Authentication Report

Last updated: February 4, 2026

The Authentication Report provides granular data for authentications you process with Checkout.com, using the Integrated or Standalone authentication solutions.

The report data is refreshed daily at 08:00 AM UTC.

You can set the report time zone to UTC, or your Dashboard time zone.

You can generate the report:

On demand, for a specific time period
On a daily, weekly, or monthly schedule

The report covers updates from the start of the first day of the reporting period at midnight, to the end of the final day of the reporting period at 23:59 PM.

See instructions on how to download the report on demand or on a schedule:

The report is provided as a CSV file. The file name uses the following formats by default:

API and SFTP – sessions_authentication_{EntityID}_{Start Date: YYYYMMDD}_{End Date:YYYYMMDD}_1.csv
Dashboard scheduled reports – authentication_{EntityID}_{Start Date: YYYYMMDD}_{End Date:YYYYMMDD}.csv

For SFTP, the report is uploaded in the following folder structure:
{Entity_name} > reports-{Entity_name} > sessions_authentication

Download a sample report (CSV file).

Information

If using Safari, hold down the Option key when selecting the link to download the file.

The report includes the following fields in this order:

Field name Description

Field name	Description
Session Date string	The date the authentication session was created. Format – YYYY-MM-DD
Session Time string	The time the authentication session was created, in UTC. Format – HH:MM:SS
Session Date Time date-time	The date and time the authentication session was created, in UTC. Standard – ISO 8601 code Example – `yyyy-mm-ddThh:mm:ss.sss`
Payment ID string	The unique identifier for the payment, prefixed with `pay_`.
Session ID string	The unique identifier for the authentication session, prefixed with `sid_`.
Client Name string	Your unique identifier as a Checkout.com client, prefixed with `cli_`.
Entity Name string	The name of your Checkout.com entity.
Merchant Name string	The name of the merchant involved in the authentication session.
Billing Descriptor Name string	The merchant's name displayed in the billing descriptor that appears on the customer's bank statement.
Billing Descriptor City string	The merchant's city displayed in the billing descriptor.
Merchant Country string	The registered country of the merchant involved in the authentication session.
Authentication Response Code number	The authentication response code, which represents the outcome of the authentication session. This can be one of: `A` – Authentication attempted – This is classified as a successful authentication when processed using a stand-in service. `I` – Informational only `N` – Authentication declined `R` – Authentication rejected `U` – Authentication unavailable `Y` – Authentication approved
Status string	The status of the authentication session.
ECI Code string	The Electronic Commerce Indicator (ECI) value.
Liability Shift bool	Specifies whether there is a liability shift to the issuer. This value is indicative, based on the authentication session. The final liability shift is determined by the outcome of the authorization request.
Protocol Version string	The 3D Secure (3DS) protocol version used in the authentication session, if the payment was processed with 3DS authentication.
Challenged bool	Specifies whether the authentication was challenged.
Scheme string	The scheme the authentication was processed with. Example – `mastercard`
Amount number	The payment amount.
Currency string	The transaction currency. Standard – ISO 4217 code Example – `USD`
Card Number string	The card number used in the authentication session. This value is typically masked for security purposes.
Network Token bool	Specifies whether a network token was used in the authentication session.
Card Category string	The card category used in the authentication session. This can be one of: `COMMERCIAL` `CONSUMER`
Card Product Type string	The card product type of the card used in the authentication session. Example – `Mastercard Classic`
Card Product ID string	The card product ID of the card used in the authentication session. Example – `MDH`
Card Type string	The type of card used in the authentication session. This can be one of: `CREDIT` `DEBIT`
Card Fingerprint string	The unique fingerprint of the card used for the payment.
Issuer Country string	The country that the card used in the authentication session was issued in. Standard – ISO alpha-3 country code Example – `USA`
Issuer Name string	The name of the issuer that issued the card used in the authentication session.
Merchant Category Code number	The merchant category code (MCC) of the merchant that processed the payment.
Reference string	Your reference for the authentication.
Challenge Indicator Requested string	The challenge indicator requested. This can be one of: `challenge_requested` `challenge_requested_mandate` `no_challenge_requested` `no_preference`
Challenge Indicator Applied string	The challenge indicator applied. This can be one of: `challenge_requested` `challenge_requested_mandate` `no_challenge_requested` `no_preference`
Exemption Requested string	The Strong Customer Authentication (SCA) exemption requested. If no exemption is requested, this value is `none`.
