Authorize.net SIM Setup Help Requested

Greetings, I am new to ZenCart and Authorize.net both but I am not a novice computer user. I am setup with authorize.net and have installed ZenCart on my site and configured it. I have to use Authorize.net SIM at this time.

I have searched the forum endlessly and read every post that even relates to authorize.net but I have not found a simple set of configuration instructions for using authorize.net SIM.

I only have authorize.net SIM and money orders installed as payment options and I have inputted the Transaction ID and Transaction Key. I am unsure about some of the Zencart Setup info to use in the authorize.net set up.

Can anyone please help.

Thank you in advance

Is it working? If not, what are the symptoms ?

When I run a test transaction it works fine till step 2 when it asks for payment.

The first this I notice is that when it lets you check mark for a credit card transaction it is asking for credit card information.

Since we do not a static IP and SSL we want to pull a secure checkout page from authorized.net as SIM is supposed to do.

If I use a test set of information and just fill out the page it always comes back with a red box at the top that says The credit card number entered is invalid. Please check the number and try again. but does not give and error code of any kind.

Thank you so much for the help.

IF it gets to step 3 then I get this error. There has been an error processing your credit card. Please try again.

NOTE:

I have Authorize.net in test mode.

I also do not know what paths to use for the receipt/response etc

Could you go to the AuthorizeNet site and do a manual transaction?

Does it work?

Yes, I can enter a manual transaction from the tools menu. it works.

My 1st concern is that the Zencart is prompting for credit card info when it shouldn't be since I am using SIM.

thanks again

sorry, that module doesn't do redirects to the authnet site at the present time. It uses the rest of SIM features to collect CC info and pass it to the gateway using the secure and documented SIM method. But it doesn't do page redirects.

OUCH. Has anyone worked this out?

I wanted to promote Zencart to my customers but a lot of them do not have the extra cash to lay out for a static IP and SSL Cert to use AIM.

Understandable.

However, the AIM approach is much more secure, and an SSL certificate can be acquired for under $50/yr, and a static IP can be had for approx $2/mo extra on hosting plans.

Haven't looked at the SIM code in quite awhile to know what's involved in getting it up to speed. But I do know that there are lesser fraud risks when keeping customers on your site instead of sending them somewhere else to complete payment.

I plan on upgrading when the funds come available but for now I have to figure out how to do it this way. I am not exactly sure which module needs fixed as I am new to this project.

I notice looking at my error logs the following message

"POST /store/index.php?main_page=checkout_process HTTP/1.1" 200 645 "-" "-"

Does your hosting account offer free use of their shared SSL certificate? That should be sufficient for AIM.

No such luck. I thought about using OpenSSL to generate a cert but it would just be self signed.

DrByte:

Understandable.

However, the AIM approach is much more secure, and an SSL certificate can be acquired for under $50/yr, and a static IP can be had for approx $2/mo extra on hosting plans.

... there are lesser fraud risks when keeping customers on your site instead of sending them somewhere else to complete payment.

It's not the cost of the security certificate. It's not the cost of static-IP hosting. IMO, it's the COST OF LOST SALES because customers walk away in fear.

IMO, the point of having a trusted third-party payment system is that the third party is TRUSTED.

If I go to a site to buy something, and I don't know them from Adam, but I am paying through Authorize.Net, and I'm entering my credit card information at the Authorize.Net site, then I figure that the site might get their hands on $42.60 of my money, but if they don't deliver, I can always contest the charge.

If I go to a site to buy something, and I don't know them from Adam, and they want me to give them my credit card number, expiration date and CVV number, I wonder if they're really selling that CD box set for $42.60 delivered. Maybe they don't have any CDs to sell, and maybe they don't have a merchant account, either. Maybe they're just phishing for information, and it will cost me thousands of dollars and take me months of time to clean up my credit record. :oops:

Authorize.Net does NOT give any diagnostic code on SIM - it simply drops the connection. But the SIM module is asking for too much information, anyhow. Seems like should be like Paypal IPN - the customer indicates the method of payment and clicks.

The benefit of using SIM in my eyes is that by assigning a trusted third party to handle the transaction relieves me of the security cost and hassles.

I do not want access to my customers CC information, I do not what to worry that someone will find a hole in the security settings that I might have missed.

Sending my customers to a "trusted" third party service provider to handle the transactions is much more attractive to me and my customers.