Staring with version v1.19.10 of the Update Reservation and Get Reservation APIs, Sabre supports Payment Service Directive 2 (PSD2) compliant Strong Customer Authentication (SCA) for payment cards.

PSD2 is a set of rules that change how consumers confirm their identity when making purchases online. The rules apply in full for card payments from 31 December 2020 in the EEA and from 14 September 2021 in the UK.

SCA support in UpdateReservation

When adding a payment card Form of Payment (FOP) to the PNR using Update Reservation, the SCA can be specified:

Sample Request:

Notes:

• For Travel Agencies, when alwaysAddAsFOP is true, the FOP will be added as an Open Reservation FOP element (not as 5- remark) even if the new FOP product functionality (PNAPNR TJR indicator is ON) is not enabled for the agency.
• Only open reservation FOPs can be referenced in lodging requests. We recommend setting this flag to TRUE if the FOP will be used for reference in Lodging requests. Refer to the PSD2/SCA support for Lodging in Update Reservation section for more information.

The schema for SCA includes the following optional attributes:

Sample Schema:

• Validations are not performed by Update Reservation on any attributes. Id and LastUpdateTime do not need to be specified in the request. LastUpdateTime, if specified, will be honored.

• Id is always autogenerated by Update Reservation after sorting SCAs by lastUpdateTime (with 1 being the earliest one). A payment card can have up to 25 SCAs. If more than 25 SCAs are specified, the most recent 25 will be retained.

The SCA may be added to or deleted from an existing Payment Card by using PaymentCardAuthenticationAction:

Add Sample Request

Delete Sample Request

Note: fopElementId is the ID of the FOP Open Reservation element.

SCA support in Get Reservation

Get Reservation v1.19.10 can retrieve SCA data using the payment card's FOP, if present:

Sample Request

Sample Response

The SCA data will also be stored at the end of the current *FOP element(s).

When the credit card is added with SCA data, it will not contain other credit card elements; however, if the SCA is provided with a reference to an existing Payment Card, the credit card may contain some (or all) of the additional elements. In this case, SCA data will be included at the end of the current payment card display.

Note: SCA data is not stored in the host PNR history.

Example Host Basic Display:

FOP

FORM OF PAYMENT                                              
  1. PAYMENT CARD TYPE                                       
     VI4XXXXXXXXXXX1111/1022                           
     SCA COMPLIANCE INFORMATION
     1. AMOUNT – USD 123456.00         TIME/DATE - 1752/12JAN21

Example Host Extended Display:

FOP1/SCA1

FORM OF PAYMENT                                              
  1. PAYMENT CARD TYPE                                       
     *VI4XXXXXXXXXXX1111/1022           
     SCA COMPLIANCE DATA
     1. AMOUNT – USD 123456.00        TIME/DATE - 1752/12JAN21
  EXCEMPTION CODE - EC
  CHANNEL - SC
  CARD NUMBER COLLECTION - K
  MANDATE TYPE - NS
  AUTH TRANS ID - 1234547839012345
  MERCHANT NAME - TEST CREDIT CARD

PSD2/SCA support for Lodging in Update Reservation

Update Reservation v1.19.10 supports PSD2/SCA compliance for lodging in two ways; specify SCA data as part of the payment information in hotel sell or modify request.

When using newRef to specify a payment card as payment in the Hotel Sell/Modify UpdateRes request, SCA data can now be specified inside the payment card (optional). If more than one SCA is specified, the first one will be picked up to be passed to downline systems.

