As parts of the PCI-DSS best practice becomes requirements with PCI-DSS v4 coming in March 2025, using the Seamless View integration to display the payment UI will give merchants more responsibilities than they currently have. This is because Seamless View is hosted by you. As the Redirect integration is hosted by Swedbank Pay, we also handle these responsibilities. The two main points affecting you in this context is 6.4.3 and 11.6.1 in the PCI-DSS link above.
To learn more about how PCI-DSS affects you, we also have reading available in Danish, Finnish, Norwegian and Swedish.
If you currently have a Seamless View integration and don’t want the impending responsibilities, switcing to Redirect is a very manageable task. While you can make the change and keep on using your payment method integration(s), we strongly recommend switching to Digital Payments when you are already making changes to your integration.
If you choose to continue using payment method integrations, here’s what you need to do:
Use Redirect Operation
In the operations node of the payment response, right next to
view-authorization
which you should currently be using, you’ll find
redirect-authorization
. The corresponding href
contains a url which leads to
a Swedbank Pay domain where the payment UI will be displayed and processed. All
you need to do is direct the Payer to this url and wait until one of the
functions are called (completeUrl
, cancelUrl
or callbackUrl
) to proceed
with the payment process.
Redirect-Authorization Operation
1
2
3
4
5
6
7
8
9
10
{
"operations": [
{
"method": "GET",
"href": "https://ecom.externalintegration.payex.com/mobilepay/payments/authorize/ec2a9b09-601a-42ae-8e33-a5737e1cf177",
"rel": "redirect-authorization"
"contentType": "text/html"
},
]
}
Remove Seamless View Code
You can remove all code related to the <script>
element used to load the
Seamless View.
Change URLs
Finally, you need to do some changes to the urls
node in your
payment request. The paymentUrl
field is specific to Seamless
View and can be removed.
The url you need to add is the cancelUrl
, so we know where to redirect the
payer if they chose to cancel, or you chose to abort the payment.
While you need permission to add your own logo when using Seamless View, no such
agreement is needed for Redirect. If you want to add one, you also need to
include a logoUrl
. Follow the guidelines in the section linked above. If no
logoUrl
is added, Swedbank Pay’s logo will be shown by default.
The completeUrl
, hostUrls
and callbackUrl
is universal and must be
included regardless of your UI choice.
Seamless View Specific URL
1
2
3
4
5
{
"urls": {
"paymentUrl": "https://example.com/perform-payment"
}
}
Redirect Specific URLs
1
2
3
4
5
6
{
"urls": {
"cancelUrl": "https://example.com/payment-cancelled",
"logoUrl": "https://example.com/logo.png" //Optional
}
}