Adobe Commerce | Smartpay Fuse Developer Portal

Product overview

Version number (Latest) : 3.5.8

System requirements:
Apache 2.4+
PHP 8.1+

Adobe Commerce creates engaging shopping moments that integrate both digital and physical experiences, with a leading commerce solution for merchants and brands. Adobe Commerce is a unified commerce solution that lets you manage all content and products in one place, whether you own more than one brand, sell in several countries, or use different business models.

With Adobe Commerce, you gain access to simple and secure payments and fraud management solutions.

Smartpay Fuse has been created in partnership with VISA Cybersource. All features listed on this page are supported on the Smartpay Fuse platform. When you click through to download the plugin you may notice reference to the Cybersource brand and see some features that are not part of the Smartpay Fuse gateway. If you have any questions about this plugin or its feature set then please don’t hesitate to Get in Contact.

Card Payments
3D Secure (SCA Compliant)
Secure Tokenization
Apple Pay
Google Pay
Fraud Management Tools

Integration features SOAP API Flex Microform (our solution for hosted fields) Secure Acceptance Hosted Checkout 3DSecure Device ID
Channels: eComm (CNP) MOTO In-App Payment Methods: Visa MasterCard Maestro American Express Apple Pay Google Pay
Payment Functions: Authorisation Capture Sale Void Full Refund Partial Refund Full Reversal Follow On Credit Standalone Credit Token Management Services (CIT only) Fraud Management: Decision Manager For businesses with an annual turnover of over £6.5M, the additional features listed below can also be made available. If you have any questions, please click here to Get in Contact Payment Methods: Discover Diners Visa Click to Pay Paypal WeChat Klarna iDeal Sofort Bancontact
Payment Functions: Advanced Screening Account Updater Services

Product editions

Compatible with Open Source (CE) : 2.4

Compatible with Commerce on prem (EE) : 2.4

Compatible with Commerce on Cloud (ECE) : 2.4

Getting started

Smartpay Fuse has been created in partnership with VISA Cybersource. All features listed on this page are supported on the Smartpay Fuse platform. When you click through to download the plugin you may notice reference to the Cybersource brand and see some features that are not part of the Smartpay Fuse gateway. If you have any questions about this plugin or its feature set then please don’t hesitate to Get in Contact.

Prerequisite – Have access to your Smartpay Fuse account

You will be able to configure this integration to either Test or Live. If you do not yet have a live Smartpay Fuse account, or you wish to first test the integration, then creating a sandbox account will not only allow you to start programmatic integration but also provides access to the Enterprise Business Centre servicing portal.

Visit our sandbox creation page here.
Complete the registration form.
Click submit to create your sandbox account.

Note: on submitting your application, you will receive an automated email from our partner, Cybersource, with first time login and password reset instructions. Be sure to check your junk mailbox if this doesn’t arrive within 2 minutes of clicking Submit.

Prerequisite - Magento – In order to use the Extension for Magento please make sure you have a working instance of Magento.

a. View the Adobe Commerce Installation Guide and Flow here - Installation flow | Adobe Commerce Developer Guide (magento.com)

b. Set up a Magento Commerce Account - Creating a Commerce Account | Adobe Commerce 2.4 User Guide (magento.com)

c. Log Into the Market Place (ensure you have created an access key, for details please see Adobe support documentation here) - Commerce Marketplace | Adobe Commerce 2.4 User Guide (magento.com)

There are a number of integration types that are supported with this plugin; this quick start guide will direct to the configuration that usilises the Flex Microform and API for processing. This is seen as a 'best practice' approach, however you would like to make use of a different integration approach, please refer to the Extension User Guide.

Create REST Keys (required - will need in addtion to the SOAP key)

a. Sign into your account (Live) or (Test)

b. Access Payment Configuration -> Key Management

c. Select the 'Generate Key' button in the top right hand corner

d. Select your key type as 'REST - Shared Secret Key' and Generate Key

e. Copy your KeyID and Shared Secret Key values and save them securely

Create SOAP Keys (required - will need in addtion to the REST key)

a. Sign into your account (Live) or (Test)

b. Access Payment Configuration -> Key Management

c. Select the 'Generate Key' button in the top right hand corner

d. Select your key type as 'SOAP Toolkit' and Generate Key

e. Copy the Secret Key value and save them securely

Obtain the extension

a. In the Magento Marketplace you have the option to either search for 'Cybersource Payment Management Platform' and select the extension developed by Cybersource or you can access it directly from the following link

b. Select your Magento 'Edition' & 'Store version' i.e. 'Commerce on Cloud' and '2.4'

c. Add your selection to cart

d. Complete checkout*

Upon completion of the checkout you will be granted access keys by Magento to download these into your Magento instance please follow the remaining steps

