Frequently asked questions
Vipps Netthandel (eCommerce) via PSP offers functionality for payments on websites and apps (P2M).
See the PSP API guide for all the technical details.
For more common questions, see:
API version: 3.0.0.
How can I check if a merchant or sales unit is active?
You can try to initiate payment, specifying the Merchant-Serial-Number header:
POST:/v3/psppayments/init/.
If the merchant or sales unit is not active, you will get an error: "Merchant not available or active".
See the Vipps FAQ:
Why do I get errorCode 37 "Merchant not available or deactivated or blocked"?.
Why do I get an Invalid MSN error?
You may get an error like this:
Invalid MSN: 123456. This MSN is not valid for the provided PSP id.
Check that you are using the correct credentials for the right environment.
This happens if the MSN was created with one PSP ID and you attempt to initiate a payment with a different PSP ID. Although Vipps can help figure this out, it is a time-consuming manual task, and we must ask the PSP to try to solve this on its own.
How can I update the status of a payment?
When the PSP has new information about a payment, it is important to send the new information to Vipps, so the user sees the correct status in Vipps.
The PSP must use the
POST:/v3/psppayments/updatestatus
endpoint to notify Vipps of changes to the payment,
Please note: Vipps processes the information in daily batches. See: Status updates.
How can I get details for a payment?
With the PSP API, the PSP gets network tokens from Vipps (see What is a network token?).
The PSP uses the token to process the payment, and then sends Vipps information about
how it went with
POST:/psppayments/updatestatus.
Vipps does not have other information about the payment than what the PSP has sent.
The PSP can use
GET:/psppayments/{pspTransactionId}/details
to get the details of a payment, but this will of course be the same
information that the PSP has sent earlier.
Please note: Vipps processes the information in daily batches. See: Status updates.
What is a network token?
Network tokens are payment credentials that replace the card details for online payments.
Every merchant gets a unique token for the card, so a network token can not be shared between businesses. This also means that it's possible to invalidate the token used by one merchant without invalidating the other tokens.
The EMVco token is not considered PCI DSS sensitive. See the EMVco documentation for more.
What is a PAN?
The PAN (Primary account numbers) is the 15- or 16-digit number found on all credit or debit cards. Since PANs are accepted for online payments, anyone with access to the PAN may be able to make payments without the physical card.
A PAN is unique per card, but may be shared between businesses. This means that if a PAN is invalidated, it is invalidated for everyone.
Why do I get No network token available for this Agreement or similar?
The most common reason for this problem is that the user has a card issuer that does not support network tokens.
Banks can block tokens, for instance if the card is blocked, and are not always great at reactivating them.
It could also be that the user has not added his/her new card in Vipps.
To find out more: Contact the card issuer.
Is there a unique PSP ID for all merchants?
No, the PSP ID is unique for the PSP and used for all the PSP's merchants.
Does Vipps have a test environment?
Yes, please see: The Vipps test environment (MT).
What will be sent in the makePayment() request if the customer declines the payment, or it times out?
From the
makePayment
specification:
| Name | Type | Size | Optional | Values |
|---|---|---|---|---|
| confirmed | String | 7 | No | YES/TIMEOUT/CANCEL |
What is the correct response to the MakePayment request?
Continued: "What should be the response when Confirmed contains TimeOut or Cancel -
should paymentInfo.status be OK or FAIL? If it is FAIL", what error code should be returned?"
It is suggested that you send FAIL in case of failure either at your end or -
as in this case - at our end.
If Confirmed contains TimeOut or Cancel: Set paymentInfo.status to FAIL?
Can Vipps help merchants that have problems with the PSP's use of the Vipps PSP API?
Nope. Merchants that use Vipps through a PSP must contact the PSP if there are problems. This is because Vipps only provides the payment card token to the PSP, and the PSP is responsible for performing the transaction and then to notify Vipps about how it went.
Simplified flow when using Vipps through a PSP:
- The user selects to pay with Vipps at the merchant.
- The PSP uses the Vipps PSP API to initiate a payment.
- The user confirms the payment in Vipps.
- Vipps sends the user's payment card token to the PSP.
- The PSP uses the payment card token to perform the payment.
- The PSP uses the Vipps PSP API to inform Vipps about how the payment went.
- The user gets a confirmation in Vipps.
It is important to understand that Vipps only provides the payment card token to the PSP. Vipps is not involved in the payment process. If there are any problems with the payment, it is the PSP that has all the information about that.
Is it possible to skip the landing page?
Skipping the landing page is reserved for special cases, where displaying it is not possible.
See the FAQ for more details: Is it possible to skip the landing page?