Highly recommended
This extension works perfectly and the support from Paradox is fantastic. We needed a small feature added and they were extremely responsive and we got the feature added which allowed us to deploy it on our store.
Magento Extensions
Authorize.Net CIM Payment Module for Magento
The convenience of stored credit cards, with uncompromising security.
- Rating
- 5 out of 5 — 26 reviews
- Latest release
- 2.3.7 September 29, 2024
$279.00
Demo access
Request Demo Login
Authorize.Net CIM Payment Module for Magento
Authorize.Net CIM Payment Module for Magento
$279.00
Overview
What it does
Authorize.Net is one of the world's largest payment gateways, serving over 400,000 merchants. Their services allow you to accept payment from your customers, by credit card or eCheck, straight from your website. You must have an Authorize.Net account to use this extension (account fees will vary).
This extension brings Authorize.Net's Customer Information Manager (CIM) service to Magento 1. Authorize.Net CIM takes payment processing to a whole new level, by allowing your customers to store their payment info on Authorize.Net's secure servers. This gives you and your customers the convenience of stored credit cards, with all the security of Authorize.Net. It also allows us to give you many advanced features that most payment methods aren't capable of.
We know what you want: A proven solution that just works, with all the features you'd expect, from a reputable company that stands behind their product.
Our payment methods are used on thousands of Magento stores, to process billions of dollars a year. We know what we're doing, and we've been doing it a long time. Payment is a fundamental part of your business, and it's a fundamental part of ours too. We'll help you make sure it never becomes a problem.
Full-featured
This module supports all standard payment actions. It also allows customers to save their payment info for future use. This gives returning customers the convenience of stored credit cards and rapid checkout, without breaking PCI compliance.
The first time a customer checks out, they are given a form to enter credit card details. If they choose to save the card, next time they check out they can reuse that card with a single click. Your customers can also view, add, edit, and delete any of their stored payment info through a 'Manage My Cards' interface in their account. All frontend features are also available in the Magento Admin Panel.
- Pay by credit card or ACH (eCheck)*
- Save credit cards (tokens) for reuse
- Add, edit, and delete saved payment data
- Edit orders and reorder, without having to ask the customer for CC info again
- Authorize, Capture, or Save CC Info (without charging) at time of checkout
- Capture funds even after the authorization expires
- Partially invoice orders (including reauthorization on partial invoice)
- Partially refund (online credit memo)
- Send shipping address and line items to Authorize.Net
- Require CCV code when adding a card, or with every purchase
- Validate billing address with Address Verification (AVS)
- Protect against fraud with Advanced Fraud Detection Suite (AFDS) and hold-for-review
- Integrate your systems thanks to Magento API support
- Use a different Authorize.Net account for each website (multi-store support)
* This extension has built-in support for ACH processing. ACH is configured as its own payment method, and can be enabled or disabled at will. To process ACH payments, you must apply and be accepted by Authorize.Net. For more info, please see Authorize.Net's eCheck.Net FAQ.
Convenient
Stored payment info is good for your business and customers.
- It simplifies checkout.
- It encourages customer loyalty.
- It streamlines order management and integrations.
- It lets your staff quickly process orders and billing changes, without needing customers to repeat their credit card info.
All frontend features are available in the admin panel. This means admins can view, add, edit, and delete customers' stored cards, and place orders using them.
When editing an order, you can reuse the payment info, even for guest orders.
Trusted
This is an Authorize.Net Certified Solution since 2013, listed in Authorize.Net's official certified solutions directory. Our payment modules are used on thousands of Magento stores, and our reviews speak for themselves.
Secure
All communication with Authorize.Net is performed with TLS encryption, and no confidential cardholder data is ever stored on your own server. A process called tokenization is used to run transactions with stored payment information. This lets your customers pay with a 'saved' card that's not on your server at all.
We also support Authorize.Net's proprietary Accept.js API. Accept.js allows credit card information to be sent straight from your customers' browsers to Authorize.Net, without touching your web server at all. Instead, Authorize.Net gives us a one-time-use token (nonce) that refers to it. Since your web server never sees the raw credit card number, this improves your website's security and reduces your PCI compliance exposure.
