PayPal Manual. Version: Contact details. Simon Carmiggeltstraat DJ Amsterdam. P.O. Box EB Amsterdam The Netherlands

(1)

PayPal

Manual

Version: 2.03

Contact details

Simon Carmiggeltstraat 6-50 1011 DJ Amsterdam P.O. Box 10095 1001 EB Amsterdam The Netherlands

(2)

Changelog

Version Date Changes

2.03 2014-12-15 • Minor changes to screenshots

2.02 2014-12-03 • Updated API Access level exceptions in certain countries

2.01 2014-12-02 • Updated PayPal recurring information

2.00 2014-11-27 • Upgraded to latest Adyen Manuals' formatting and renewed screenshots (based on latest PayPal website to date)

• Added information regarding PayPal Sandbox setup 1.48 2011-11-22 • Added information about PayPal recurring limits

1.47 2011-10-27 • Added information about additional reporting abilities

• Added requirement for PayPal Merchant Account ID 1.46 2011-08-25 • Changed PayPal screenshots

• Added details about recurring capabilities 1.45 2011-08-05 • Added iFrame section

1.41 2011-03-02 • Changed PayPal screenshots

1.40 2011-01-09 • Changed PayPal screenshots

1.35 2010-12-28 • Added information about Payment Completion part.

1.30 2010-11-30 • Removed Payment Completion part.

1.21 2010-07-29 • Added audience section

• Manual reviewed for English and layout consistency 1.20 2010-06-25 • Added Refund Option section

(4)

Audience

This is a technical manual aimed at IT personnel involved in integrating merchants' systems with those at Adyen. The latest version of this document is available here:

https://support.adyen.com/links/documentation

General Tips/Warnings

Defensive Programming

Adyen strongly recommends the use of “defensive programming” when integrating with the Adyen Services. This implies that automated decisions programmed into your systems should be defaulted to non-delivery of products and services. In other words, program your systems to only deliver products and/or services after receiving an explicit authorisation of the requested payment and NOT to deliver in situations where an explicit rejection is not received.

Feedback

You can provide feedback about this document by sending an email to the following address:

support@adyen.com

(5)

1. Introduction

The purpose of this manual is to facilitate the integration of your platform with the Adyen Payment System and PayPal. In the following chapters we will cover:

• 'Live' PayPal Account Setup

• 'Sandbox' PayPal Account Setup

• PayPal specifc technicalities

Information about status updates, iFrames, shopper statement and reporting.

The latest version of this document is available at:

https://support.adyen.com/links/documentation

To enable PayPal on your Adyen merchant accounts, you just need to provide the following:

• For Live Adyen acount

The email address of your 'Live' PayPal account.

• For Test Adyen account (OPTIONAL)

The email address of your Paypal Sandbox Business account.

2. Confguring your PayPal Live Account

The merchant should set up a PayPal account, API permissions must be granted to Adyen in order to allow us to credit payments on your PayPal account and provide extra reporting . This can be done by following these steps:

● Login to your PayPal account at https://www. p ay p al.com/ (Figure 1).

● Click on Profle. (Figure 2).

● Under Selling Preferences, click the Update link next to the API Access row (Figure 3).

● Click the Grant API permission link (Figure 4).

● Enter the Third Party Permission Username as paypal_api1.adyen.com and click the Lookup button (Figure 5)

● Select the following API Access Levels ;

a) Use Express Checkout to process payments. b) Issue a refund for a specifc transaction.

c) Process your customers credit or debit card payments. d) Authorize and capture your PayPal transactions. e) Obtain information about a single transaction.

f) Obtain authorization for pre-approved payments and initiate pre-approved transactions.

a) Generate consolidated reports for all accounts. (In some countries you might get the error: “These features are not available in the country where you have your PayPal account.” In that case, you can leave this feld unchecked.)

g) Use Express Checkout to process mobile payments. (Not needed if you don't have plans to support mobile payments)

Once done, click the 'Add' button (Figure 6).

● Submit a ticket informing Adyen about your PayPal account email address via https://support.adyen.com/ .

2.1. Refund Period

By default the refund option is limited on PayPal accounts to 60 days. On certain accounts PayPal allows longer refund periods. When this is the case it also needs to be confgured on your merchant account in the Adyen platform. Please

(6)

advise Adyen Support if this is the case.

2.2. Recurring

By default recurring payments are not enabled in Paypal. You can enable it by checking the following two extra permissions at the Third Party permission screen:

i) Create and manage Recurring Payments.

j) Charge an existing customer based on a prior transaction.

Enabling these two options allows you to perform recurring transactions via the Adyen Platform by calling and using the

recurringDetailReference for each subsequent recurring transaction via API (see our Recurring Manual).

If you would like PayPal to remember the frequency to charge the shopper without the need for individual API calls to the merchant, you would have to confgure it separately at PayPal yourself (see setup of Reference Transactions and

Recurring Payment Profles at PayPal's website):

https://developer.paypal.com/docs/classic/express-checkout/integration-guide/ECReferenceTxns/

This is however not recommended for Adyen merchants as recurring transactions initiated by PayPal (outside of the Adyen platform) will not be visible in your Adyen back ofce.

(7)

Figure 2: Click on Profle

(8)

Figure 4: Grant API permission

(9)

(10)

3. Sandbox accounts setup overview

Merchants can choose to set up PayPal in Adyen's Test environment. For this, special PayPal Sandbox accounts need to be made. Similar to the 'Live' PayPal account, they need to be then confgured such that the Adyen Test API user can access it on your behalf to perform the necessary test payment operations.

