Inntopia Commerce + Shift4 Payments^®

• Shift4 must be used with Inntopia's reseller-collect payment model.
• One-time charges
• Subsequent charges via a Deposit Schedule, through the payment queue
• Tokenization
• Card Verification Values (CVV) or Card Verification Digits (CVD)
• Address Verification Values (AVS)
• Shift4 provides a combination of processor AND gateway services.
• *SREDKey devices for transmitting credit card data directly to Inntopia.
• ** Kount Fraud Protection to prevent unauthorized credit card transactions
• ** 3D Secure (3DS) authentication protocol to add extra security to credit card transactions

* UTG version only

** REST version only

• i4Go® and Access Token are the Shift4 products that Inntopia communicates with via the integration.
• Inntopia utilizes Shift4's tokens, as these can be re-used for subsequent transactions.
• Shift4 does not allow the re-display of a plain-text card number once it is tokenized, but Inntopia can process subsequent charges against the tokenized card.
• If your Inntopia/Shift 4 integration uses TrueType tokens, Shift4/Inntopia displays the last four digits of a credit card as the first four digits. For example, the credit card number 1111 2222 3333 4444 would be displayed as 4444 XXXX XXXX XXXX.
• The Inntopia/Shift4 REST integration uses GVT tokens; therefore, Shift4/Inntopia displays only the last four digits of a credit card. For example, the credit card number 1111 2222 3333 4444would be displayed as XXXX XXXX XXXX 4444
• Inntopia is certified to support one-pass Address Verification Services (AVS). Partners work directly with Shift4 to define the specific codes used during AVS. Shift4 performs the AVS check and then sends back a Pass or Fail message to Inntopia.
• Shift4 has certified Inntopia for both CRS/agent-initiated and online credit card transactions.

Inntopia offers the ability to collect and submit Card Verification Value (CVV) codes for use with Shift4. Resellers using the Shift4 payment gateway can submit a request to Inntopia Partner Services to activate fields in Inntopia CRS and Inntopia eComm to collect, view, and submit the CVV code for credit-card transactions.

Note: Partners should review the CVV options in their Shift4 account prior to activating this feature in Inntopia to ensure they are collecting/validating CVV in all scenarios that will give the partner and the guest the best experience.

To learn more about enabling this feature for your Inntopia account, contact Inntopia Partner Services.

Address Verification Service (AVS) is a part of credit card authorization that aids in preventing fraudulent online transactions by verifying the billing address submitted by a customer with the billing address on file with the credit card company. Once submitted, the credit card company replies to the payment gateway with a response code indicating whether or not the billing address, and subsequently card ownership, is verified as a match.

In Shift4, address verification and card tokenization take place simultaneously when the card number is originally entered.

If the AVS should fail and the billing address for a card must be corrected, the card must be removed and re-entered with the correct billing address. Simply changing the billing address will not resolve the AVS issue. The process of removing and re-entering the card allows for both address re-verification and re-tokenization of the card with the correct address.

Kount AI-Driven Fraud Protection is an optional add-on to the Inntopia + Shift4 integration. Once implemented, fraud protection checks occur post payment authorization.

For information on fees and procedures associated with implementing Kount, contact your Shift4 representative.

3D Secure (3DS) is an online payment security protocol that adds an extra layer of authentication to credit and debit card transactions, verifying the card holder’s identity to reduce fraud and unauthorized chargebacks.

3D secure is included with Shift4. For additional details, contact your Shift4 representative.

• Tokenized and untokenized credit card numbers cannot be passed to third-party systems (PMS/POS).
• Shift4 does not provide stand-alone, gateway-only services.
• Independent refund on a card without a correlated charge.
• Pre-authorization of the card for a subsequent capture transaction.
• Pre-authorization completion (capture), or charging the card in a separate step.
• Shift4 cannot be used with IBE V9 as the credit card number will not be tokenized.
• * Due to differences in the tokenization process, a CRS sales ID should not be used in eComm links provided to guests (i.e. for promotions). For any eComm links provided to guests, use the eComm sales ID.

* UTG version only

The SREDKey device integration is an optional feature of the Inntopia + Shift4 integration. To help reduce fraud at call centers, SREDKey devices allow Inntopia CRS agents to more securely enter credit card data into the Inntopia system without leaving a keyboard entry cache footprint.