PCI Compliant
PCI compliance is a complex and multifaceted issue, covering every aspect of your business. We can't guarantee that your business is PCI-compliant. That depends on your server, policies, processes, regular security scans, other payment methods offered, and a lot more. What we can tell you is that this extension will not prevent you from being PCI compliant. We don't store or log confidential cardholder data, or do anything else that would bring you under scrutiny.
The exact PCI scope of this extension depends on your configuration.
- If you enable Accept.js, using this payment method for all credit card transactions may make you eligible for PCI Self-Assessment Questionnaire (SAQ) A-EP.
- If you do not enable Accept.js, this payment method falls under the scope of PCI SAQ D.
For details on the SAQ types and what eligibility means, see "Self-Assessment Questionnaire Instructions and Guidelines (3.2)" (PDF, by PCI Standards Security Council).
In production
What the people running it say.
Great extension, solved our problem with Authorize eliminating their direct post method. The CIM feature works very well.
Fantastic. This plugin was originally put onto our store by an external developer, but your team walked me straight through identifying where they'd customized it, and how I could update it to the modern version.
Great support. I appreciate you knowing your product and its nuances. Thanks again!
Fit check
Will it run on your store?
Check your install
| Magento Open Source | 1.7, 1.8, 1.9, OpenMage |
|---|---|
| Adobe Commerce | 1.12, 1.13, 1.14 |
| Mage-OS | All versions |
Before you spend anything
Two ways to check it yourself.
Nobody should buy an extension on a product page alone. Read the whole manual or drive a real store running it — both right now, without talking to sales.
Maintenance record
Changelog
Every release we have shipped for this extension, with its notes. A visible maintenance history is the only honest answer to "is this still maintained?"
2.3.7 Sep 29, 2024
- Updated Authorize.net SSL certificate authorities for the upcoming DigiCert SSL Certificate Migration.
- Added Accept.js fields to SOAP API card create/update.
- Fixed error handling around legacy CIM card importing.
2.3.6 May 17, 2018
- Updated Authorize.Net certificate authorities for changed sandbox SSL.
- Clarified currency handling.
- Improved performance of Manage Cards with many cards and orders.
- Fixed Accept.js nonce handling on payment step AJAX reload.
- Fixed field validation stripping dashes from addresses.
- Fixed non-digit characters throwing off last4 numbers on checkout submit with Accept.js.
- Fixed possible API error with empty or extended-characters-only product names.
- Fixed shipping address not being sent on reauthorization transactions.
2.3.5 Oct 5, 2017
- Added protection to frontend My Payment Data page to help prevent abuse. (Will now require order history to use, and block after numerous failures.)
- Added settings check for corrupted API credentials.
- Added support for browser CC autofill.
- Added support for pulling expiration date and CC BIN from the CIM API.
- Fixed legacy card handling when migrating from Hosted CIM.
- Fixed multishipping checkout when adding a new card with Accept.js enabled.
- Fixed possible Accept.js error with CCV disabled.
- Fixed possible PHP error on checkout failure with Accept.js enabled.
- Modified legacy card importer to pull expiration date.
2.3.4 Mar 2, 2017
- Fixed errors caused by Accept.js nonce format change.
- Fixed possible issues with AFDS hold-for-review.
- Fixed possible checkout JS errors if Magento JS translator is not present.
- Fixed problems with SOAP API calls when running in WSI mode.
- Fixed unintended card validation on update of a duplicate card on checkout.
2.3.3 Nov 17, 2016
- Added 'save info' payment action to save payment info on checkout without authorizing or capturing funds.
- Improved Accept.js user experience. Errors and behavior will be better communicated, and 'two clicks to submit' behavior should be eliminated.
- Improved Accept.js compatibility with some one-step-checkout extensions.
- Fixed exceptions when billing multiple orders with address changes in a single request.
- Fixed unintended extra card validation on update of a duplicate card on checkout.
2.3.2 Oct 10, 2016
- Fixed PHP error on checkout decline.
- Fixed tokenbaseDeleteCard API call.
2.3.1 Oct 3, 2016
- Fixed Accept.js invalid token errors on card resync during capture.
- Fixed Accept.js invalid token errors on edit and reorder.
- Fixed Accept.js token expiration if on checkout review more than 15 minutes.
- Fixed Accept.js rejecting separators in CC numbers.
