# Request Data Sharing authentication

Data Sharing guarantees a frictionless authentication experience for your customers by enabling you to share data using the authentication flow, without requesting full [Strong Customer Authentication (SCA)](https://www.checkout.com/docs/business-operations/ensure-regulatory-compliance/sca-compliance.md).

The additional authentication data provides extra points for issuers to consider when performing their risk analysis, which can help to improve your approval rates.

> **Information**
>
> Issuers may have their own level of support or approach to data sharing authentication, which can impact authorization performance.

---

## Data sharing authentication support

Visa supports the standard data sharing flow on 3DS 2.2.

Mastercard supports data sharing through their proprietary Mastercard Identity Check Insights solution on 3DS 2.1 & 2.2.

---

## Request data sharing for integrated authentication

If you're using our integrated authentication, include the following fields in your payment request:

- `3ds.exemption` set to `data_share`
- `3ds.enabled` set to `true`

If your data share request fails because the issuer does not support it, the payment will automatically fall back and be processed as a non-3DS payment during authorization.

### Request example

```json
{
  "source":{
    "type": "card",
    "number": "4242424242424242",
    "expiry_month": 1,
    "expiry_year": 2030
  },
  "amount": 100,
  "currency": "GBP",
  "3ds":{
    "enabled": "true",
    "exemption": "data_share"
  }
}
```

### Response example

```json
{
  "source": {
    "type": "card",
    "number": "4242424242424242",
    "expiry_month": 1,
    "expiry_year": 2030
  },
  "amount": 100,
  "currency": "GBP",
  "3ds": {
    "downgraded": false,
    "enrolled": "Y",
    "authentication_response": "I",
    "xid": "6a4a9429-bb6c-4d82-ac7e-8c7ee4eba29d",
    "version": "2.2.0",
    "challenged": false
  }
}
```

---

## Request data sharing for standalone authentication

If you're using our standalone authentication, include the following in your payment request: `challenge_indicator` set to `data_share`.

### Request example

```json
{
  "source": {
    "type": "card",
    "number": "5454545454545454",
    "expiry_month": 1,
    "expiry_year": 2030
  },
  "amount": 100,
  "currency": "GBP",
  "challenge_indicator": "data_share",
  "completion": {
    "type": "non_hosted"
   }
}
```

### Response example

> **Information**
>
> The standard data sharing flow and the Mastercard Identity Check Insights flow return different responses. You must add support for both response types in your integration.

**Standard data sharing**

```json
{
  "id": "sid_xk63cmgruntupdvadqvcte3dsy",
  "transaction_id": "30b1bdba-a3d1-4767-8ea0-1c2a29936396",
  "amount": 10,
  "currency": "GBP",
  "authentication_type": "regular",
  "authentication_category": "payment",
  "status": "approved",
  "status_reason": "ares_status",
  "approved": true,
  "protocol_version": "2.2.0",
  "next_actions": [],
  "ds": {
    "reference_number": "3DS_LOA_DIS_VISA_020200_00563",
    "transaction_id": "18ab5763-d77e-440d-95df-d144a0944f82"
  },
  "acs": {
    "reference_number": "3DS_LOA_DIS_VISA_020200_00563",
    "transaction_id": "18ab5763-d77e-440d-95df-d144a0944f82",
    "challenge_mandated": false
  },
  "response_code": "I",
  "challenged": false,
  "cryptogram": "AgAAAAAAAIR8CQrXcIhbQAAAAAA=",
  "transaction_type": "goods_service",
  "eci": "07",
  "scheme": "visa",
  "exemption": {
    "requested": "none",
    "applied": "none"
  },
  "authentication_date": "2024-05-21T13:36:20.4023446Z",
  "xid": "18ab5763-d77e-440d-95df-d144a0944f82",
  "flow_type": "frictionless_delegated",
  "challenge_indicator": "data_share"
}
```

**Mastercard Identity Check Insights**

```json
{
  "id": "sid_xk63cmgruntupdvadqvcte3dsy",
  "transaction_id": "30b1bdba-a3d1-4767-8ea0-1c2a29936396",
  "amount": 10,
  "currency": "GBP",
  "authentication_type": "regular",
  "authentication_category": "payment",
  "status": "approved",
  "status_reason": "ares_status",
  "approved": true,
  "protocol_version": "2.2.0",
  "next_actions": [],
  "ds": {
    "reference_number": "3DS_LOA_DIS_MAST_020200_00563",
    "transaction_id": "18ab5763-d77e-440d-95df-d144a0944f82"
  },
  "acs": {
    "reference_number": "3DS_LOA_DIS_MAST_020200_00563",
    "transaction_id": "18ab5763-d77e-440d-95df-d144a0944f82",
    "challenge_mandated": false
  },
  "response_code": "I",
  "response_status_reason": "80",
  "challenged": false,
  "cryptogram": "AgAAAAAAAIR8CQrXcIhbQAAAAAA=",
  "transaction_type": "goods_service",
  "eci": "04",
  "scheme": "mastercard",
  "exemption": {
    "requested": "none",
    "applied": "none"
  },
  "authentication_date": "2024-05-21T13:36:20.4023446Z",
  "xid": "18ab5763-d77e-440d-95df-d144a0944f82",
  "flow_type": "frictionless_delegated",
  "challenge_indicator": "data_share"
}
```

If your request was successful and approved, you'll receive the following fields in the response:

- `status` set to `approved`
- `response_code` set to `I`
- `cryptogram` set to your cryptogram value
- `eci` set to `07` for Visa or `06` for Mastercard in a standard data sharing flow, or `04` in a Mastercard Identity Check Insights flow

You can continue to [payment authorization](https://www.checkout.com/docs/payments/manage-payments/authorize-a-payment.md).

If `status` is set to `unavailable` or `declined` in your response, the data sharing exemption request failed or was declined. For example, if the issuer does not support the data sharing flow.

You can handle this scenario in the same way that you would handle a failed or declined authentication, or proceed to authorization and process the payment as a non-3DS transaction.

- [Visa Digital Authentication Program](https://www.checkout.com/docs/payments/authenticate-payments/3d-secure/request-data-sharing-authentication/visa-digital-authentication-program.md): Lower interchange rates and improve authorization rates by qualifying for Visa's Digital Commerce Authentication Program (DCAP).