Choose step-up methods

Identity and verification (ID&V) is the step-up path used when a cardholder needs additional authentication. Configure the available methods as activation profiles, then select the applicable profiles on each rule.

A higher-risk scenario can offer a narrower selection than the standard path. Each selected method must be supported for the scheme, wallet, and use case. Keep a usable set on the default fallback as well.

Provisioning versus existing-token authentication

Initial provisioning asks whether the card can be tokenized. Post-tokenization authentication concerns a token that already exists, such as an e-commerce authentication request. Configure these contexts separately rather than assuming the initial provisioning methods always apply.

For Mastercard, initial provisioning uses parallel AuthorizeService and RAM calls, with methods returned in RAM. E-commerce post-tokenization authentication uses RAM alone. Visa requests step-up methods separately from the provisioning decision.

Issuer responsibilities

For SMS/email OTP, Paymentology forwards the passcode and the issuer delivers it through the selected channel. After successful issuer-app or contact-centre verification, use Token Activate to request activation. See the completion sequence and field mapping. A notification acknowledgement does not complete cardholder verification.

Use AMR to understand method-selection activity, OTP for passcode delivery, and TNR lifecycle events to track the resulting token state. See notification handling.