How to Set Up OAuth 2.0

You enable mutual authentication by obtaining a Certificate Signing Request (CSR) from a supported certificate authority (CA). After obtaining a CSR, you provide your common name details to

Visa Acceptance Solutions

. For more information, see Enable Mutual Authentication.

You register your web-application in the

Business Center

and set a scope of permissions and a redirect URL to your web-application. For more information, see Register Your Application.

The merchant accesses your web-application, logs into their account using their credentials, and clicks a button or link to set up their

Visa Acceptance Solutions

account.

Your application redirects the merchant to a

Visa Acceptance Solutions

-hosted webpage. For more information, see Redirect the Merchant.

The merchant logs in to their

Visa Acceptance Solutions

account and approves your request. This authorizes your web-application to perform specific actions on their behalf which are set by the permissions scope that the merchant approved. Notify the merchant that their account must have access to grant OAuth permissions to complete this requirement.

Visa Acceptance Solutions

redirects the merchant to your application using the redirect URL you registered. An authentication code is appended to the redirect URL. For more information, see Interpreting the Redirect Response.

Your application exchanges the authorization code with

Visa Acceptance Solutions

for these two tokens:

Access token
: A token to authenticate transactions using
Visa Acceptance Solutions
. For more information about how to authenticate
Visa Acceptance Solutions
transactions using this token, see Submit API Requests Using OAuth.
Refresh token
: A token that you can use to request additional access tokens.