'Protected Log-in' made simple

What is it?

‘Protected Log-in’ business-process has been built within our ON-LINE CARD (sm) Service to address the ever-growing ‘phishing’ problem almost any successful e-commerce business is experiencing. Some will say, that our solution is too complicated… Enhancing the security of your web-site is not a simple task, we did our best to make integration of our security mechanisms into your application as simple as possible, but still it will require some effort on your part.

Here is what you need to do:

Sign-Up !

Apply for ON-LINE CARD (sm) Service as a new Issuer (here) or choose any of participating Issuers and enroll into his Merchant Service (here).

Your application will be approved within 24 hours.

Configure your Service (Part 1)

Create a ‘Merchant Account’ through secure web-interfaces upon the approval (here).

Accept issued ‘MerchantNameSpaceId’ and your Account Number; request and accept server certificates, that will be used in your communications with ON-LINE CARD (tm) web-service.

Place HTML code on ‘Log-in page’

HTML code (to be placed on 'Log-in page'):

<form action=https://auth.on-linecard.com/Pay.aspx method=”post”>
<input type=hidden name='MerchantNamespaceId' value='0003-8F63D5F1-C62D-4F74-A477-BEFF2DC80620'>
<input type=submit>
</form>

After clicking this button on your web-page user will be prompted by ON-LINE CARD (tm) client Software to authenticate himself .

Note: Don't forget to replace sample value "ooo3..." in the code beyond with the value of *your* 'MerchantNameSpaceID'!

Configure your Service (Part 2)

Configure the URL’s of your web-site, that will be accessed in case of successful authentication: (‘SuccessURL’), failed authentication (‘FailURL’) and cancelled authentication (‘CancelURL) in your ‘Control Panel’ (here).

How it works

By clicking the ‘Protected Log-in’ button on your ‘Log-in page’ your customer invokes ON-LINE CARD ™ client Software application and passes a ‘two-factor’ authentication. Upon success he is provided with an ‘Authentication Token’ and accesses the ‘SuccessURL’ on your web-site.

You need to validate the token on our server through the web-service interfaces described below and, in more detail, – here.

Example of Code

Links to the working code samples (C#) are placed on pages of ‘Demo Merchant site’, the complete source code of libraries you may decide to use on ‘As Is’ basis to build the code on your side are here.

Please read ‘Description of Interfaces’ blog for more details, regarding interfaces, encryption technique and other.

Working ‘demo’

We strongly recommend you to walk through the whole demo of new customer acquisition, ‘Protected Log-in’ and secure payment authorizations (the step-by-step instructions are here) even if you will be using only the authentication capabilities of our Service.