We are in the process of integrating our website with Tess and I have some questions about the checkout process.
Can credit card numbers, masked, last 4, be pulled from Tess and presented to an account holder so they can select which card to charge to? Can the account holder be allowed to delete or inactivate an existing card? Can they update a credit card expiration date?
If these functions are not possible through the API how have your customers and departments handled this, or been handled, when moving to the web?
Any insight is greatly appreciated.
Hi Gloria,
Did this decision create any issues with customers or the development department that required unforeseen exceptions?
Hi Mendy,
We are working towards NOT storing credit cards and if you want to go down that path for PCI compliance then you wouldn’t want the functionality you are describing. So we have people enter their card for each purchase. Just something to think about.
Gloria
From: Tessitura Web Forum [mailto:forums-tessitura-web@tessituranetwork.com] On Behalf Of Mendy Sudranski Sent: Tuesday, June 09, 2015 4:20 PM To: Gloria Ormsby Subject: [Tessitura Web Forum] Credit Cards and the Checkout process
You were sent this email automatically because you subscribed to the Tessitura Web forum. You may reply to this message to post to the Web forum or visit the site to search, read and post to the forums. In the interest of keeping the forum posts from becoming cluttered, we encourage you to delete previous message text from your reply before sending. Thank you!
We still store at this point, but we are in the process of switching to Element as our cc processor. We’ve had many, many discussions with all affected departments and the biggest problem would be the recurring pledges or payment plans for education. However, when version 12.5 is released it will have tokenization which we will use for only those accounts with recurring payments as there is a charge for each token. In the future, processors are going to switch to looking up transactions by transaction number and not by the credit card number so that helps us with our decision too. We plan on sending an email to our members and regulars to notify them and to stress that this is for their security and we take it seriously, etc. This cuts our PCI requirements drastically and removes the risk of a breach from our internal systems.
From: Tessitura Web Forum [mailto:forums-tessitura-web@tessituranetwork.com] On Behalf Of Mendy Sudranski Sent: Tuesday, June 09, 2015 4:43 PM To: Gloria Ormsby Subject: RE: [Tessitura Web Forum] Credit Cards and the Checkout process
From: Gloria Ormsby <bounce-gloriaormsby5026@tessituranetwork.com> Sent: 6/9/2015 8:26:27 PM
If anyone is interested we went with two local procedures accessed through the api. one is used to pull CC information so a customer can select an existing CC from thier(individual/househould/household primamry member) account which can then be passed into the checkout process. the second is to allow a customer to update the name and expiration date on a card as well as allow inactivating and reactivating a card.