Requirements

• You must have an existing integration with Shift4.
• You must contact Shift4 to arrange delivery of the SREDKey devices for your call center agents.
• Inntopia staff assists with activating SREDKey capability for your account and with device set up.
• Once SREDKey device capability is activated and set up for a sales channel, all agents accessing that sales channel can only enter credit card data through the SREDKey device.

SREDKey Implementation

1. Partner: Contacts Shift4 to request SREDKey devices.
2. Shift4: Programs requested devices with proper key and code and sends devices to Partner.
3. Partner: Submit SREDKey set-up request to Inntopia that includes all sales channel IDs for which you want to enable SREDKey capabilities.
4. Inntopia: Enable SREDKey capability in each requested sales channel and complete utility set up.
5. Inntopia + Partner: Work together to teach partner the process for setting up SREDKey devices and connect devices to user computers.
6. Inntopia + Partner: Test devices and connection to Inntopia to ensure credit card data is flowing as expected.

Implementation Fee

There is a set-up fee associated with configuring SREDKey for your sales channels. For information on set up fees, contact Inntopia Partner Services.

Enter Credit Card via SREDKey Device

The instructions below explain the process for call center agents to enter guest credit card information into the Inntopia system using the SREDKey device.

1. Be sure your SREDKey device is plugged into your computer via USB port.
2. From the Inntopia CRS home page, click New Session and log a marketing source. To open the session in a new window, check the Open in new window box. Otherwise, leave this box unchecked.
3. In the corresponding text box of the Customer window, enter the last name of the person to whose profile you want to add a credit card.
4. Click Find. A list of profiles with similar names to what you entered appears.
5. Find the profile you want to edit and click its corresponding Select link. The name you selected appears in the Customer window.
6. In the Customer window, click Edit.

   

   The customer profile fields appear with the information previously entered for the customer displayed in the fields.

   

7. In the Credit Card Information box, click Add Card(s) or Add/Edit Cards. The Add Card pop-up window appears with most fields pre-populated with the customer information and an Enter using SREDKey button.

   

8. Click the Enter using SREDKey button. The Awaiting SREDKey Input button appears. This button flashes until the credit card information is received from the SREDKey device.

   

   Note: After clicking the Enter using SREDKey button, do NOT click anywhere else on the screen or the data will not flow from the device to the Add Card window.

9. On the SREDKey device, enter the guest's credit card number and press Enter. The number appears masked in the device display screen.

   

10. On the SREDKey device, enter the guest's credit card expiration date and press Enter.
11. On the SREDKey device, enter the guest's credit card CVV code and press Enter. The CVV code appears masked in the device display screen.

    The SREDKey device transmits the credit card information to Inntopia and the fields in the Add Card pop-up window are automatically populated with the guest's credit card information.

    

12. On the Add Card window, make any necessary edits to the guest's name and/or address and click Add Card. The credit card is added to the guest profile.

    Note: The credit card brand, number, and expiration date are not editable.

1. Partner: Contact Shift4 to request your Shift4 Access Token that uses the Global Token Vault and perform the necessary setup within Shift4.
2. Partner: Securely deliver the Shift4 Access Token to Inntopia, preferably over the phone.
3. Inntopia: Partner Services enters the following details within the CRS System page:

   Inntopia Field Name =	Shift4 Terminology =
   Gateway	Shift4
   Merchant Number	Gateway Merchant ID
   Host IP Address

4. Inntopia: Partner Services creates an INNTERACT case requesting the Access Token be applied to the online sales channel. The request includes the following information:
   • Shift4 Access Token – Also referred to as "Auth Token" or "I4GO Token"
   • Sales ID

     Note: CRS Sales ID(s) must be set up if agents are going to build quotes/send itineraries to guest for booking.

   • Desired go-live date
     • Allow at least 10 working days for the setup/testing to be complete.
5. Inntopia: Onboarding team or Partner Services works with Partner to conduct test bookings to facilitate card charges from the various sections where charges/refunds are enacted.
6. Partner: Once testing is complete, goes live on the integration.

Allow at least 10 business days for the setup/testing to be completed.