We would like to inform customers that 3D Secure (3DS) flow support is now available for Norwegian BankID (NO BankID) through both OIDC and CIBA authentication flows.
What's New? Support for 3DS card payment authentication using NO BankID. New e3ds scope introduced to initiate 3DS transactions. 3DS requests require the mandatory parameters: scope=e3ds binding_message acr_values state Additional UI presentation options are supported, including page, popup, kiosk, and modal modes.
Impact: Customers can now use NO BankID for Strong Customer Authentication (SCA) in 3DS card payment scenarios. Authentication responses will include a JSON-formatted binding_message in the ID Token containing the approved payment and authentication details.
Action Required: Customers planning to use 3DS authentication should update their integrations to include the required 3DS parameters and ensure the binding_message is provided in the expected Base64-encoded JSON format.