I just followed the MPGS Direct Flow Using Session What I do. !
- Create Session
- Update Session With Card
- Initiate Authentication
- Authenticate Payer | Response - AUTHENTICATION_PENDING
- and then when we hit pay API they will return and rejected
{ "response":{ "gatewayCode":"BLOCKED" }, "result":"FAILURE", "risk":{ "response":{ "gatewayCode":"REJECTED", "review":{ "decision":"NOT_REQUIRED", "note":"" }, "rule":[ { "data":"GATEWAY_RECOMMENDS_REJECT", "name":"MSO_3D_SECURE", "recommendation":"REJECT", "type":"MSO_RULE" }, { "data":"512345", "name":"MSO_BIN_RANGE", "recommendation":"NO_ACTION", "type":"MSO_RULE" }, { "data":"127.0.0.1", "name":"MSO_IP_ADDRESS_RANGE", "recommendation":"NO_ACTION", "type":"MSO_RULE" }, { "data":"UK1", "name":"MSO_IP_COUNTRY", "recommendation":"NO_ACTION", "type":"MSO_RULE" } ] } } }
authentication result depends on the response that came from the issuer bank and sent to acquirer bank to allow him to proceed with pay operation, pay operation to proceed in MPGS first ProcessACS operation should return AUTHINTACATION_SUCCEESSFULL or at least AUTHENTACATION_ATTEMPTE (certain cases can be accepted based on liability mode) otherwise you get rejected.