What is SCA?
The Strong Customer Authentication (SCA) is a new European norm that comes into effect on Sept 14, 2019 regarding online customer-initiated payments. Being part of the second Payment Services Directive (PSD2), It enforces at least two of the following authentication methods in the checkout flow:
Information the customer knows (PIN, password)
Information the customer has (phone number, verification code)
Information the customer "is" (fingerprint, face recognition)
Banks will not process payments that don’t comply with the new requirements.
Do I need to be SCA-compliant?
SCA applies to customer for online transactions above 30€ when both, the issuer and the cardholder’s bank, are located in the European Economic Area (EEA).
In-person card payments and direct debits do not fall into this new rule.
SCA compliance is a matter of integration with payment providers. You don't have to change anything in the way you work. However, you might need to update or install new modules.
What to do in Odoo?
Most payment acquirers available in Odoo don’t require any action on your behalf. A module update will be needed if you use Stripe, Ingenico or Authorize.Net as a provider. For Odoo Online customers, an email will be sent when the update is ready to be installed in your database.
Don't worry, if you don't upgrade your modules, you won't be an outlaw - it just means that your customers will have a hard time paying you.
Acquirer | Compliance | Action required in Odoo |
Paypal, Sips, Adyen, Buckaroo | Managed by the payment acquirer | No action needed |
Stripe, Authorize.Net, Ingenico | Managed by both the payment acquirer and Odoo | Update of the acquirer module is needed in Odoo to support 3D Secure 2 in the case of Stripe and Ingenico. Authorize.Net does not suggested any change with regards to SCA as they are mostly based in North America. Will be available for Odoo 10, 11, 12. An email will be sent when the update is ready for install in your database. |
September 9 Update:
Updates for the Stripe payment acquirer are available for Odoo 11 and 12. It will be available shortly for Odoo 10 and intermediary saas version.
To install the update for Stripe:
- update your source code (only for on-premise setups)
- activate the developer mode,
- go the Apps menu and update module list,
- install the module named "Stripe Payment Acquirer - Strong Customer Authentication Update" (payment_stripe_sca).
- Done. You are ready for SCA!
October 22 Update:
After some delay, the update is now available for Odoo 10.
To install the update for Stripe:
- update your source code (only for on-premise setups)
- activate the developer mode,
- go the Apps menu and update module list,
- install the module named "Stripe Payment Acquirer - Strong Customer Authentication Update" (payment_stripe_sca).
- Done. You are ready for SCA!
Get your Odoo ready for Strong Customer Authentication (SCA)