initializeMandate
To search in the page use Ctrl+F on your keyboard
This operation initializes a mandate signing process. If the initialization step is successful, you will receive in response a secure URL (redirectionUrl) to which the customer should be redirected to continue the signing process. This redirection must be made via a POST form, see the part “POST form to external suppliers”.
In the request, you shall also indicate the URL (merchantReturnUrl) to which the customer will be redirected to at the end of the process for mandate signature. You must then call the finalizeMandate service to obtain the result of the signing process.
Recommended interfaceVersion: MR_WS_2.55
Endpoints
-
- PROD
-
https://sherlocks-office-server.secure.lcl.fr/rs-services/v2/mandate/initializeMandate
- method
- POST
-
- TEST
-
https://office-server-sherlocks.test.sips-services.com/rs-services/v2/mandate/initializeMandate
- method
- POST
-
- PROD
-
https://sherlocks-office-server.secure.lcl.fr/services/v2/mandate?wsdl
- method
- POST
-
- TEST
-
https://office-server-sherlocks.test.sips-services.com/services/v2/mandate?wsdl
- method
- POST
Request
Required
-
iban
- presence
- Required
- Interface version
- 2.0
International Bank Account Number (IBAN) identifying a bank account in conformity with ISO 13616.
-
interfaceVersion
- presence
- Required
- Interface version
- 2.0
Version of the interface used. It is composed of a prefix that varies according to the function used and a version number (e.g. IR_WS_2.47).
Please refer to the function page for the value to use. Use the latest interface version number.
List of values
MR_WS_2.
- Sherlock’s Office (SOAP/JSON) interface for mandate management.
-
keyVersion
- presence
- Required
- Interface version
- 2.0
Version of the merchant’s secret key used to calculate the imprint of the message (key stored by the merchant to verify the imprint of the automatic and manual notifications).
-
merchantId
- presence
- Required
- Interface version
- 2.0
Identifier of the shop, this value is provided to the merchant by Sherlock’s during the shop registration.
-
merchantReturnUrl
- presence
- Required
- Interface version
- 2.0
Merchant Return Url (used for a Sherlock’s Office payment request with redirection).
-
paymentMeanAlias
- presence
- Required
- Interface version
- 2.0
Payment mean alias defined by the Buyer and used in the Buyer’s wallet.
Attention: use this free field only for the intended purpose, and therefore do not insert any personal data, especially cardholder data
As a subcontractor, Crédit Lyonnais processes personal data in accordance with the Data Processing Agreement (DPA), appended to all contracts.
Thus:
- The personal data specified in the DPA must only be transmitted to Crédit Lyonnais via the fields provided for this purpose (see data dictionary).
- All other personal data not listed in the DPA must not be transmitted to Crédit Lyonnais.
-
seal
- presence
- Required
- Interface version
- 2.0
Message seal used to ensure the integrity of the request and the authentication of sender / receiver of the message.
Optional
-
customerAddress
- presence
- Optional
- Interface version
- 2.0
Contains the customer’s address information.
Contains
-
addressAdditional3
- presence
- Optional
- Interface version
- 2.0
Addition 3 to the address.
-
businessName
- presence
- Optional
- Interface version
- 2.0
Business name.
-
country
- presence
- Optional
- Interface version
- 2.0
Country code for the address.