- Fixed Accept.js error messages to go through Magento's JS translation.
- Fixed a card synchronization issue when a checkout error happens after updating billing address.
- Fixed possible PHP warning if TokenBase module is enabled without any TokenBase payment method.
- Changed CCV fields to apply to transaction when Accept.js is enabled.
- Added multi-line street support to My Payment Data.
2.3.0 Aug 14, 2016
- Added Accept.js support.
- Fixed a potential error on the payment settings page during certain error cases.
- Fixed ACH stored-card transactions (checkout and card edit).
2.2.6 May 22, 2016
- Added 3D Secure support during checkout for Verified by Visa and MasterCard SecureCode, via Mage_Centinel.
- Fixed a potential error on partial invoice with failed or disabled reauthorization.
2.2.5 Mar 21, 2016
- Fixed compatibility issues with CE 1.5.
- Fixed adding a new card on checkout that was previously stored failing to restore it as active.
- Fixed voiding a partially-invoiced order with reauthorization disabled potentially canceling a valid capture.
- Fixed AmEx cards potentially being misidentified.
2.2.4 Jan 19, 2016
- Fixed a compatibility issue with PHP 5.2.
- Fixed gateway errors during reauthorization preventing online capture of the remainder.
- Fixed adding a new card on the card management page that was previously stored failing to restore it as active.
- Changed refund API call to use createTransaction.
- Changed transaction update (fetch) to maintain consistent data keys for integration purposes.
2.2.3 Dec 17, 2015
- Improved fetch transaction details update functionality. (Get latest data from Authorize.Net via 'Fetch' on the transaction page.)
- Fixed reauthorization void (triggered by some order editing modules).
2.2.2 Nov 24, 2015
- Fixed duplicate cases not being identified when customerPaymentProfileId is returned in the response, resulting in a card never being updated with new info (expiration date) during checkout.
- Fixed the card merge process such that the new data is retained rather than the old data, when handling duplicate cards.
2.2.1 Nov 3, 2015
- Fixed errors on duplicate payment profile following an API change.
- Fixed an error when refunding orders placed prior to 2.2.0.
- Fixed an upgrade error with the added index.
2.2.0 Oct 8, 2015
- Added new Authorize.Net 'createTransaction' API call, with numerous benefits.
- Added a setting to disable reauthorization on partial invoice.
- Added a setting to control whether the 'save card' checkbox is selected on checkout.
- Added new SSL certificate authorities per the Authorize.Net production changes.
- Improved Magento order transaction handling, for better void behavior and access to transaction info from the Magento Admin order pages.
- Improved error handling for card edits.
- Improved shipping address handling (no longer a separate request; won't cause problems if address changes during order processing).
- Improved legacy data migration via an index on sales_flat_order.ext_customer_id.
- Changed gateway to use the new Akamai endpoint (api2.authorize.net).
- Fixed a potential namespace error during XML parsing.
- Removed gateway timeout on transaction requests, to prevent compounded errors during Authorize.Net performance issues. (15 sec timeout is still present for non-transaction requests.)
- API: Fixed 'updateCard' request not setting customer data on new cards.
- API: Fixed 'updateCard' request not returning the affected card ID.
- API: Fixed 'updateCard' request throwing errors for SOAP, and not working with country restrictions.
2.2.0 Oct 12, 2015
- Added new Authorize.Net 'createTransaction' API call, with numerous benefits.
- Added a setting to disable reauthorization on partial invoice.
- Added a setting to control whether the 'save card' checkbox is selected on checkout.
- Added new SSL certificate authorities per the Authorize.Net production changes.
- Improved Magento order transaction handling, for better void behavior and access to transaction info from the Magento Admin order pages.
- Improved error handling for card edits.
- Improved shipping address handling (no longer a separate request; won't cause problems if address changes during order processing).
- Improved legacy data migration via an index on sales_flat_order.ext_customer_id.
- Changed gateway to use the new Akamai endpoint (api2.authorize.net).
- Fixed a potential namespace error during XML parsing.
- Removed gateway timeout on transaction requests, to prevent compounded errors during Authorize.Net performance issues. (15 sec timeout is still present for non-transaction requests.)
- API: Fixed 'updateCard' request not setting customer data on new cards.
- API: Fixed 'updateCard' request not returning the affected card ID.