Exemption Applied string	The exemption applied. If no exemption is applied, this value is `none`.
Processing Channel ID string	The processing channel's unique identifier, prefixed with `pc_`.
Entity ID string	The entity's unique identifier, prefixed with `ent_`.
Subentity ID string	The sub-entity's unique identifier, prefixed with `ent_`.
Client ID string	Your unique identifier as a Checkout.com client, prefixed with `cli_`.
Authentication Decline Code string	The decline code, as defined by the EMVCo specification.
Authentication Decline Reason string	The decline reason, which corresponds to the authentication decline code.
Challenge Cancel Code string	The challenge cancel code, as defined by the EMVCo specification.
Challenge Cancel Reason string	The challenge cancel reason, which corresponds to the challenge cancel code.
Issuer Challenge UI Type string	The type of 3DS challenge the issuer used in the authentication session. This can be one of: `Dynamic` `OOB` `Static`
Challenge Interactions number	The number of interactions with the 3DS challenge, as reported by the access control server (ACS).
Authentication Type string	The type of authentication that was requested. Example – `regular`
Authentication Category string	The category of authentication that was requested. Example – `payment`
3DS Server Transaction ID string	The unique transaction identifier provided by the 3DS server. Example – `c1e4521a-c5ff-460e-8c72-38bf663f9cd6`
DS Transaction ID string	The unique transaction identifier provided by the directory server (DS). Example – `25474b38-453a-4cd8-9f33-ed91645c4188`
ACS Transaction ID string	The unique transaction identifier provided by the ACS server.
ACS Reference Number string	The reference for the ACS, as registered with EMVCo.
Channel Type string	The channel through which the authentication session took place. For example, `browser`.
Transaction Type string	The type of transaction the authentication session was for. For example `goods_service`.
Browser Accept Header string	The HTTP accept header provided by the user's browser.
Browser User Agent string	The user agent data provided by the user's browser.
Browser Screen Height string	The browser screen height.
Browser Screen Width string	The browser screen width.
Browser Color Depth string	The browser color depth. For example, `24` if the color depth is 24-bit.
Browser Java Enabled bool	Specifies whether Java is enabled in the user's browser.
Browser Javascript Enabled bool	Specifies whether Javascript is enabled in the user's browser.
Browser IP string	The browser IP address.
Browser Language string	The browser language. For example, `en-US` for US English.
Browser Time Zone (w.r.t. UTC) string	The time difference between UTC and the time reported by the browser, in minutes.
Acquirer Merchant ID string	The unique identifier for the acquirer merchant.
Acquirer BIN string	The acquirer's bank identification number (BIN).
Billing Address Line 1 string	The first line of the billing address.
Billing Address Line 2 string	The second line of the billing address.
Billing Address Line 3 string	The third line of the billing address.
Billing Address City string	The city of the billing address.
Billing Address State string	The state of the billing address.
Billing Address Country string	The country of the billing address.
Billing Address ZIP/Postcode string	The ZIP or postal code of the billing address.
Shipping Address Line 1 string	The first line of the shipping address.
Shipping Address Line 2 string	The second line of the shipping address.
Shipping Address Line 3 string	The third line of the shipping address.
Shipping Address City string	The city of the shipping address.
Shipping Address State string	The state of the shipping address.
Shipping Address Country string	The country of the shipping address.
Shipping Address ZIP/Postcode string	The ZIP or postal code of the shipping address.
3DS Method Completion string	The outcome of the 3DS method completion call. This can be one of: `N` – Unsuccessful `U` – Unavailable `Y` – Successful
Installment no. of Payments number	The number of installment payments authentication was requested for.
Installment/Recurring Frequency string	The minimum number of days between authorizations for the installment or recurring authentication.
Installment/Recurring Expiry string	The date that authentication for the installment or recurring payment expires. After this date, you cannot perform an authorization by referencing the authenticated payment.
Integration string	The type of integration used for the authentication session. This can be one of: `gateway` – Integrated authentication `merchant` – Standalone authentication
Cardholder Name string	The name the cardholder provided during the transaction.
Cardholder Email string	The cardholder's email address.
Preferred Experience Requested string	The preferred authentication experiences requested. For example, `google_spa, 3ds`.
Processed Experience string	The authentication experience used in the authentication session. For example, `google_spa`.
Google SPA Experience Status string	The status of the Google SPA authentication experience.
3DS Experience Status string	The status of the 3DS authentication experience.

