Token Authentication Service Flow
Overview
The following diagram illustrates the high-level flow for a passkey creation and a payment where the payer is authenticated using Token Authentication Service (TAS).
TAS for Click to Pay flow
This flow describes how an online payment works using Mastercard Checkout Solutions (MACS) Click to Pay integrated with the TAS:
- The merchant or hosted solution initiates a checkout session with ANZ eGate payment gateway.
- ANZ eGate payment gateway configures Click to Pay.
- The payer selects Click to Pay as the payment method.
- The MACS Click to Pay service enables the payer to enroll a new card or use a stored card.
- The payer selects a card for payment.
- ANZ eGate payment gateway sends a checkout request indicating successful authentication.
- The payer successfully completes the authentication challenge initiated by the MACS TAS.
- The MACS TAS prompts the payer to create a passkey.
- The payer creates a passkey, which serves as a secure and reusable authentication credential.
- The MACS TAS binds the newly created passkey to the payer’s device.
- The MACS TAS sends a proof of authentication to the ANZ eGate payment gateway.
- The merchant or hosted solution updates session using wallet data.
- ANZ eGate payment gateway processes the checkout redirecting to MACS TAS.
- MACS TAS sends back payment credentials, including assurance data and cryptogram to ANZ eGate payment gateway.
- ANZ eGate payment gateway updates the session with authentication data.
- The merchant or hosted solution checks for authentication data.
- If authentication data is present, the payment proceeds without additional authentication.