- API: Fixed 'updateCard' request throwing errors for SOAP, and not working with country restrictions.
2.1.2 Jul 14, 2015
- Compatibility fix for Magento patch SUPEE-6285.
- Fixed AVS/CCV response status being overwritten by follow-up transactions, going forward.
- Fixed partial invoicing reporting the order tax rather than invoice tax amount.
- Fixed refund reporting the order shipping rather than credit memo shipping amount.
- Fixed a configuration scope issue on admin customer card create/edit.
2.1.1 May 25, 2015
- Fixed billing address changes during checkout not being synced to the gateway.
- Fixed card code potentially being sent on prior-auth capture requests (with custom solutions).
- Fixed transaction ID potentially being sent on auth requests (with custom solutions).
- Fixed a layout issue with ACH when no records are stored.
- Fixed card edit failures sometimes not remembering input data.
- Fixed billing address street not sending the second or later lines (thanks Hank).
- Fixed legacy data conversion to pull profile_id from payment info if possible.
- Fixed unhelpful error message if CIM shipping address is unknown (IE, after changing accounts).
- Improved card validation when editing an existing stored card.
2.1.0 Apr 14, 2015
Be sure to update any copies of our templates when upgrading to this version! Failure to do so will break checkout.
- Added ACH (eCheck) support.
- Improved security of stored card use via card hashes, and fixed errors with some integrations caused by previous security checks.
- Improved error handling during checkout to send the user back to the payment info step when appropriate.
- Improved handling of stored card data that is missing or invalid.
- Fixed 'no direct response' error message when encountering a missing CIM profile.
- Fixed broken expired-auth capture (regression in 2.0.2).
- Fixed a potential error on 'My Payment Data' page if the breadcrumbs block was removed from theme.
- Fixed a potential error during checkout on CE 1.7 with VAT group change enabled (thanks Laura).
- Fixed a potential notice and error for certain cases (including only free items).
- Fixed missing cc_type for legacy stored cards using transaction response data.
- Fixed potentially sending an invalid shipping address to CIM in some circumstances.
- Fixed invalid characters in item names being sent to Authorize.Net.
- Fixed missing 'company' field in My Account, and sending of company to Authorize.Net.
2.0.3 Dec 3, 2014
- Fixed potentially voiding the wrong transaction when refunding a partial order before settling.
- Fixed errors when sending orders with more than 30 line items to Authorize.Net (cuts off at 30 now).
- Fixed handling and logging of 'unknown profile' errors.
- Fixed a compatibility issue with advanced settings in Magento CE 1.5 and 1.6.
- Fixed a potential payment methods page filename error when upgrading from CIM 1.4 to 2.0.
- Fixed unrelated cards potentially being shown on admin customers if a quote is in session.
- Fixed customers created from the admin panel loading with the wrong config scope.
- Fixed potential validation errors when editing customers and no default country configured.
- Fixed admin controller using improper AJAX responses.
- Improved logging and safety of install/update scripts.
- Added a setting to disable archived card pruning.
- Added additional logging for card load failures.
2.0.2 Nov 12, 2014
- Fixed credit card validation rejecting expiration dates in the current year. (Important)
- Fixed a calculation error with line item discounts.
- Fixed inability to save cards from My Account if payment method is only active for certain countries.
- Fixed card save error messages not being communicated properly in all situations.
- Fixed the form not remembering entered data in My Account when certain errors occur on save.
- Fixed an address validation compatibility error with Magento CE 1.5-1.6.
- Fixed a date compatibility error with Magento CE 1.5.
- Fixed a setup compatibility error with Magento CE 1.5.
- Modified payment method to better handle an invalid data situation.
2.0.1 Oct 28, 2014
Minor error and compatibility fixes following the recent major release.
- Fixed guest cards displaying in the admin panel when creating a new customer order, or editing a guest order.
- Fixed the card management tab displaying in the admin panel when creating a new customer.
- Fixed an error in API schema (WSDL).
- Fixed an error preventing online cancel of authorization in CE 1.7 and prior.
- Fixed a compatibility error with PHP 5.2.
- Fixed a compatibility error with OneStepCheckout and guest checkout.
2.0.1 Oct 29, 2014
Minor error and compatibility fixes following the recent major release.