Session Date

string

The date the authentication session was created.
Format – YYYY-MM-DD

Session Time

string

The time the authentication session was created, in UTC.
Format – HH:MM:SS

Session Date Time

date-time

The date and time the authentication session was created, in UTC.
Standard – ISO 8601 code
Example – yyyy-mm-ddThh:mm:ss.sss

Payment ID

string

The unique identifier for the payment, prefixed with pay_.

Session ID

string

The unique identifier for the authentication session, prefixed with sid_.

Client Name

string

Your unique identifier as a Checkout.com client, prefixed with cli_.

Entity Name

string

The name of your Checkout.com entity.

Merchant Name

string

The name of the merchant involved in the authentication session.

Billing Descriptor Name

string

The merchant's name displayed in the billing descriptor that appears on the customer's bank statement.

Billing Descriptor City

string

The merchant's city displayed in the billing descriptor.

Merchant Country

string

The registered country of the merchant involved in the authentication session.

Authentication Response Code

number

The authentication response code, which represents the outcome of the authentication session.

This can be one of:

A – Authentication attempted – This is classified as a successful authentication when processed using a stand-in service.
I – Informational only
N – Authentication declined
R – Authentication rejected
U – Authentication unavailable
Y – Authentication approved

Status

string

The status of the authentication session.

ECI Code

string

The Electronic Commerce Indicator (ECI) value.

Liability Shift

bool

Specifies whether there is a liability shift to the issuer.

This value is indicative, based on the authentication session. The final liability shift is determined by the outcome of the authorization request.

Protocol Version

string

The 3D Secure (3DS) protocol version used in the authentication session, if the payment was processed with 3DS authentication.

Challenged

bool

Specifies whether the authentication was challenged.

Scheme

string

The scheme the authentication was processed with.
Example – mastercard

Amount

number

The payment amount.

Currency

string

The transaction currency.
Standard – ISO 4217 code
Example – USD

Card Number

string

The card number used in the authentication session.

This value is typically masked for security purposes.

Network Token

bool

Specifies whether a network token was used in the authentication session.

Card Category

string

The card category used in the authentication session.

This can be one of:

COMMERCIAL
CONSUMER

Card Product Type

string

The card product type of the card used in the authentication session.
Example – Mastercard Classic

Card Product ID

string

The card product ID of the card used in the authentication session.
Example – MDH

Card Type

string

The type of card used in the authentication session.

This can be one of:

CREDIT
DEBIT

Card Fingerprint

string

The unique fingerprint of the card used for the payment.

Issuer Country

string

The country that the card used in the authentication session was issued in.
Standard – ISO alpha-3 country code
Example – USA

Issuer Name

string

The name of the issuer that issued the card used in the authentication session.

Merchant Category Code

number

The merchant category code (MCC) of the merchant that processed the payment.

Reference

string

Your reference for the authentication.

Challenge Indicator Requested

string

The challenge indicator requested.
This can be one of:

challenge_requested
challenge_requested_mandate
no_challenge_requested
no_preference

Challenge Indicator Applied

string

The challenge indicator applied.
This can be one of:

challenge_requested
challenge_requested_mandate
no_challenge_requested
no_preference

Exemption Requested

string

The Strong Customer Authentication (SCA) exemption requested.

If no exemption is requested, this value is none.

Exemption Applied

string

The exemption applied.

If no exemption is applied, this value is none.

Processing Channel ID

string

The processing channel's unique identifier, prefixed with pc_.

Entity ID

string

The entity's unique identifier, prefixed with ent_.

Subentity ID

string

The sub-entity's unique identifier, prefixed with ent_.

Client ID

string

Your unique identifier as a Checkout.com client, prefixed with cli_.

