Sage Pay Go with Direct integration

Sage Pay Go with Direct integration

Sage Pay Go with Direct integration is designed to enable you to take card details on your own secure servers and pass them across to Sage Pay for authorisation and secure storage in a server-to-server session that does not involve redirecting the shopper to Sage Pay’s payment pages.

Features & benefits

• Direct integration is essentially a white-label payment service. It is the method in which you pass the data to Sage Pay, not the method in which you collect it, which means you have complete control over the look and feel of your payment pages.
• Your customer never leaves your site and they do not necessarily know that Sage Pay is authorising the transaction on your behalf. Although, in practice many vendors choose to tell their shoppers as many have concerns over card security.
• It is ideal for large companies with existing back office payment software, such as a call centre and want to integrate their payment system and manage the whole of the payment process internally.

Other considerations

• Security: You will need a 128-bit SSL certificate to secure your payment pages. These can be obtained from a number of sources including VeriSign and Thawte.
• You will also need to be able to make HTTPS POSTs from scripts on your server (using something like OpenSSL on Linux platforms, or the WinHTTP object in Win32). If you are hosting with a third party company we recommend you talk to them about these requirements before committing to Sage Pay Go with Direct integration.
• If you cannot install a certificate for your payment pages, we would recommend you consider Server integration with inFrame instead.
• If you cannot perform HTTPS POSTs from your scripts, we would recommend Sage Pay Go with Form integration.
• PCI DSS compliance: Because you are collecting, storing and transferring card data, you will need to comply with strict guidelines. Your bank will ask you to undergo an audit to ensure that data is kept secure at all times. This can be extremely costly, so if you do not wish to undergo such an audit, then outsourcing your payments by using our Server integration option and inFrame, could be a sensible alternative.