Security concern - Blackbaud Checkout and Strong Customer Authentication (SCA)

I have not installed it yet, we are still reviewing it. If I wait long enough the bugs usually all get worked out.

Nancy

Hi Jonathan Angell‍ I'm working with the Support team on your specific case and we'll be reaching out with a specific recommendation for you. 


For clarification for others reading this thread, if your IT / website administrator employs a specific security protocol called a Content Security Policy on pages where you've embedded Online Express forms, that is essentially instructing your website to formally disallow certain types of web traffic unless it's via one of the "whitelisted" URLs you specify in that policy. 


The implementation of BB Checkout brings an additional Blackbaud URL into the flow of payment processing. The good is that this implementation should further lessen the scope of PCI compliance below what's required using the prior Online Express card processing method. But if you're using a Content Security Policy on your website, you will need to add an additional trusted URL to your policy (https://payments.blackbaud.com).


If you have specific questions about your organization's implementation of a Content Security Policy as it relates to using Online Express with BB Checkout, please contact our Support team and we'll be able to provide the specific info/guidance you need.


Thanks!

Chris Martin

Blackbaud Product Management

Hi Jonathan,


Thank you for alerting us to the issue as I was considering activating this as well since we have many EU donors. Was that declined charge coming from the EU or US? Just curious.


Thanks!


Kathy