Sample Request

<stl119:UpdateReservationRQ Version="1.19.10" xmlns:or114="http://services.sabre.com/res/or/v1_14" xmlns:stl119="http://webservices.sabre.com/pnrbuilder/v1_19">
    <stl119:RequestType commitTransaction="false" initialIgnore="false"> Stateful</stl119:RequestType>
    <stl119:ReturnOptions RetrievePNR="true" IncludeUpdateDetails="true"/>
    <stl119:ReservationUpdateList>
        <stl119:ReservationUpdateItem>
            <stl119:ProductUpdate op="C">
                <stl119:Product>
                    <or114:ProductDetails>
                        <or114:ProductName type="HHL">Lodging</or114:ProductName>
                        <or114:Lodging>
                            <or114:ResGlobalInfo>
                                <or114:BookingInfo RequestorID="SG11111" CorpDiscount="CD1234567" PromotionalCode="XJKGHLDE" Email="a@b.com">                               <or114:BookingKey>sampleSuccessKey</or114:BookingKey>
                                    <or114:HotelReservationIds>
                                        <or114:HotelReservation Id="123PNR" Type="40"/>
                                    </or114:HotelReservationIds>
                                </or114:BookingInfo>
                                <or114:HotelInfo HotelCode="hotelCode" HotelName="hotelName">
                                    <or114:LocationInfo>
                                        <or114:Contact Fax="+991234567890"/>
                                    </or114:LocationInfo>
                                </or114:HotelInfo>
                                <or114:StayDateRange StartDate="2021-05-04" EndDate="2021-05-07"/>
                                <or114:Total AmountAfterTax="1000.00" CurrencyCode="USD"/>
                            </or114:ResGlobalInfo>
                            <or114:Rooms>
                                <or114:Room SegmentNumber="1" NonSmoking="false" AccessibilityInformation="3" RoomIndex="1" BedTypeCode="1">
<or114:Guests>
                                        <or114:Guest Type="10" Email="FHJQBJGT@EMAIL.COM" Age="44" Index="1" LeadGuest="true" FrequentFlyerNumber="FLY123450" LoyaltyId="LOY123450" FirstName="ZTTHNK" LastName="TDSMOCK" Title="JOECG">
                                    <or114:Contact Phone="614356854531" Mobile="541073441"/>
                                        </or114:Guest>
                                    </or114:Guests>
                                    <or114:RoomDescription Name="roomDesc">
                                        <or114:Text>roomDesc</or114:Text>
                                    </or114:RoomDescription>
                                    <or114:RatePlan RatePlanCode="123"/>
                                    <or114:SpecialInstructions>
                                        <or114:SpecialInstruction>Ocean view</or114:SpecialInstruction>
                                        <or114:SpecialInstruction>Bring only plates</or114:SpecialInstruction>
                                    </or114:SpecialInstructions>
                                </or114:Room>
                            </or114:Rooms>
                            <or114:SpecialInstructions>
                                <or114:SpecialInstruction>Another special Instructions with length exceeding 127 signs to check if constraint works properly and cuts test in right here and this is not seen.</or114:SpecialInstruction>
                            </or114:SpecialInstructions>
                            <or114:PaymentInformation Type="GUARANTEE">
                                <or114:FormOfPaymentReference newRef="9"/>
                            </or114:PaymentInformation>
                            <or114:POS>
                                <or114:Source AgencyName="TDSKit agency" ISOCountryCode="US" PseudoCityCode="61N1">
                                    <or114:RequestorID Type="5" Id="12345678" IdContext="IATA"/>
                                    <or114:AgencyAddress>
                                        <or114:AddressLine1>Wadowicka 6</or114:AddressLine1>
                                        <or114:AddressLine2>Entrance D</or114:AddressLine2>
                                        <or114:AddressLine3>Phone:345-345-345</or114:AddressLine3>
                                        <or114:CityName CityCode="KRK">Krakow</or114:CityName>
                                        <or114:StateProv StateCode="MP">malopolska</or114:StateProv>
                                        <or114:PostalCode>33-200</or114:PostalCode>
                                        <or114:CountryName Code="PL">Poland</or114:CountryName>
                                    </or114:AgencyAddress>
                                    <or114:AgencyContact Phone="9889-8231-1231" Mobile="333 333 999" Fax="234-234-234"/>
                                </or114:Source>
                            </or114:POS>
                        </or114:Lodging>
                    </or114:ProductDetails>
                </stl119:Product>
</stl119:ProductUpdate>
        </stl119:ReservationUpdateItem>
        <stl119:ReservationUpdateItem>
            <stl119:OpenReservationElementUpdate id="9" op="C">
                <stl119:OpenReservationElement id="9" type="FP">
                    <or114:FormOfPayment>
                        <or114:PaymentCard reconcileAsCash="false">
                            <or114:PaymentType>CC</or114:PaymentType>
                            <or114:CardCode>BA</or114:CardCode>
                            <or114:CardNumber tokenized="false" masked="false">4487971000000006</or114:CardNumber>
                            <or114:ExpiryMonth>--12</or114:ExpiryMonth>
                            <or114:ExpiryYear>2022</or114:ExpiryYear>
                            <or114:StrongCustomerAuthentication Channel="SC" CardNumberCollection="K" ExemptionCode="EC" OriginalPaymentRef="1234547839012345" MerchantName="TEST CREDIT CARD" MandateType="NS"/>
                        </or114:PaymentCard>
                    </or114:FormOfPayment>
                </stl119:OpenReservationElement>
            </stl119:OpenReservationElementUpdate>
        </stl119:ReservationUpdateItem>
        <stl119:ReceivedFrom>
            <stl119:Name>LodgingPSD2</stl119:Name>
        </stl119:ReceivedFrom>
    </stl119:ReservationUpdateList>
</stl119:UpdateReservationRQ>