

We recommend that you check the payment in Zuora to see how many times the same payment method has been retried for payment and failed. If there have been several retries, check the error messages from the beginning with the first failure and the more recent failures to determine if the error message is the same. If a merchant tries to process a payment against the same credit card too many times despite receiving errors, this could trigger warnings to the card issuing bank. The card issuing bank may place an alert on the account and not allow any further transactions from the merchant using that payment method. When a mechant has been flagged, the error received on the payment may be not state the reason why, instead it might be a generic decline error. In this case, the merchant (Zuora customer) should work with their merchant acquirer/processor to see if they can identify the problem with the payment method. If the processor does not know, then the merchant and/or the card holder can try calling their card issuing bank to look into the issue.