List of values
ABW
- ARUBA
AFG
- AFGHANISTAN
AGO
- ANGOLA
AIA
- ANGUILLA
ALA
- ÅLAND ISLANDS
ALB
- ALBANIA
AND
- ANDORRA
ARE
- UNITED ARAB EMIRATES
ARG
- ARGENTINA
ARM
- ARMENIA
ASM
- AMERICAN SAMOA
ATA
- ANTARCTICA
ATF
- FRENCH SOUTHERN TERRITORIES
ATG
- ANTIGUA AND BARBUDA
AUS
- AUSTRALIA
AUT
- AUSTRIA
AZE
- AZERBAIJAN
BDI
- BURUNDI
BEL
- BELGIUM
BEN
- BENIN
BES
- BONAIRE, SINT EUSTATIUS AND SABA
BFA
- BURKINA FASO
BGD
- BANGLADESH
BGR
- BULGARIA
BHR
- BAHRAIN
BHS
- BAHAMAS
BIH
- BOSNIA AND HERZEGOVINA
BLM
- SAINT KITTS AND NEVIS
BLR
- BELARUS
BLZ
- BELIZE
BMU
- BERMUDA
BOL
- BOLIVIA, PLURINATIONAL STATE OF
BRA
- BRAZIL
BRB
- BARBADOS
BRN
- BRUNEI DARUSSALAM
BTN
- BHUTAN
BVT
- BOUVET ISLAND
BWA
- BOTSWANA
CAF
- CENTRAL AFRICAN REPUBLIC
CAN
- CANADA
CCK
- COCOS (KEELING) ISLANDS
CHE
- SWITZERLAND
CHL
- CHILE
CHN
- CHINA
CIV
- CÔTE D’IVOIRE
CMR
- CAMEROON
COD
- CONGO, THE DEMOCRATIC REPUBLIC OF THE
COG
- CONGO
COK
- COOK ISLANDS
COL
- COLOMBIA
COM
- COMOROS
CPV
- CAPE VERDE
CRI
- COSTA RICA
CUB
- CUBA
CUW
- CURAÇAO
CXR
- CHRISTMAS ISLAND
CYM
- CAYMAN ISLANDS
CYP
- CYPRUS
CZE
- CZECH REPUBLIC
DEU
- GERMANY
DJI
- DJIBOUTI
DMA
- DOMINICA
DNK
- DENMARK
DOM
- DOMINICAN REPUBLIC
DZA
- ALGERIA
ECU
- ECUADOR
EGY
- EGYPT
ERI
- ERITREA
ESH
- WESTERN SAHARA
ESP
- SPAIN
EST
- ESTONIA
ETH
- ETHIOPIA
FIN
- FINLAND
FJI
- FIJI
FLK
- FALKLAND ISLANDS (MALVINAS)
FRA
- FRANCE
FRO
- FAROE ISLANDS
FSM
- MICRONESIA, FEDERATED STATES OF
GAB
- GABON
GBR
- UNITED KINGDOM
GEO
- GEORGIA
GGY
- GUERNSEY
GHA
- GHANA
GIB
- GIBRALTAR
GIN
- GUINEA
GLP
- GUADELOUPE
GMB
- GAMBIA
GNB
- GUINEA-BISSAU
GNQ
- EQUATORIAL GUINEA
GRC
- GREECE
GRD
- GRENADA
GRL
- GREENLAND
GTM
- GUATEMALA
GUF
- FRENCH GUIANA
GUM
- GUAM
GUY
- GUYANA
HKG
- HONG KONG
HMD
- HEARD ISLAND AND MCDONALD ISLANDS
HND
- HONDURAS
HRV
- CROATIA
HTI
- HAITI
HUN
- HUNGARY
IDN
- INDONESIA
IMN
- ISLE OF MAN
IND
- INDIA
IOT
- BRITISH INDIAN OCEAN TERRITORY
IRL
- IRELAND
IRN
- IRAN, ISLAMIC REPUBLIC OF
IRQ
- IRAQ
ISL
- ICELAND
ISR
- ISRAEL
ITA
- ITALY
JAM
- JAMAICA
JEY
- JERSEY
JOR
- JORDAN
JPN
- JAPAN
KAZ
- KAZAKHSTAN
KEN
- KENYA
KGZ
- KYRGYZSTAN
KHM
- CAMBODIA
KIR
- KIRIBATI
KNA
- SAINT BARTHÉLEMY
KOR
- KOREA, REPUBLIC OF
KWT
- KUWAIT
LAO
- LAO PEOPLE’S DEMOCRATIC REPUBLIC
LBN
- LEBANON
LBR
- LIBERIA
LBY
- LIBYA
LCA
- SAINT HELENA, ASCENSION AND TRISTAN DA CUNHA
LIE
- LIECHTENSTEIN
LKA
- SRI LANKA
LSO
- LESOTHO
LTU
- LITHUANIA
LUX
- LUXEMBOURG
LVA
- LATVIA
MAC
- MACAO
MAF
- SAINT MARTIN (FRENCH PART)
MAR
- MOROCCO
MCO
- MONACO
MDA
- MOLDOVA, REPUBLIC OF
