The top-hand part of this page contains the list of webshops you have access to.

You can extend this section to select another webshop by clicking on the  icon.

A data entry field at the top of this area makes it possible to filter webshops using all or part of their names or ID.

Click on one of the webshops to select it and display its profiles.

The menu at the top of this part enables you to access the features for administering the profiles and lists of the selected webshop.

Tip: at various places in the interface, you will be able to click on  buttons that will give you access to detailed information about the elements located next to them.

Pagination

At several places of the interface, you may find tables the elements of which are shown across several pages when the content requires it. Buttons for navigating through the pages are then displayed.

Multiple selection

When list elements can be selected, a checkbox in the header of the list enables you to select or deselect all of them with a single click, including those that may be on other pages.

When multiple elements are selected, some buttons displayed at the bottom of the table make it possible to perform actions on the whole selection.

The homepage of this section provides an overview of the webshop profiles in the form of a list.

If you have subscribed to the option to use the antifraud controls before the authentication, then a tab bar allows you to switch between the before authentication profile list and before authorisation profile list:

The Live status column shows whether the profile is active or not.

profile is inactive

profile is active

The live status of a profile is inactive:

• if the profile has never been published
• if the profile has been deactivated manually
• or if the profile has been automatically deactivated by the activation of another profile that conflicts with the associated means of payment.

The Draft status column shows whether the profile is active or not:

Status	Publication status
	The profile has been created but never published.
	The profile has been published and is used to evaluate transactions if it is active (see above).
	The profile has been modified since it was last published. It must be republished for the changes to be taken into account for transaction evaluation. Important : this does not affect the functioning of the published version of the profile, which continues working the same way as before.

The Payment means column shows the means of payment associated with a profile.

Profiles can be customised for specific means of payment. This column summarises them.

The means of payment over a coloured background are those associated with the published version of the profile.

The means of payment over a grey background are those that are only present in the working version, and which are thus inactive for transaction evaluation.

In the following example, Mastercard and Visa are associated with the published profile and CB is only in the working version:

You can click on the blue column header to sort the list according to the criterion.

Clicking on a profile of the list enables you to view and edit the details of its configuration.

Example of a profile life cycle:

Click on the button to create a new profile. The creation options are as follows:

• Go-No-Go profile

  If this option is authorised by the distributor, select the Go-No-Go profile option in the Create profile menu-button list. You will be given access to the new profile creation page.

or

• Select Copy existing to create a new profile from a profile already existing in the webshop. A new window will pop up and let you choose the profile to be copied.
  
  

  

  
  

  Having chosen the profile to be copied, you will get access to the profile creation page.

or

• From a profile template

  As with copying an existing profile, a popup window allows you to choose, from a list of available profile templates, the one that will serve as the basis for the new profile created.

You will then be taken to the profile creation page:

• Profile name:

  The profile name must be unique for a given webshop and can consist of a maximum of 30 characters among the following: A-Z, a-z, 0-9, _ (underscore) and space.

• Means of payment:

  You can choose whether the profile must apply to one or more specific means of payment. Check the boxes of the required means of payment. The list of the available means of payment depends on the contracts that are active on the webshop and configured in the Portail Sherlock's.

  Tip: default profiles

  If the profile must apply to all means of payment, it is a default profile; therefore, there is no need to check anything.

  The fact that a means of payment of the list is greyed out and tagged indicates that it is already selected in another profile. You can still check it if you wish. It will then be removed from the other profile. A warning message is displayed to remind you of this when you check the means of payment:

  
  
  
  
  
  Attention: only one profile for a given means of payment

  Only one active profile can be associated with a given means of payment. The configuration interface guarantees this by automatically deleting the means of payment from the other profiles if there is a conflict with a newly edited profile. At the time of its publication, this profile will be fully associated with the means of payment concerned.

• Count refused transactions in velocity rules

  Check this option to account for refused transactions in the counters (in addition to accepted transactions).

• Parameters currency

  If a webshop has contracts that involve means of payment in multiple currencies, you can choose, in the details of a rule, the currency that is used to set amounts.

  IMPORTANT: all transactions can be evaluated by a profile regardless of their respective currencies. Indeed, this parameter does not mean in any way that the profile only applies to the transactions the amounts of which are given in the chosen currency.

  If the transaction uses a currency other than the one configured in the profile, currency conversion is performed.

• Profile rules

  The Manage rules section in the creation profile page enables you to choose the rules that must be applied as part of the profile. See the 'Administering rules in profiles' section for further details.