- Fixed guest cards displaying in the admin panel when creating a new customer order, or editing a guest order.
- Fixed the card management tab displaying in the admin panel when creating a new customer.
- Fixed an error in API schema (WSDL).
- Fixed an error preventing online cancel of authorization in CE 1.7 and prior.
- Fixed a compatibility error with PHP 5.2.
- Fixed a compatibility error with OneStepCheckout and guest checkout.
2.0.0 Oct 16, 2014
Complete rewrite of the module, with substantial improvements throughout.
- Added storage of token records and associated data on-site, to improve speed, reliability, and potential future features.
- Added proper support for the responsive web design (rwd) theme in CE 1.9.
- Added complete support for Magento's SOAP API (V1 and V2).
- Added ability to send shipping address with transactions (enabled from settings).
- Added ability to send line items with transactions (disabled from settings).
- Added ability to require re-entering CCV with every transaction for better security.
- Added ability to reuse cards on admin edit/reorder, even for guests and unsaved cards (when available).
- Added extensive abstraction and hook points for greater flexibility.
- Added code to automatically void unsettled transactions on complete refund (normally an error).
- Added code to automatically auth+capture when invoicing an expired authorization (normally an error).
- Improved error handling throughout the module, particularly in card management interfaces.
- Improved user experience of forms in numerous ways.
- Improved input validation of all data sent to Authorize.Net per API specifications.
- Improved settings descriptions and such for easier configuration.
- Improved connection diagnostic messages in the settings area to simplify setup.
- Improved response messages shown under payment info in the admin.
- Modified module to store and display card expiration date on-site (not returned by CIM, but allowed by PCI regulations).
- Modified module to use the payment info model for data storage, as expected.
- Modified module to use Magento methods to find the customer IP, as expected.
- Modified duplicate transaction window from 30 seconds down to 15.
- Fixed isAvailable check to obey global (parent) methods.
- Fixed improper handling of voided transactions during AFDS payment review (thanks Evan).
- Fixed void button still displaying after transaction was voided.
1.4.1 Sep 29, 2014
- Added support for AFDS (fraud review).
- Modified account pages to always force SSL (thanks Robbie).
- Modified 'card in use' logic to only catch pending orders.
- Fixed an initialization error when viewing CIM transactions with the payment module disabled.
- Fixed a validation error on the customer edit form.
- Fixed an error with card saving and partial captures.
1.4.0
- Added setting to enable or disable the 'save card' checkbox on checkout.
- Added inline API testing in the admin configuration area.
- Added Transaction ID, AVS response, and CCV response to payment information on admin order status pages.
- Added setting to show Authorize.Net branding on checkout.
- Modified the API gateway for a request timeout of 15 seconds.
- Modified the admin customer card management form to use Magento's region library.
- Modified the update feed to only apply on admin pages.
- Modified the 'Manage My Cards' link to avoid conflict with other payment modules.
- Fixed the inability to use deleted cards with changed CVV or expiration date.
- Fixed CVV validation missing from checkout form.
- Fixed an initialization problem with multi-store, multi-account configurations (thanks Anthony).
- Fixed shipping and tax amounts being passed in the local rather than base currency (informational data only).
- Fixed amounts potentially having greater precision than the API maximum.
- Fixed products not being returned to stock upon order cancel.
- Fixed reference errors for some server software.
1.3.5
- Modified frontend 'My Account' form to use Magento region library for states and countries.
- Modified gateway class to strip additional illegal characters.
- Fixed authorize-then-capture billing removing customer cards on invoice.
- Fixed PHP notice on the admin order form.
1.3.4
- Modified 'Manage My Cards' area to use SSL if available.
- Modified gateway class to detect the directResponse delimiter automatically.
- Modified gateway class to truncate fields at maximum length when necessary.
- Modified payment model to show stored card last4 on the sidebar during checkout.
- Modified payment model to return gateway errors directly.
- Added save option to the admin credit card form.
- Fixed credit card forms to use proper form validation, and cleaned up the code.
- Fixed potential PHP Strict errors.
- Fixed browser autocomplete being enabled on certain credit card fields.
- Added IP to transactions sent to Authorize.Net.
- Changed duplicate window from 120 to 30 seconds.