MDG
- MADAGASCAR
MDV
- MALDIVES
MEX
- MEXICO
MHL
- MARSHALL ISLANDS
MKD
- MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF
MLI
- MALI
MLT
- MALTA
MMR
- MYANMAR
MNE
- MONTENEGRO
MNG
- MONGOLIA
MNP
- NORTHERN MARIANA ISLANDS
MOZ
- MOZAMBIQUE
MRT
- MAURITANIA
MSR
- MONTSERRAT
MTQ
- MARTINIQUE
MUS
- MAURITIUS
MWI
- MALAWI
MYS
- MALAYSIA
MYT
- MAYOTTE
NAM
- NAMIBIA
NCL
- NEW CALEDONIA
NER
- NIGER
NFK
- NORFOLK ISLAND
NGA
- NIGERIA
NIC
- NICARAGUA
NIU
- NIUE
NLD
- NETHERLANDS
NOR
- NORWAY
NPL
- NEPAL
NRU
- NAURU
NZL
- NEW ZEALAND
OMN
- OMAN
PAK
- PAKISTAN
PAN
- PANAMA
PCN
- PITCAIRN
PER
- PERU
PHL
- PHILIPPINES
PLW
- PALAU
PNG
- PAPUA NEW GUINEA
POL
- POLAND
PRI
- PUERTO RICO
PRK
- KOREA, DEMOCRATIC PEOPLE’S REPUBLIC OF
PRT
- PORTUGAL
PRY
- PARAGUAY
PSE
- PALESTINIAN TERRITORY, OCCUPIED
PYF
- FRENCH POLYNESIA
QAT
- QATAR
REU
- RÉUNION
ROU
- ROMANIA
RUS
- RUSSIAN FEDERATION
RWA
- RWANDA
SAU
- SAUDI ARABIA
SDN
- SUDAN
SEN
- SENEGAL
SGP
- SINGAPORE
SGS
- SOUTH GEORGIA AND THE SOUTH SANDWICH ISLANDS
SHN
- SAN MARINO
SJM
- SVALBARD AND JAN MAYEN
SLB
- SOLOMON ISLANDS
SLE
- SIERRA LEONE
SLV
- EL SALVADOR
SMR
- SINT MAARTEN (DUTCH PART)
SOM
- SOMALIA
SPM
- HOLY SEE (VATICAN CITY STATE)
SRB
- SERBIA
SSD
- SOUTH SUDAN
STP
- SAO TOME AND PRINCIPE
SUR
- SURINAME
SVK
- SLOVAKIA
SVN
- SLOVENIA
SWE
- SWEDEN
SWZ
- SWAZILAND
SXM
- SAINT PIERRE AND MIQUELON
SYC
- SEYCHELLES
SYR
- SYRIAN ARAB REPUBLIC
TCA
- TURKS AND CAICOS ISLANDS
TCD
- CHAD
TGO
- TOGO
THA
- THAILAND
TJK
- TAJIKISTAN
TKL
- TOKELAU
TKM
- TURKMENISTAN
TLS
- TIMOR-LESTE
TON
- TONGA
TTO
- TRINIDAD AND TOBAGO
TUN
- TUNISIA
TUR
- TURKEY
TUV
- TUVALU
TWN
- TAIWAN, PROVINCE OF CHINA
TZA
- TANZANIA, UNITED REPUBLIC OF
UGA
- UGANDA
UKR
- UKRAINE
UMI
- UNITED STATES MINOR OUTLYING ISLANDS
URY
- URUGUAY
USA
- UNITED STATES
UZB
- UZBEKISTAN
VAT
- SAINT VINCENT AND THE GRENADINES
VCT
- SAINT LUCIA
VEN
- VENEZUELA, BOLIVARIAN REPUBLIC OF
VGB
- VIRGIN ISLANDS, BRITISH
VIR
- VIRGIN ISLANDS, U.S.
VNM
- VIET NAM
VUT
- VANUATU
WLF
- WALLIS AND FUTUNA
WSM
- SAMOA
YEM
- YEMEN
ZAF
- SOUTH AFRICA
ZMB
- ZAMBIA
ZWE
- ZIMBABWE
-
city
- presence
- Optional
- Interface version
- 2.0
City of the address.
-
company
- presence
- Optional
- Interface version
- 2.0
Company for the address.
-
addressAdditional1
- presence
- Optional
- Interface version
- 2.0
Addition 1 to the address.
-
addressAdditional2
- presence
- Optional
- Interface version
- 2.0
Addition 2 to the address.
-
postBox
- presence
- Optional
- Interface version
- 2.0
Post box for the address.
