Sage 100

Have a client who is on 4.5 using Sage Payment Solutions. They want to be able to pre-authorize a credit card on a sales order for an amount less than the actual sales order. If you try to change the authorization amount in the sales order entry screen it always changes back to the total sales order amount and pre-authorizes that amount. SPS support tells me that you can pre-authorize a certain amount in the terminal and then adjust it later, so I'd like to know if that can be done for a sales order?

Cannot change the amount pre-authorized.

Any thoughts on a workaround? They tend to do large orders that tend to include stock that they might not have on hand. The client's customers are frustrated when their cards are pre-authorized for the full amounts. We've discussed doing a deposit instead of a pre-auth, or doing a completely separate order for the items not on hand. I wish there was a way to not pre-authorize for amounts related to back ordered items...

One way would be to create an order - send it out to see what's available - bring that back and modify the order for the qty available. Or authorize closer to shipping time?

Here is what I've recommended: 1. Enter the sales order with terms of Credit Card (use some code with the description Credit Card) 2. Enter the credit card in Sage 100 using Customer Maintenance - don't put the credit card on the sales order. 3. Payment typ e on the sales order is none. 4. Print the sales order or pick sheet. Have space for two inconspicuous numbers - Last four digits of CC and CVV code. Do not identify them as such, just put them in a box call Office Use Only. 5. When the order has been shipped (partial or full) and freight costs added to the invoice, go into Invoice Date Entry and change the payment type to credit card indicated on the pick sheet, enter CVV and do a pre-authorization. This takes some effort and discipline, but then that's what customer service is.

@MyronStevenson - I rather suspect that would not pass PCI compliance muster. Will these capabilities change in 2013 with the vault?

I don't believe CVV numbers are ever allowed to be stored? Pretty sure this was a quote from Erika at this past Summit.

Use Virtual Terminal for the Auth. Then process invoice for the Sale. Auth can be voided or let to expire.

I should be clearer. The CVV is written on the paper copy, not entered into MAS. This violates PCI?

I am not even close to having expertise in this but I suspect you are operating in the gray area. Not sure if this is a hard limit or not.

There are questions on the PCI compliance questionnaire about what you write down.

RE the PCI compliance questionaire, if you are a small business, THIS is another tax on your business. Just sat through another session with client trying to help them complete the list of questions. I told them to just pay the $25 non compliance fee. Way too much technical details for the small business owner..............

@JeffSchwenk With paying that non compliant fee will that open up the option for the cc companies to raise their rate to the small business owner or loose the option to take cc????

You are not allowed to store the CVV number in any form whatsoever under PCI.

@DianeRuth - Your guess is as good as mine. It seems as if you use your computer system to transmit the data, the questionaire length grows exponentially. I undestand the concerns but to be truly compliant is extremely onerous for the little person.

Thanks @JeffSchwenk just wondering how that fine line of software compliant and end user non compliant works and if there is any ramifications that come with it. Guess one of us will eventually find out !

Has anyone filled out a vendor's credit card authorization form lately? Were you asked to write down the CVV of your card? Is that be a violation of PCI?

@RobertWood thanks for clarifying on the CVV number, that's what I was afraid of. I'm thinking my customer is just going to have to use the virtual terminal for pre-auths. I am wondering what is coming in 2013 with the vault....

@MyronStevenson I believe it is.

Pre-auths on SPS Virtual Terminal cannot be voided. This is controlled by the bank that issues the card.

If you are concerned with PCI compliance, don't store CVV numbers anywhere.

It's now snowing in the Minneapolis metro area. The cooler weather and early snow is welcomed by all Minnesota deer hunters. Deer season opens next weeked.

Thanks for pointing that out @MyronStevenson - it was only raining when I came in. Geez....

You would have to confirm with SPS, but most processors do not charge more when the CVV number is not present. The CVV number is really to protect the company accepting the card.

I don't believe any charge higher fees for not having the CVV. The CVV is just added insurance and some processors require some merchants to get them.