Authentication Decline Code

string

The decline code, as defined by the EMVCo specification.

Authentication Decline Reason

string

The decline reason, which corresponds to the authentication decline code.

Challenge Cancel Code

string

The challenge cancel code, as defined by the EMVCo specification.

Challenge Cancel Reason

string

The challenge cancel reason, which corresponds to the challenge cancel code.

Issuer Challenge UI Type

string

The type of 3DS challenge the issuer used in the authentication session.
This can be one of:

Dynamic
OOB
Static

Challenge Interactions

number

The number of interactions with the 3DS challenge, as reported by the access control server (ACS).

Authentication Type

string

The type of authentication that was requested.
Example – regular

Authentication Category

string

The category of authentication that was requested.
Example – payment

3DS Server Transaction ID

string

The unique transaction identifier provided by the 3DS server.
Example – c1e4521a-c5ff-460e-8c72-38bf663f9cd6

DS Transaction ID

string

The unique transaction identifier provided by the directory server (DS).
Example – 25474b38-453a-4cd8-9f33-ed91645c4188

ACS Transaction ID

string

The unique transaction identifier provided by the ACS server.

ACS Reference Number

string

The reference for the ACS, as registered with EMVCo.

Channel Type

string

The channel through which the authentication session took place. For example, browser.

Transaction Type

string

The type of transaction the authentication session was for. For example goods_service.

Browser Accept Header

string

The HTTP accept header provided by the user's browser.

Browser User Agent

string

The user agent data provided by the user's browser.

Browser Screen Height

string

The browser screen height.

Browser Screen Width

string

The browser screen width.

Browser Color Depth

string

The browser color depth. For example, 24 if the color depth is 24-bit.

Browser Java Enabled

bool

Specifies whether Java is enabled in the user's browser.

Browser Javascript Enabled

bool

Specifies whether Javascript is enabled in the user's browser.

Browser IP

string

The browser IP address.

Browser Language

string

The browser language. For example, en-US for US English.

Browser Time Zone (w.r.t. UTC)

string

The time difference between UTC and the time reported by the browser, in minutes.

Acquirer Merchant ID

string

The unique identifier for the acquirer merchant.

Acquirer BIN

string

The acquirer's bank identification number (BIN).

Billing Address Line 1

string

The first line of the billing address.

Billing Address Line 2

string

The second line of the billing address.

Billing Address Line 3

string

The third line of the billing address.

Billing Address City

string

The city of the billing address.

Billing Address State

string

The state of the billing address.

Billing Address Country

string

The country of the billing address.

Billing Address ZIP/Postcode

string

The ZIP or postal code of the billing address.

Shipping Address Line 1

string

The first line of the shipping address.

Shipping Address Line 2

string

The second line of the shipping address.

Shipping Address Line 3

string

The third line of the shipping address.

Shipping Address City

string

The city of the shipping address.

Shipping Address State

string

The state of the shipping address.

Shipping Address Country

string

The country of the shipping address.

Shipping Address ZIP/Postcode

string

The ZIP or postal code of the shipping address.

3DS Method Completion

string

The outcome of the 3DS method completion call. This can be one of:

N – Unsuccessful
U – Unavailable
Y – Successful

Installment no. of Payments

number

The number of installment payments authentication was requested for.

Installment/Recurring Frequency

string

The minimum number of days between authorizations for the installment or recurring authentication.

Installment/Recurring Expiry

string

The date that authentication for the installment or recurring payment expires.

After this date, you cannot perform an authorization by referencing the authenticated payment.

Integration

string

The type of integration used for the authentication session. This can be one of:

gateway – Integrated authentication
merchant – Standalone authentication

Cardholder Name

string

The name the cardholder provided during the transaction.

Cardholder Email

string

The cardholder's email address.

Preferred Experience Requested

string

The preferred authentication experiences requested. For example, google_spa, 3ds.

Processed Experience

string

The authentication experience used in the authentication session. For example, google_spa.

Google SPA Experience Status

string

The status of the Google SPA authentication experience.

3DS Experience Status

string

The status of the 3DS authentication experience.

Authentication Report

Report availability

Report format

Sample report

Information

Report fields