NMI - Payment Processing Account With Tokenization

NMI - Payment Processing Account With Tokenization

Info
Module: Payment Processing Account 
Topic: NMI Payment Processing Account with Tokenization 
Version(s): Version 5.1 & up
Editions: All Editions

Tokenizing Your Payments

The Payment Processing Account Token Generation feature is optional. This feature allows tokenization of payment methods within OrderLogix in order to securely process payments for the customer. Tokenization replaces sensitive data with non-sensitive data and is used to safeguard a card's PAN (primary account number) by replacing it with a unique string of numbers. This secure token can then also be stored in the customer's payment profiles on the customer's detail center for future billing use.

There are multiple places within OrderLogix to take into consideration when it comes to generating and managing tokens. The first step is to set up the payment processing account that the tokens will be created through. This article will show you how to set up and manage this feature for the NMI payment gateway.

Warning

This feature is for creating Token profiles, not updating Token profiles. If a customer's credit card expires you can:
  1. You can login to your NMI account and sign up for a paid feature of account updater.
    1. Account Updater automatically checks for changes to card information stored with your recurring subscriptions and customer profiles and updates the card information, if available from the card issuer. Using Account Updater can help you avoid declines due to out-of-date card numbers or expiration dates.
      OR
  2. Create a new Token profile and associate open orders and continuities with the new Token profile.
    1. Updating the expiration date on current Token profile in the system will not update the gateway with the new expiration date and orders will continue to fail payment processing.


Making The Connection

Where Will I See This Within OLX?

What Reports Can Be Pulled?

What Imports/Exports Relate to NMI

Currently there are no import nor exports for creating or editing PPA's

Trouble Shooting

  1. Agent receives error during order entry - Object variable or With block variable not set.

    1. check settings on gateway for Card Verification before storing the card in the vault.

  2. Agent receives error "responsetext":"You do not have permission to use the Customer Vault  REFID:71149490"

    1. Login to NMI > navigate to settings > under general options click on User Accounts > click on user to access settings > scroll down towards bottom of screen to check box for Access the Customer Vault > Save changes

  3. A token can only be used in the account it is created in.

    1. A payment profile that has been tokenized will fail payment processing if attempting to process payment in any other payment account

Setup

The Payment Processing Account Token Generation feature is optional, and turned off by default so it would need to be enabled by a programmer as there isn't an option to "enable" by a user in the GUI. This feature allows tokenization of payment methods within OrderLogix, in order to securely process payments for the customer. 

Payment Processing Account Set up:

Navigate to Campaigns > Payment Data > Payment processing accounts and click the  edit pencil icon next to the one you are modifying or the  add new button to create a brand-new account:



The labels for each field under the selected payment processor are specific to values needed to be passed to the gateway for a token to be generated and will vary depending on what processor you are integrating with. 

The payment processing account settings for NMI contain values that allow the user to determine

  1. Payment Processor = Network_Merchants_Interface
  2. Tokenization Key = NMI Public Security Keys
  3. Login Username = NMI User
  4. Login Password = NMI Private Security Keys
  5. Confirm Password = NMI Private Security Keys

Once you enter all of the required fields for the account and ensure that the "Allow Tokenization" checkbox is selected you can save the settings and then move onto associating desired script(s).

Alert
If you utilize Account Updater you may want to check the setting for Ignore past expiration dates


Where to Find Values in NMI

  1. Login to your Gateway account. 
  2. Click on Settings
  3. Security Keys
    1. Private Security Keys (Login Password and Confirm Password)
      1. Find the user and confirm source = API, Cart
      2. Copy Key
    2. Public Security Keys (Tokenization Key)
      1. Find the user and confirm source = tokenization
      2. Copy Key

Maintaining Scripts:

Once you are ready to test, or activate the payment processing account to generate tokens via the order entry screen you can navigate to Campaigns > Advertising > Maintain Scripts and click on the "Payment" tab:

You will notice when you allow real time auth for pre-authorizations, not only does the standard "payment processing account" display but now there is also a "payment processing account" for tokenization and these MUST be the same. If you have 2 different accounts selected, you will see the following message appear:


Once you have the NMI account selected for the desired script(s) then tokens can be created from the order entry screen when manual orders are submitted.


Order Entry:

When users access the order entry screen after the previous steps have been taken, the payment method entry is going to be considerably different. All of the customer's billing and shipping information would be entered with no change, however once you select the method of payment from the drop-down menu you will see a new button that says  "Set Payment." You will only see this option when tokenization is activated for a script:



Once the "set payment" button is selected, the following payment information window will pop up:


All of the fields that are displayed in the pop up are required and must be filled out before the "create token" button can be selected.


When you see the Token Created followed by token information you can save the payment information screen, a token will be set for the customer's information:



If the customer wishes to change their method of payment, before the pre-auth or submission is conducted you can simply click on the "set payment" button in order to wipe the slate clean and enter new information. Keep in mind that when accessing the payment information a second time on the order screen, you will not see what the previous information was only a blank screen for you to enter new information.

