The 3-D Secure authentication protocol is based on a three-domain model where the Acquirer Domain and the Issuer Domain are connected by the Interoperability Domain for the purpose of authenticating a Cardholder during an electronic commerce (e-commerce) transaction or to provide identity verification and account confirmation.
PAYMENT GATEWAY
- [THK] A. SIBS Payment Gateway Introduction
- [THK] B. Integration Models
- [THK] C. Meta Information, Codes and Transaction States
- [THK] C.1 Transaction Meta Information Structure
- [THK] C.2 Field Semantics and Validation Rules
- [THK] C.3 Transaction States and Operational Meaning
- [THK] C.4 Transaction State Transition Model
- [THK] C.5 Status Codes and Error Codes Mapping
- [THK] C.6 Error Payloads and Handling Guidelines
- [THK] C.7 State Reconciliation: Query vs Webhook
- [THK] C.8 Troubleshooting Guide
- [THK] D. Payment Methods
- [THK] D.1 One-Off Payments
- [THK] D.2 Recurring Payments
- [THK] D.3 Two-step payment
- [THK] E. Notifications and Transaction Status
- [THK] E.1 Webhooks (Notifications)
- [THK] E.1.1 Generic Webhook Structure
- [THK] E.1.2 Webhook Payload Variants by Payment Method
- [THK] E.1.3 Webhook Delivery, Retries and Idempotency
- [THK] E.1.4 Receiving and Processing Webhooks
- [THK] E.1.5 Security and Validation
- [THK] E.1.6 Logging and Monitoring
- [THK] E.1.7 Webhook Configuration (SIBS SPG Backoffice)
- [THK] E.1.8 Webhooks vs Status API (Consistency Model)
- [THK] E.2 Status Inquiry / Get Status
- [THK] E.2.1 Overview and Role in the Transaction Lifecycle
- [THK] E.2.2 Status Inquiry Endpoint Specification
- [THK] E.2.3 Response Payload Structure
- [THK] E.2.4 Status Semantics and Interpretation
- [THK] E.2.5 Polling Strategy and Best Practices
- [THK] E.2.6 Consistency Model: Query vs Webhook
- [THK] E.2.7 Reconciliation Patterns
- [THK] E.2.8 Error Handling and Edge Cases
- [THK] E.2.9 End-to-End Example
- [THK] E.1 Webhooks (Notifications)
- [THK] F. Technical Examples and Best Practices
- [THK] F.1 End-to-End Integration Examples
- [THK] F.1.1 End-to-End Example – One-Off Payment (Credit Card – Form Integration)
- [THK] F.1.2 End-to-End Example – Two-Step Payment (Credit Card – AUTH → CAPTURE)
- [THK] F.1.3 End-to-End Example – One-Off Payment (MB WAY)
- [THK] F.1.4 End-to-End Example – One-Off Payment (Multibanco Reference)
- [THK] F.1.5 End-to-End Example – Recurring Payment (Credit Card – CIT & MIT)
- [THK] F.1.6 End-to-End Example – MB WAY Mandate and Collection
- [THK] F.2 Requests and Responses (Annotated)
- [THK] F.2.1 Generic Request Structure (Annotated)
- [THK] F.2.2 Generic Response Structure (Annotated)
- [THK] F.2.3 Credit Card – Annotated Requests and Responses
- [THK] F.2.4 MB WAY – Annotated Requests and Responses
- [THK] F.2.5 Multibanco Reference – Annotated Requests and Responses
- [THK] F.2.6 Recurring and MIT – Annotated Requests and Responses
- [THK] F.2.7 Error Scenarios and Edge Cases (Annotated Payloads)
- [THK] F.3 Success and Error Scenarios
- [THK] F.4 Security Best Practices
- [THK] F.5 Logging and Monitoring Best Practices
- [THK] F.6 Production Readiness Guidelines
- [THK] F.6.1 Environment and Configuration Readiness
- [THK] F.6.2 Transaction Idempotency and Duplicate Protection
- [THK] F.6.3 Asynchronous Flow Readiness
- [THK] F.6.4 Webhook Reliability and Processing Guarantees
- [THK] F.6.5 End-to-End Flow Validation Before Go-Live
- [THK] F.6.6 Operational Resilience and Failure Strategy
- [THK] F.6.7 Production Observability Prerequisites
- [THK] F.6.8 Data Integrity and Consistency Controls
- [THK] F.6.9 Go-Live Checklist (Final Gate)
- [THK] F.7 Common Integration Pitfalls
- [THK] F.7.1 Misinterpreting Payment Finality (Synchronous vs Asynchronous)
- [THK] F.7.2 Incomplete Transaction Lifecycle Handling
- [THK] F.7.3 Incorrect Use of Status Inquiry vs Webhooks
- [THK] F.7.4 Weak Transaction Correlation Across Systems
- [THK] F.7.5 Improper Handling of Retries and Duplicates
- [THK] F.7.6 Treating Sandbox Behavior as Production-Equivalent
- [THK] F.7.7 Blocking or Synchronous Processing in Asynchronous Flows
- [THK] F.7.8 Ignoring Payment Method-Specific Behavioral Differences
- [THK] F.7.9 Inadequate Error Interpretation and Handling Strategy
- [THK] F.7.10 Lack of End-to-End Validation Mindset
- [THK] F.8 Sandbox Reproducible Examples
- [THK] F.9 cURL and Postman Collections
- [THK] F.10 Webhook Integration Examples
- [THK] F.11 Cross-Chapter Consistency Notes
- [THK] F.1 End-to-End Integration Examples
- [THK] G. Backoffice SPG and vTerminal (Operations)
- SIBS Payment Gateway
- Get started
- Use cases
- Integrations
- Payment methods
- Transaction types
- Notifications
- SIBS Backoffice
- Development resources
- FAQs SIBS Gateway
- Release notes
- Themify – Layout Parts