The profile is saved when the user clicks on the button. At this moment, the profile is not active yet. It will have to be published (see the 'Editing and publishing a profile' section).

The button makes it possible to cancel the creation of the profile and to go back to the webshop profile list.

The profile editing page is almost identical to the creation page. In editing mode, the name of the profile cannot be modified.

• Profile status

  A section on the right-hand side of the page provides details about the status of the profile:

  
  
  
  
  

  This section includes the status (see the 'Profile list' section), the publication date and the settings currency. The modification date corresponds to the date on which the work version was saved for the last time.

• Actions available in editing mode

  Action	Description
  	Saves the changes made to the working version. This operation does not publish the changes. For this purpose, you will have to use the "Publish" button.
  	Restore a profile the working version of which has been modified, in the state it was in the last time it was published. This action is only available if the profile has been published and has been modified ever since (its status is then "To be republished".).
  	Deletes an unpublished profile. This action can no longer be accessed from this page if the profile has been published. You will have to view the published version of the profile to delete it.
  	Publishes the working version of the profile, which is then in effect for transaction evaluation. The orange colour indicates that this action may have consequences on the webshop transactions.

  Click on to be taken back to the profile list.

  Click on to view the published version of the profile if need be.

From the profile editing page, you can view the published version using the button.

The following page displays:

This screen lets you view the details of the published profile and its rules.

• Actions that can be performed on a published profile

  Action	Description
  	Activates the inactive published profile. This profile will then be in effect for transaction evaluation.
  	Deactivates the inactive published profile. This profile will then no longer be in effect for transaction evaluation.
  	Deletes a published profile.

  The orange colour indicates that this action may have consequences on the webshop transactions.

  The button takes you back to the working version of the profile.

To activate or deactivate a published profile, you must go to the page where you can view its published version:

• choose the profile to activate or deactivate in the webshop's profile list
• then click on in the profile details
• you will then have access to the or button depending on the profile's activation status.

To activate an unpublished profile, you only need to publish it.

To delete a published profile, like for activation and deactivation, you must go to the page where you can view the published version of the profile (see the 'Activating/deactivating a profile' section).

You will then be able to delete it using the  button.

To delete an unpublished profile, access its working version (see the 'Editing and publishing a profile' section) then click on the  button.

The button on the profile working version screen (see the 'Editing and publishing a profile' section), displays a pop-up window that makes it possible to activate rules in decisive or informational mode, or to deactivate them:

When you are done with the selection, click on Ok to validate your choices.

When clicking on the profile rules, you will see buttons that make it possible to perform actions on them.

• Available actions:

  Action	Description
  	These buttons make it possible to order the execution of rules.
  	This button makes it possible to modify the content of configurable rules if need be.
  	Click on this button to delete a rule from the profile without using the rule selection pop-up window.
  	This button makes it possible to convert an informational rule into a decisive one.
  	This button makes it possible to convert a decisive rule into a informational one.

Please refer to the next sections for detailed rule configuration.

Some rules are related to a given means of payment (ex: SDD) or means of payment type (ex: cards). For instance, the card velocity can only be applied for payment cards (CB, VISA, MASTERCARD, AMEX) and the IBAN velocity can only be applied to a SDD payment.

When configuring the profile, the displayed rules are filtered according to the means of payment to which you subscribed. So if you did not subscribe to a given means of payment or means of payment type, you will not be able to use the rules restricted to it.

When a rule only applies to a means of payment (type), a label is dispayed next to it:

This section makes it possible to configure the list of the countries that the rule authorises or prohibits. This list can be displayed across several pages. The Result field corresponds to the result of the rule for the concerned country.

The Status radio buttons make it possible to specify whether the list that follows is a list of authorised or prohibited countries.

The Card country field makes it possible to add a country to the list by manually entering its name into the field (autocompletion is possible).

The button displays a pop-up window that makes it possible to select one or more countries from a list:

When manual data entry is in progress, the list is filtered accordingly, which makes it possible to see whether the country being entered is already on the list:

You can export the list into a CSV file by clicking on the button. This creates a file which contains all the items of the list and is automatically downloaded via browser.

For more details on the CSV file contents, please refer to the following section: 'Appendix list export file format'.

This section makes it possible to configure the list of the country combinations that the rule authorises or prohibits. The Result fied corresponds to the result of the rule for the concerned country.

