Prerequisites

Before integrating Web Checkout, make sure to meet the following prerequisites:

  • Make sure you have a Samsung Pay service ID.

    To obtain the service ID, create a service with the portal or API.

  • Make sure your acquirer and issuer support tokenized payments.

    After the customer authorizes their payment, Samsung Pay returns the payment credentials to you as a token, which you then submit to your payment provider. For this process to work, your acquirer and issuer must support tokenized transactions in accordance with card network specifications.

  • If your website applies Content Security Policy (CSP), get the following Samsung Pay resources allowlisted:

    Directive

    		 Staging environment

    		 Production environment
    frame-src

    		 us-online.stg.mpay.samsung.com

    		 us-online.mpay.samsung.com
    img-src

    		 resource.stg.samsungpay.com

    		 resource.samsungpay.com
    script-src

    		 img.mpay.samsung.com

    		 img.mpay.samsung.com
    font-src

    		 d15oee3mjtik2a.cloudfront.net

    		 d15oee3mjtik2a.cloudfront.net
    connect-src

    		 us-online.stg.mpay.samsung.com

    		 us-online.mpay.samsung.com

    CSP is a security mechanism that restricts which external resources a webpage is allowed to load. If your website has enabled CSP, Web Checkout requires certain domains to be allowlisted so that the payment UI, resources, and network requests can function correctly.