According to the configuration of your payment portal you will receive access status changes for accesses to your premium sector. You will only receive these status messages with payment portals of the "Access" version. You can use them to protect your premium sector or to receive information about a subscription. The data is submitted to the URL specified in the merchant area. The data transfer is based on simple HTTP-POST request (key/value pairs).
The SessionStatus is sent from the following IP addresses: 22.214.171.124/24 (i.e. 126.96.36.199 to 188.8.131.52). Please configure your firewall to allow incoming packets from these IP addresses.
HTTP request from PAYONE to the merchant's server
Key can be selected freely (see options payment portal) as MD5 value (The key hash values is currently given as MD5. This currently still remains with MD5 and is subject to change in future to SHA2-384.)
Type of payment used for this access.
-> this parameter may be removed in future.
Access ID (PAYONE)
Event, which refers to one customer each.
"add" , "remove", "abocancel", "renew "cancel_reversal", "lock", "unlock" (see below)
Payment portal ID
ID for the offer
Unix timestamp at which access expires
Debtor ID (PAYONE)
Merchant's customer ID
Customer's user name
Numeric value (x characters maximum)
Alphanumeric value (x characters maximum)
In this manner changes for several customers can be submitted simultaneously in one request.
[x] = position number, e.g. ,,...)
Important note: Please note that new parameters may be added at any time without previous notice. Therefore, you should use the parameter name for the evaluation and not the sequence, which may be subject to change at any time!
Expected reply to the request:
As a reply to the request, the string "SSOK" is expected. Each request is repeated in a 1-hour cycle until it is answered with "SSOK". This procedure ensures that all requests will be processed by your system. Simply issue the "SSOK" in a script via the "print" command. Make sure that this character string is the first that is printed from this script, e.g. print ("SSOK");
After the start of the initial term an "add" request is deployed to your system. Different pieces of information about this customer are submitted (see above). After the access has expired, you will receive a "remove" request.
With each access status change you receive a request. Via the "action" variable you receive information about the status of the access.
|An access portal has been opened.|
|Access has expired and will not be renewed.|
|Access was renewed/reduced (e.g. renewal of a subscription).|
|The customer has cancelled the subscription for this access portal.|
|Access has been blocked.|
|Access has been unblocked.|
|The termination of the subscription has been revoked.|