The Status radio buttons make it possible to specify whether the list that follows is a list of authorised or prohibited country combinations.

The IP address country field makes it possible to manually enter the IP address country of the combination to add to the list.

You can specify a list of IP addresses right away using the selection pop-up window. This window is accessible through the  button on the right-hand side of the data entry area. In this case, once the list is selected, "country list" is displayed in the data entry area.

The Card country field makes it possible to specify the card country of the combination to add to the list; it works in the same way as the IP address country field.

After entering the data either manually or through the pop-up window, you must click on the  button to add the selected country combinations to the list.

Alternatively, clicking on the  button makes it possible to add the combinations and their reverse orders to the list. For instance, for the IP address country = France and Card country = Belgium, this button will add France/Belgium and Belgium/France to the combination list.

When manual data entry is in progress, the list is filtered accordingly, which makes it possible to see whether the combination being entered is already on the list. This list can be displayed across several pages.

You can export the list into a CSV file by clicking on the  button. This creates a file which contains all the items of the list and is automatically downloaded via your browser.

For more details on the CSV file contents, please refer to the following section: 'Appendix list export file format'.

The configuration is done in the same way for many rules:

The Period fields make it possible to specify the periods over which the number of transactions and the amount of transactions are added up for the card concerned. You can specify these times in hours, days or weeks using the  buttons.

The Maximum number of transactions field makes it possible to specify the maximum number of transactions authorised over the period.

The Maximum cumulated amount field makes it possible to specify the maximum cumulative amount of the transactions over the period. The currency in which the cumulative amount is given is indicated in front of this field.

It is not mandatory to specify both a maximum cumulative amount and a maximum number of transactions. One of the two is enough.

Similarly, it is not mandatory to set the maximum number of transactions and the maximum cumulative amount. The setting of one of the two is enough.

The Period field makes it possible to specify the period over which customers are counted for the card concerned. This time can be specified in hours, days or weeks using the  button.

If the distributor's offering supports shared velocity, an icon on the right of the velocity rule name informs whether the velocity is shared with other webshops or is private:

shows that the velocity is shared.

shows that the velocity is private.

Move the cursor over an icon to get more information:

The configuration is done in the same way for many rules:

You can update the Non-allowed statuses list using:

• click on to add the selected element from the Allowed statuses list to the Non-allowed statuses list
• or click on to remove the selected element from the Non-allowed statuses list.

For further details about IP reputations please refer to the 'Appendix IP address reputations' section.

The Minimum amount field makes it possible to specify the authorised minimum amount for a transaction. The currency in which the minimum amount is given is indicated in front of this field.

The Maximum amount field makes it possible to specify the authorised maximum amount for a transaction.

The Non-allowed status list is updated in the same manner as for the IP address reputation list.

This list only shows the 3-D Secure statuses that risk evaluation functions can filter. Notably, the CANCEL or BYPASS statuses are not on it. The distributor may impose 3-D Secure status acceptance rules upstream of fraud risk management checks. Therefore, some transactions having certain statuses of this list might be interrupted even before a fraud risk management check can be performed. For further details about 3-D Secure statuses, please refer to the holderAuthentStatus field in the data dictionary.

The Period field makes it possible to specify the number of months before the card expires and below which the transaction will be refused.

The configuration is done in the same way for many rules:

List rules require no specific configuration.

However, activating a list rule in a profile is not sufficient; you must also manage the list itself. To do so, three options exist:

• adding elements in the list using Sherlock’s Office Batch  or
• adding elements in the list using Sherlock’s Office SOAP or JSON  or
• using the Lists feeding tab.

Follow the procedure below to populate lists using the Portail Sherlock's:

Click on the Lists feeding tab.

By accessing this section you gain access to the lists at your disposal: they vary according to the offer you have subscribed to. Please consult the list of rules for a complete list of existing list rules.

When editing a list, you can:

• add a value to the list and specify a reason for the addition
• delete an entry from the list
• or move an entry from a greylist to a blacklist

When you arrive on the modifications page, the table is not filtered and contains all the changes related to the webshop, from the most recent to the oldest.

On the top of the page, different criteria are displayed to filter the modification logs: a minimum date, a maximum date, a user name or a log type (merchant profile, template profile or association).

After clicking on the  button, the application reloads the table with the filtered data.

Each line in the table shows the date on which the action was performed, the user who performed the action, the modified entity and a brief description of the action.

Click on the  icon to compare the object state before and after the modification.