*Although you're required to go through a checkout process the extension is free of charge and no card details are required to be saved within you Magento Marketplace account

Prepare your Magento Environment

You can now copy your Public and Private Keys into your Magento instance:

a. Go to My Profile -> My Products -> Access Keys

b. Select the Cybersource extension line

c. Copy both the Public and Private Keys

d. In your Magento instance rename auth.json.sample file to auth.json in the Magento root directory on your server, and enter the access keys from steps above.

e. Add the following code text to the auth.json file

            {
     "http-basic":{
        "repo.magento.com": {
            "username": "Your_Public_Key",
            "password": "Your_Private_key"
        }
    }
}

f. Open composer.json and add the following keys and values under the "require" array

            "version": "2.4.6",
         "require": {
                "goetas-webservices/xsd2php-runtime": "^0.2.15",
                "lcobucci/jwt": "4.1.5",
}

Download the Extension

Now that you've prepared the environment you just need to import the code base through Composer. In order to do this run the following commands:

a. Import the extension code

            composer require cybersource/global-payment-management
composer require cybersource/module-recaptcha

b. Enable modules

            php bin/magento module:enable CyberSource_AccountUpdater CyberSource_Core CyberSource_ApplePay CyberSource_Atp CyberSource_BankTransfer CyberSource_SecureAcceptance CyberSource_ECheck CyberSource_GooglePay CyberSource_KlarnaFinancial CyberSource_VisaCheckout CyberSource_Address CyberSource_Tax CyberSource_ThreeDSecure CyberSource_PayPal CyberSource_WeChatPay CyberSource_Recaptcha

c. Update, Compile and Deploy*

*Please run the below lines individually

            php bin/magento setup:di:compile
php bin/magento indexer:reindex
php bin/magento setup:upgrade
php bin/magento setup:static-content:deploy -f
php bin/magento cache:clean
php bin/magento cache:flush
php bin/magento module:status

You can now validate the install has been successful in two ways:

A Cybersource folder structure should now be visible under your 'Vendor' folder.
When accessing Stores -> Configuration -> Sales -> Payment Methods you will see the Cybersource configuration options

Initial Configuration

Although we have added flexible integration options, we recommend utilising our Flex Microform solution for capturing card details, this provides a full PCI-A Solution offering flexibility around your chosen UI.

General Settings -> Webservice Configurations

a. Enter your Merchant ID (SmartPay Fuse Organization ID)

b. Test Mode -> If set to yes will point all transactions to TEST system (Please ensure you are using the correct credentials for the environment you're pointing to)

SOAP Settings

a. Enter Transaction Key (Created in Step 1)

REST Settings

a. Enter Key ID (Created in Step 1)

b. Enter Shared Secret Key (Created in Step 1)

Credit Card Settings

a. Set Enabled to Yes

b. Set 'Title' to the value you would like card payments to appear under in your Store Front

c. Select Payment API as 'SOAP Toolkit'

d. Select Checkout Flow Mode as 'Flex Microform'

Device Fingerprint Settings

a. Set Enabled to Yes

b. Do not alter the masked value for Org ID. This value is populated by default.

Security Best Practice Guidance

According to industry best practices, the hosting environment should enable rate limiting or implement a service like Cloudflare that will protect against a wide range of attacks.

As a starting point a merchant should have their environment setup with rate limits for all web applications and additional limits for the following endpoints:

/Cybersource3ds/cca/requestToken
- Limit to 5 POST requests per session per minute
- Limit to 20 POST requests per IP per minute for unknown networks
- Limit to 500 POST requests per IP per minute for known networks
/Cybersource/index/loadSilentData/
- Limit to 5 POST requests per session per minute
- Limit to 20 POST requests per IP per minute for unknown networks
- Limit to 500 POST requests per IP per minute for known networks
/Cybersource/index/placeorder/
- Limit to 5 POST requests per session per minute
- Limit to 20 POST requests per IP per minute for unknown networks
- Limit to 500 POST requests per IP per minute for known networks

These numbers are recommendations only, and each environment should be monitored on a high and average traffic volume day to determine the actual values of the rate limit that will not affect the consumer experience.

As additional security measures, the following could be done:

Implement reCAPTCHA as an option during checkout (see Section 4.2.7 of User Guide)
Modify the payment module to allow for session / IP rate limiting in Magento web application

Further Information

Testing Guide landing page can be found here

Generic test card numbers (no 3DS) can be found here

3DS testing use cases can be found here

Information on PCI-DSS for each of the integration options can be found here

For in-depth guide on configuring the Adobe Commerce Extension please refer to the Extension User Guide.