The customer and payment values are generated at the payment processor level, and displayed in OLX within the token value which also contains the last 4 numbers of the CC. Now we will take a look at how this information is displayed on the customer's order screen, when it's not broken out and how customer service will manage tokens within payment profiles.


Order Detail Screen:

Orders with tokens instead of their primary account number will be easily identified under the payment information on the detail screen:



If a change needs to be made to the payment information, and the item(s) on the order are in eligible status(es) then you can click into the  edit pencil icon in order to modify the payment data. The Payment Information window will pop up, displaying the current token details:



If a new token for the order needs to be generated then you will click the  "generate new token" icon located beside the current token, which will then launch the same payment information screen that we saw on the order entry screen. This allows you to enter brand new information in order to create a new token for the order, and will show pending until the response comes back from the processor:




You will then see that the "token details" located at the bottom of the payment information window will be updated as well:



Customer Detail Screen:

Customers that have tokens applied to orders will have this information securely stored on their detail center in the payment profile section, for use on future continuity and or one-time orders. Once viewing the payment profile tab, you will see all profiles stored for a given customer and a "dummy" credit card number will be applied to the "credit card number" field in the profile based on the details stored in the system preferences section. This is necessary due to the CC details being required on order, however if a token is present that will trump the card number. The token will be visible to the right-hand side of the payment profile details:


If the profile needs to be modified, click the edit pencil icon and the "edit payment profile" window will appear as seen below:


Generating a new token for the profile will work the same way as shown in the order detail section of this article.


Importing orders with tokens:

A Token generated via different payment gateways can be used for continuity or one time billing and imported via either the OrderLogix API or Order Import v4. To accompany the Token, the following must also be sent:
  1. MERCHANT_TRANSACTION_ID
  2. PAYMENT_METHOD = CC.
  3. CC_TYPE
    1. V=Visa, MC=MasterCard, D=Discover, A = American Express
  4. EXP_DATE
  5. TOKEN
  6. PAY_PROC_ACCT

Example:
<MERCHANT_TRANSACTION_ID>123456</MERCHANT_TRANSACTION_ID>
<PAYMENT_METHOD>CC</PAYMENT_METHOD>
<CC_TYPE>V</CC_TYPE>
<EXP_DATE>09/29</EXP_DATE>
<CVV_CODE>123</CVV_CODE>
<TOKEN>1917079614,638672725999036142,1111</TOKEN>
<PAY_PROC_ACCT>OLT TEST ACCOUNT</PAY_PROC_ACCT>


NMI Token Format       

Customer Vault ID, Billing ID, cc last4.  customer = NMI Customer Vault ID, Payment = NMI Billing ID,

  1. If Customer Vault ID starts with NMI it’s a one-time use token
  2. Customer Vault ID should only be numbers - no letters
    1. example of what we are expecting
      1. Token:1485964788,638642312029887109,1111
    2. if you see letters, you have created a one-time use token, and this is not what we are looking for
      1. example of what we don't want
        1. Token: NMI,9T8Jc8d7Rh7FUHR4q52wh6VKHgb9p58H,1111

Vendor Information

  • add billing_method =recurring if the order is a cty order
  • use the NMI collect.js to create tokens

NMI- Payment Processing Account Token Generation
Copyright 2024
Revised 11.11.2024

    • Related Articles

    • Authorize.Net - Payment Processing Account With Tokenization

      Module: Payment Processing Account Topic: Authorize.Net Payment Processing Account with Tokenization Version(s): Version 5.1 & up Editions: All Editions Setup The Payment Processing Account Token Generation feature is optional and turned on by ...

    • Braintree - Payment Processing Account Token Generation

      Module: Braintree Payment Processing Account Token Generation Topic: Braintree Payment Processing Account Token Generation Version(s): Version 5.0 Editions: All Editions What Is Braintree A Braintree is a payment gateway that processes the various ...

    • WARNING: PAY_PROC_ACCT has the value "X". This account does not support tokenization.

      Message: WARNING: PAY_PROC_ACCT has the value "X". This account does not support tokenization. Explanation:  The Payment Processing Account specified does not support tokenization. Suggested Resolution: Check that the Payment Processing Account that ...

    • WARNING: Order does not have a payment processing account associated with it.

      Message: WARNING: Order does not have a payment processing account associated with it. Explanation:  There is no payment processing account that is able to be associated to this order.  Suggested Resolution: The Payment Processing Account should be ...

    • Migrating to a New Processing Account

      Module: Payment Processing Accounts Path: Campaigns > Payment Data > Payment Processing Accounts Topic: Migrating to a New Processing Account Version(s): 5.1 & up Editions: All What Are Payment Processing Accounts? Payment Processing Accounts are ...