Authorize.net Payments

About the Extension

Authorize.net is one of the world's largest payment gateways, serving over 400,000 merchants. Their services allow you to accept payment from your customers, by credit card or eCheck, straight from your website. You must have an Authorize.net account to use this extension (account fees will vary).

This extension brings Authorize.net's payment processing services to your Shopware store.

Note: Authorize.Net does not support PSD2/SCA. This extension is intended for US merchants.

Note: Use of this extension will transmit customer and order data to Authorize.net, your Authorize.net Merchant Service Provider, and the customer's credit card processor, for payment processing and fraud prevention.

How it works

When a customer goes to checkout, they'll have a Credit Card option for payment. Selecting this will direct them to place the order. After hitting 'place order', they'll be sent to another page to enter their payment information and complete payment.

The payment form uses Authorize.net's Accept Hosted iframe solution, meaning payment information is entered directly at Authorize.net and never touches your website, without the customer ever leaving your site. This gives you the best possible security, while also being mobile- and responsive-friendly and giving a consistent user experience throughout the process.

If the customer is logged in or registers, they'll also have the option of saving their payment info for future use when checking out. If they do so, the next time they place an order they'll be able to choose their saved card or enter a new one. This is done using Authorize.net's Customer Information Manager service to tokenize the data in their secure and PCI-compliant network.

If you place an admin order for a customer, they will receive an email directing them to your website to enter payment information to pay for the order.

Transaction changes (including capturing, voiding, refunding, approving/denying, etc.) can be done in Authorize.net's portal, or through an Authorize.net-compatible ERP or order manager. All transaction changes at Authorize.net will be synchronized and automatically update the order payment status in Shopware.

Trusted

ParadoxLabs has been creating and maintaining Authorize.net certified solutions since 2013. Our payment extensions are used on thousands of ecommerce stores, and process billions of dollars in transaction volume per year.

Secure

All communication with Authorize.net is performed with TLS encryption, and no confidential cardholder data is ever stored on your own server. A process called tokenization is used to run transactions with stored payment information. This lets your customers pay with a 'saved' card that's not on your server at all.

All payment information is collected via Authorize.net's Accept Hosted payment forms. This allows credit card information to be sent straight from your customers' browsers to Authorize.Net, without touching your website at all. Since your web server never sees the raw credit card number, this improves your website's security and reduces your PCI compliance exposure.

PCI Compliant

PCI compliance is a complex and multifaceted issue, covering every aspect of your business. We can't guarantee that your business is PCI-compliant. That depends on your server, policies, processes, regular security scans, other payment methods offered, and a lot more. What we can tell you is that this extension will not prevent you from being PCI compliant. We don't store or log confidential cardholder data.

All customer payment info is sent directly to Authorize.net using hosted payment forms. That makes this extension compliant with PCI Self-Assessment Questionnaire (SAQ) A, the simplest compliance form.

Known Issues and Limitations

This is an early release of this payment method. All payment processing will work as described, however there are some feature limitations. If you need any of these, please express your interest. Thanks!

We do not currently support:

• Shopware Cloud. Shopware Cloud only supports redirect-type payment methods.
• Shopware APIs.
• PWA and headless storefronts.
• Multiple currencies. Authorize.net only supports one currency per account. All transactions must be processed in the same currency as your Authorize.net account. No currency conversion is currently supported.
• Shopware Admin payment actions. All transaction processing including capturing, refunding, voiding, and fraud review must be performed through the Authorize.net portal or an other Authorize.net-connected service.
• Partial capturing or refunding. Orders must be captured, voided, or refunded in full at this time.

With the exception of Shopware Cloud, we hope to address these over time as need and opportunity allow.