-
state
- presence
- Optional
- Interface version
- 2.0
Address state/department. To be completed in accordance with ISO 3166-2. The first two letters designate the country and the letters following the hyphen designate the subdivision, e.g. FR-ARA for the French region Auvergne-Rhône-Alpes.
-
street
- presence
- Optional
- Interface version
- 2.0
Name of the street of the address.
-
streetNumber
- presence
- Optional
- Interface version
- 2.0
Number of the street of the address.
-
zipCode
- presence
- Optional
- Interface version
- 2.0
Postal code for the address.
-
customerContact
- presence
- Optional
- Interface version
- 2.0
Contains the customer’s information.
Contains
-
email
- presence
- Optional
- Interface version
- 2.0
Contact’s email address.
-
firstname
- presence
- Optional
- Interface version
- 2.0
First name of the contact.
-
gender
- presence
- Optional
- Interface version
- 2.0
Gender of the contact, male (=M) or female (=F).
-
initials
- presence
- Optional
- Interface version
- 2.0
contact initals
-
lastname
- presence
- Optional
- Interface version
- 2.0
Last name of the contact.
-
legalId
- presence
- Optional
- Interface version
- 2.0
Legal business identifier (SIRET in France). This field is applicable for merchant or customer (please see fields Contact).
-
mobile
- presence
- Optional
- Interface version
- 2.0
Mobile phone number for the contact.
-
phone
- presence
- Optional
- Interface version
- 2.0
Telephone number for the contact.
-
positionOccupied
- presence
- Optional
- Interface version
- 2.0
Position occupied.
-
title
- presence
- Optional
- Interface version
- 2.0
Title of the contact.
-
customerId
- presence
- Optional
- Interface version
- 2.0
Customer identifier
Attention: use this free field only for the intended purpose, and therefore do not insert any personal data, especially cardholder data
As a subcontractor, Crédit Lyonnais processes personal data in accordance with the Data Processing Agreement (DPA), appended to all contracts.
Thus:
- The personal data specified in the DPA must only be transmitted to Crédit Lyonnais via the fields provided for this purpose (see data dictionary).
- All other personal data not listed in the DPA must not be transmitted to Crédit Lyonnais.
-
customerLanguage
- presence
- Optional
- Interface version
- 2.0
Language of the user, used on the payment pages.
List of values
It
- Italian
Ja
- Japanese
cs
- Czech
da
- Danish
de
- German
el
- Greek
en
- English
es
- Spanish
et
- Estonian
fi
- Finnish
fr
- French
hu
- Hungarian
ko
- Korean
lt
- Lithuanian
lv
- Latvian
nl
- Dutch
no
- Norwegian
pl
- Polish
pt
- Portuguese
ro
- Romanian
ru
- Russian
sk
- Slovak
sl
- Slovene
sv
- Swedish
tr
- Turkish
uk
- Ukrainian
zh
- Chinese
-
intermediateServiceProviderId
- presence
- Optional
- Interface version
- 2.0
Identifier of the Service used by the merchant for the exchanges with the Sherlock’s platform.
-
mandateId
- presence
- Optional
- Interface version
- 2.0
Mandate number.
-
paymentMeanData
- presence
- Optional
- Interface version
- 2.0
Contains specific information regarding the payment method used by the buyer.
-
returnContext
- presence
- Optional
- Interface version
- 2.0
Context of a buyer’’s order.All information transmitted in this field by the merchant during the payment request is sent back in the response without amendment.Attention : the following characters “|”, “«”, “»”, and «”» are not recommended in this field. If they are used, they will be returned as provided but they will be replaced by blanks in the Sherlock’s database.
Attention: use this free field only for the intended purpose, and therefore do not insert any personal data, especially cardholder data
As a subcontractor, Crédit Lyonnais processes personal data in accordance with the Data Processing Agreement (DPA), appended to all contracts.
Thus:
- The personal data specified in the DPA must only be transmitted to Crédit Lyonnais via the fields provided for this purpose (see data dictionary).
- All other personal data not listed in the DPA must not be transmitted to Crédit Lyonnais.
-
sealAlgorithm
- presence
- Optional
- Interface version
- 2.0
Algorithm applied to calculate the seal encryption.
