For security reasons related to payments and in order to avoid fraudulent operations, the embedded form relies on a merchant server that must be provided by you.
This server responds to several needs:
- Validate that the transactions that must be transmitted to the payment gateway correspond to purchases on your merchant website and that the amounts and currencies match,
- Securely store your keys of communication with the payment gateway,
- Receive instant notifications from the payment gateway upon each payment event (accepted, rejected, etc.),
Three keys are needed for authenticating your exchanges with the payment gateway:
| KEY | DESCRIPTION |
|---|---|
| Server to server key | For calls to Web Services |
| JavaScript key | For creating a payment form in the buyer''s browser |
| Signature key | In order to check the authenticity of the data returned to the IPN or during the return of the payment form in the browser |
The keys are available in the
-
Sign in to the
Merchant Back Office : - Enter your login. The login is sent to the merchant''s e-mail address (the subject of the e-mail is Connection identifiers- [your shop name].
- Enter your password. The password is sent to the merchant''s e-mail address (the subject of the e-mail is Connection identifiers- [your shop name].
- Click the Validate button to access the transaction management page
You can retrieve your API keys and authentication credentials from the
In the Settings > Shop menu, select your shop and go to the REST API keys tab.
The tab contains all the information required for authentication:
The REST payment Web Services use Basic HTTP authentication for securing the calls between the merchant server and the payment gateway servers (see Authentication phase for more information). In order to proceed to authentication, you need a login and a password.
They can be retrieved in the REST API Keys tab of the
| PARAMETER | DESCRIPTION |
|---|---|
| User | Username allowing to build the header Authorization string |
| Test password | Password allowing to build the header Authorization string for test transactions (with test cards). |
| Production password | Password allowing to build the header Authorization string for production transactions (with real cards). |
Fore more information on the implementation, see Implementation using different programming languages.
La signature de l’IPN est éffectuée avec le mot de passe. Pour plus d’informations, rendez-vous ici Utilisation de l’IPN (URL de notification).
If you do not yet have access to the
| PARAMETER | VALUE |
|---|---|
| Test user | 73239078 |
| Test password | testpassword_SbEbeOueaMDyg8Rtei1bSaiB5lms9V0ZDjzldGXGAnIwH |
| Public test key | 73239078:testpublickey_Zr3fXIKKx0mLY9YNBQEan42ano2QsdrLuyb2W54QWmUJQ |
| HMAC SHA256 test key | VgbDd550wI6W1rwODGy56QAUkUQwIEdwXG5ziDUUC72BS |
| URL for the REST API | https://api.systempay.fr |
| URL for the Javascript client | https://api.systempay.fr/static/js/krypton-client/V4.0/stable/kr-payment-form.min.js |
These keys are 100% functional. However, it is not possible to access the