Axepta BNP Paribas Plugin

Integration of the Axepta BNP Paribas payment gateway for Sylius 2.1+.

What this plugin does

Card payment through the card form hosted by the bank (payssl.aspx): the customer is redirected, enters their card at BNP, and the shop is notified server-to-server.

This plugin implements Axepta BNP Paribas Online 1.0, the generation with .aspx endpoints. BNP also offers Online 2.0, a REST API with OAuth 2.0 authentication: that is not a version of the same protocol but a separate product, and this plugin does not cover it. No end of support for 1.0 has been announced to date; check that point with your account manager if you are starting a fresh integration.

• Both payment mechanisms of Sylius 2: Payum and PaymentRequest;
• configuration in the back office, per channel;
• overridable redirect page, usable without JavaScript;
• notifications authenticated by HMAC-SHA256, idempotent.

You never see a card number. Payment happens entirely at BNP: your shop stays outside the PCI-DSS SAQ-D scope - SAQ-A is what applies. That does not relieve you of your own obligations, but this plugin adds nothing to them.