- Modified gateway class to strip commas from input to avoid response errors.
- Fixed admin card management losing track of the customer (card add/delete).
- Fixed a potential recursive loop when trying to bill mismatched profile and payment IDs.
- Fixed a potential layout problem with some custom themes.
1.3.2
- Fixed compatibility issue with Magento's Compilation functionality.
- Added admin notification support for extension updates.
1.3.1
- Fixed an error in the cleanup cron.
- Fixed an error when processing offline refunds.
1.3.0
- Added the option to save or not save a card on checkout (for non-recurring orders).
1.2.0
- Fixed permissions issue on manage my cards page.
- Fixed possible notice from typecasting the CC number.
- Fixed issue with IE8 compatibility on the manage my cards page.
- Fixed MasterCard transactions not being properly identified.
- Modified gateway class to remove any chance of any notice error.
- Modified code for clarity and better multi-store configuration support.
- Modified card update code on checkout for better efficiency.
- Modified payment model to only change the order status on the initial transaction.
- Added support for partial invoicing/capturing.
- Added support for partial refunds (including multiple refunds per invoice).
- Enabled support for multishipping checkout.
- Removed deprecated shipping code.
1.1.4
- Fixed JS error on admin customer card management.
- Modified checkout process to update billing address on existing cards.
- Modified checkout to not provide the stored card option to guests, for security reasons.
- Added transaction info to additional_information in the payment model, consistent with the default Authorize.Net model for integration purposes.
1.1.3
- Fixed cards not displaying in My Account when customer has no orders.
- Fixed payment module not being accessible in the Admin Panel if not enabled in the default scope (thanks Anthony).
- Removed unused 'merchant email' setting.
- Modified 'order status' setting to include new/pending statuses.
1.1.2
- Added code to prevent cards from being modified or deleted while attached to an open order.
- Fixed text strings in 'Manage My Cards' not using the language abstraction.
1.1.1
- Added validation to the public card add/edit form.
- Added card editing to 'Manage My Cards' frontend area.
- Added 'Manage My Cards' area in the Admin Panel (admins can view/add/edit/delete customer cards).
- Fixed error handling for refunds.
- Fixed potential recursive loop.
- Fixed later transactions not finding the correct email for guest customers.
- Modified billing method to record the card number and type with the order in Magento.
- Modified 'Manage My Cards' styles to better fit both of the default CE and EE themes.
- Cleaned up old code to use proper Magento methods.
1.0.7
- Fixed the inactive setting not behaving as expected.
1.0.6
- Fixed potential problems regarding missing customer ID or email during the checkout process.
- Fixed potential undefined error on my account RP pages.
- Fixed potential undefined errors in the CIM API class.
1.0.4
- Added code to handle 'not found' CIM profiles after changing between live and test Authorize.Net accounts.
- Added better error handling and notifications on invalid Login ID/Transaction Key.
- Fixed API error with potential undefined parameters.
- Improved the error message on card verification failure.
- Modified payment model to log all transaction results regardless of success/failure.
- Modified countries setting to only show when needed.
1.0.3
- Initial public release.
Customer reviews
What buyers said
awesome plugin ... highly recommended
We purchased version 1.1.4 of this plugin and installed it with ZERO issues on magento version 1.7.0.2.
Version 1.2 was shortly released after our initial purchase ... we sent an email asking for the update and shortly after it was emailed with a change log.
Works perfectly and we highly recommend using this module as users love the convenience factor.
Great plugin & great support!
Great extension
Great extension! I'm running 1.6.2 and this worked straight out of the box. (download) there were some minor bugs but the support responded quickly and updated right away.
Super helpful
Just posting to mirror what teganbulu has said. These guys are super helpful and go the extra mile to make sure you've got everything you need. I've had no problems working with the module's code, and Ryan was happy to give me some assistance when I was making a couple of modifications.
As for the module itself, it does everything as expected, and we haven't run into any issues.
Well written and easy to follow
I'm a developer myself, the code is well written and easy to follow. I used this extension as a building block to build a import script to aid in migrating all our existing customers at Recurly into Magento recurring profiles. I worked with Paradox Labs and Ryan. Good people. So far it is working good.
Sweet extension
Sweet extension. I highly recommend it, support is great.
Write a review
Write Your Own Review