Token Authentication Service Flow
Overview
The following diagram illustrates the high-level flow for a passkey creation and a payment where the payer is authenticated using Token Authentication Service (TAS).
TAS for Click to Pay flow
This flow describes how an online payment works using Mastercard Checkout Solutions (MACS) Click to Pay integrated with the TAS:
- The merchant or hosted solution initiates a checkout session with Mastercard Gateway.
- Mastercard Gateway configures Click to Pay.
- The payer selects Click to Pay as the payment method.
- The MACS Click to Pay service enables the payer to enroll a new card or use a stored card.
- The payer selects a card for payment.
- Mastercard Gateway sends a checkout request indicating successful authentication.
- The payer successfully completes the authentication challenge initiated by the MACS TAS.
- The MACS TAS prompts the payer to create a passkey.
- The payer creates a passkey, which serves as a secure and reusable authentication credential.
- The MACS TAS binds the newly created passkey to the payer’s device.
- The MACS TAS sends a proof of authentication to the Mastercard Gateway.
- The merchant or hosted solution updates session using wallet data.
- Mastercard Gateway processes the checkout redirecting to MACS TAS.
- MACS TAS sends back payment credentials, including assurance data and cryptogram to Mastercard Gateway.
- Mastercard Gateway updates the session with authentication data.
- The merchant or hosted solution checks for authentication data.
- If authentication data is present, the payment proceeds without additional authentication.