3.1. Creating PayPal Sandbox Business and Personal

Accounts

There are two kinds of PayPal Sandbox accounts:

1) Business

Simulates a merchant PayPal account.

2) Personal

Simulates the a shopper PayPal account.

Both of these types of accounts can be created at the same time with your original PayPal 'Live' account at http://developer.PayPal.com.

• Login at https://developer.PayPal.com with your 'Live' log-in information (Figure 7).

• Once logged in, click on Dashboard

• Under Sandbox, click on Accounts (Figure 8).

PayPal automatically creates your frst Business test account by appending '-facilitator' to your email. Also a Personal shopper account is created by appending '-buyer'.

Set their passwords by clicking on Profle under the email address and changing the password. You can also opt to create a brand new Business account if you want a custom naming (Figure 9).

(11)

Figure 7: Log in with your 'Live' PayPal credentials at developer.paypal.com. Once logged in, click on 'Dashboard'.

(12)

igure 9: Set Sandbox Business account password for subsequent Adyen Test API user confguration

3.2. Confguring your PayPal Sandbox Business account

A Business Sandbox account can be used in your Adyen Test merchant accounts for test payments. But before Adyen can link it to your test account, you need to confgure it's API user frst. This is done in a similar way to the 'Live' accounts, but only at a diferent URL and with a diferent API user:

● Log in to your PayPal account at https://www.sandbox.paypal.com (Figure 10). Ensure that you are using a Sandbox Business account for this.

● Click on Profle (Figure 11).

● Click on API Access under Account Information (Figure 12).

● Click the Grant API permission link (Figure 13).

● Enter the Third Party Permission Username as sell1_1287491142_biz_api1.adyen.com and click the Lookup button (Figure 14).

● Select the following API Access Levels;

a) Use Express Checkout to process payments. b) Issue a refund for a specifc transaction.

c) Process your customers credit or debit card payments. d) Authorize and capture your PayPal transactions. e) Obtain information about a single transaction.

(13)

g) Generate consolidated reports for all accounts. (In some countries you might get the error: “These features are not available in the country where you have your PayPal account.” In that case, you can leave this feld unchecked.)

h) Use Express Checkout to process mobile payments. (Not needed if you don't have plans to support mobile payments)

Once done, click the 'Add' button (Figure 15).

● Submit a ticket via https://support.adyen.com/ to provide us with the PayPal Sandbox Business email address that you have confgured the API user for.

(14)

(15)

(16)

(17)

(18)

(19)

3.3. Making test payments

Adyen has a general PayPal test shopper email and password, which can be found at https://www.adyen.com/test-card-numbers. This can be used in Adyen's Test environment for PayPal Sandbox payments.

Alternatively, you can use the Sandbox Personal shopper email addresses that you have found/created in PayPal's developer environment. Using your own Personal shopper email allows you keep track of your test payments on a shopper level at sandbox.paypal.com.

4. iFrame

At this moment it is not recommended to display the PayPal page in an iFrame. With Medium (default) security settings in several browsers, like Internet Explorer and Safari, it results in the shopper seeing a security warning or error page (Figure 16).

Figure 16: PayPal security warning/error message

The reason for this is that pages in the iFrame are marked as third-party (compared to the parent window). When these sites want to work with a cookie, browsers can act upon this (Allow third party cookies). The PayPal pages are even a bigger threat since they lack a so called P3P header (http://en.wikipedia.org/wiki/P3P). This header indicates what kind of info is stored / requested by the website via a cookie and this is compared with the browsers risk settings. It is therefore no guarantee that a cookie is accepted when a P3P header is being sent, but it allows the browser to verify in detail if there is no sensitive data shared.

Adyen is adding functionality on the Hosted Payment Pages that ofers automatic functionality that tells the payment page to "break" out of the iFrame before redirecting to PayPal. Since PayPal is then displayed in the browser's address bar it is no longer a third party and there are less issues with cookies.

Please note that cookies can be disabled completely in browsers. In this case various payment methods like PayPal and iDeal are not working anymore. For more information on iFrames or the latest state on the Adyen feature addition, please refer to the “Using an iFrame” section in Chapter 1 of the Adyen Integration Manual.

5. Payment Completion

(20)

the result page and payment completion can be found in the Adyen Integration Manual.

PayPal has a specifc way of handling non-completed or refused payments. For a large part of the refusal payments you will therefore receive PENDING in the result URL. The reason for this behaviour is that PayPal may ofer a shopper to try again.

If the shopper succeeds to successfully complete their payment, you will receive a normal AUTHORISATION notifcation with the success feld set to true.

5.1. Bank transfers

If your PayPal account approves it, it is possible for a shopper to pay via bank transfer to PayPal. This means that you will receive the AUTHORISATION notifcation in approximately 5 to 7 days.

Allowing bank transfers also results in the situation that you will never receive a refused payment, because PayPal never expires the payment.

6. Shopper Statement

Some acquirers, including PayPal, support a variable shopper statement. To submit a variable shopper statement you can set the shopperStatement feld in the payment request to further improve the shopper experience. More information about submitting the Shopper Statement Field can be found in the Adyen Integration Manual.

If no shopperStatement is supplied PayPal will use the merchant reference as the text used for the statement.

7. Reporting

Please use the External Settlement Report with Info to see information in Adyen pertaining to your PayPal settlements. The report is the same as our usual settlement reports (available at Merchant level), however is available at Company level only.