List of values
HMAC-SHA-256
- The encryption algorithm applied is HMAC-SHA-256
HMAC-SHA-512
- The encryption algorithm applied is HMAC-SHA-512
SHA-256
- The encryption algorithm applied is SHA-256
-
transactionActors
- presence
- Optional
- Interface version
- 2.0
Indicates the players in the transaction.
List of values
BTOB
- Business to Business
BTOC
- Business to Consumer
BTOF
- Business to organization / association
Request sample
Response
Required
-
seal
- presence
- Required
- Interface version
- 2.0
Message seal used to ensure the integrity of the request and the authentication of sender / receiver of the message.
Optional
-
acquirerResponseCode
- presence
- Optional
- Interface version
- 2.0
Response code returned by the acquirer during an authorisation request.
List of values
00
- Transaction approved or processed successfully
02
- Contact payment mean issuer
03
- Invalid acceptor
04
- Keep the payment mean
05
- Do not honour
07
- Keep the payment mean, special conditions
08
- Approve after identification
12
- Invalid transaction
13
- Invalid amount
14
- Invalid PAN
15
- Unknown payment mean issuer
17
- Payment aborted by the buyer
20
- Invalid response (error in server domain)
24
- Operation not authorised
25
- Transaction not found
30
- Format error
31
- Id of the acquiring organisation unknown
33
- payment mean expired (Paypal / Cofidis)
34
- Fraud suspicion
40
- Function not supported
41
- Payment mean lost
43
- Payment mean stolen
51
- Insufficient or exceeded credit
54
- Payment mean expired (CB / Visa / MC / WLAcq / BCMC)
55
- Wrong PIN
56
- Payment mean missing from the file
57
- Transaction unauthorised for this payment mean holder
58
- Transaction forbidden to the terminal
59
- Fraud suspicion
60
- The payment mean acceptor must contact the acquirer
61
- Exceeds the amount limit
62
- Transaction awaiting payment confirmation
63
- Security rules not complied with
65
- Allowed number of daily transactions has been exceeded
68
- Response not received or received too late
75
- Exceeded number of PAN attempts
87
- Terminal unknown
90
- System temporarily stopped
91
- Payment mean issuer inaccessible
92
- The transaction does not contain enough information to be routed to the authorizing agency
93
- Transaction cannot be completed: violation of law
94
- Duplicated transaction
96
- System malfunction
97
- Request time-out; transaction refused
98
- Server unavailable; network routing requested again
99
- Incident with initiator domain
A1
- Transaction refused because the 3-D Secure authentication data is missing
A4
- Transaction refused because the 3-D Secure authentication exemption is misused
R1
- the cardholder (or his bank) has revoked recurring payments made at a merchant
R3
- the cardholder (or his bank) has revoked all recurring payments
-
errorFieldName
- presence
- Optional
- Interface version
- 2.21
Error field name of the incoming request. Present when responseCode = 12 or 30.
-
mandateId
- presence
- Optional
- Interface version
- 2.0
Mandate number.
-
mandateResponseCode
- presence
- Optional
- Interface version
- 2.0
Response code returned by the mandate management service.
List of values
00
- Mandate operation accepted
03
- Invalid merchant contract
05
- Process is refused
12
- Invalid mandate, check the request parameters
17
- Buyer cancellation
25
- Unknown mandate
30
- Format error
34
- Fraud suspicion (erroneous seal)
40
- Function not supported: the operation that you wish to perform is not part of the operation type for which you are authorised
99
- Temporary problem at the Sherlock’s server level
-
messageVersion
- presence
- Optional
- Interface version
- 2.0
Parameters version of redirection (used for Sherlock’s Office with redirection).
-
redirectionData
- presence
- Optional
- Interface version
- 2.0
In case of 3-D Secure payment, contains the context of the transaction retrieved from the cardCheckEnrollment method. In case of 3-D Secure server Standalone, it contains the Payer Authentication Request (PAReq) that the merchant must transmit to ACS for 3-D Secure authentication (format: base 64 encoded).In case of external payment provider, contains the context of the transaction sent by the merchant during the transaction initialisation.
-
redirectionUrl
- presence
- Optional
- Interface version
- 2.0
In case of an enrollment check, contains the redirection URL to the ACS required for the cardholder authentication. In case of Sherlock’s In-App payment, contains the URL of the next request. In case of 3-D Secure Standalone, contains the redirection URL to the ACS required for the cardholder authentication.
Response sample
Changelog