SADAD Payment Gateway

Key Features

SADAD bill-payment method registered via payment.xml/config.xml and rendered in both Luma and Hyvä/PWA-ready checkout

Card acceptance through your acquiring gateway, sharing the same di.xml command pool (authorize, capture, refund)

Full 3D Secure / ACS redirect-and-return flow with secure order-state transitions

Online capture and partial/full refund directly from admin Invoice and Credit Memo screens

SAR currency support with server-side amount and currency validation before gateway calls

Asynchronous webhook controller for SADAD status callbacks with HMAC/signature verification and idempotency keys

Encrypted sandbox and production credentials stored via Magento config-backend encryption model

Admin ACL resource so only authorized roles can view or edit gateway configuration

Cron-based reconciliation job that polls and settles pending/timed-out transactions

Structured payment logging (masked PAN, no raw card data persisted) for audit and dispute support

Service-contract and gateway-command architecture so card/SADAD logic is unit-testable and upgrade-safe

REST and GraphQL compatibility so the method appears for headless/PWA Studio storefronts

Built to order, done for you

No DIY setup — a working app, built, installed and supported by ECOSIRE.

You order

Start with a one-time build price. We scope it with you at kickoff.

We build & install

ECOSIRE builds, configures and installs it on your Magento 2.

Go live + support

You go live in about 2–4 weeks, with a post-launch support window.

About this Product

This is a build-to-order Magento 2 / Adobe Commerce payment extension that brings the Saudi SADAD rail and card acceptance natively into your storefront checkout. It is not an instant Adobe Commerce Marketplace download — ECOSIRE engineers the module to your acquirer/gateway, installs it on your environment, and supports it after go-live.

Technically, the module ships as a standard composer package under app/code/Ecosire/Sadad, implementing Magento's Payment Method facade and service contracts. The SADAD and card methods are registered in payment.xml and config.xml, wired through di.xml with a dedicated gateway command pool (AuthorizeCommand, CaptureCommand, RefundCommand) built on Magento\Payment\Gateway. A ClientInterface implementation talks to the gateway over HTTPS, request/response builders map order data to the SADAD/card API, and a controller endpoint plus a webhook controller handle the redirect return and asynchronous status callbacks. The 3D Secure flow is handled via a redirect/return action with order-state transitions driven by an OrderPaymentRepository update and an observer on sales_order_payment_* events.

You get full SAR currency support, server-side amount validation, online capture and refund from the admin Credit Memo and Invoice screens, configurable sandbox/production credentials in Stores > Configuration > Payment Methods (encrypted via Magento's config-backend model), and admin ACL for who can edit gateway settings. Idempotency keys protect against duplicate callbacks; cron reconciles any pending transactions. ECOSIRE delivers it tested on your Magento version (Open Source or Adobe Commerce), then maintains it as Magento and the gateway evolve.

What you get

Composer-installable Magento 2 module (Ecosire/Sadad) under app/code, version-pinned to your Magento release

Installation and configuration on your staging environment, including setup:upgrade, di:compile and static-content deploy

Sandbox-to-production credential wiring with your SADAD acquirer/gateway, validated with a live test transaction

3D Secure, refund and capture verified end-to-end against your gateway's test suite

Admin configuration guide plus a short merchant runbook (refunds, reconciliation, troubleshooting)

30 days of post-launch support and a maintenance option covering Magento and gateway API updates

Who this is for

Saudi e-commerce merchant

A KSA-based store on Magento 2 that needs SADAD as a familiar local checkout option alongside cards, billed and settled in SAR.

Magento agency serving Gulf clients

An implementation partner that needs a reliable, supported SADAD integration to drop into a client build without spending sprints reverse-engineering the gateway API.

Finance / operations lead

The person who reconciles payments and processes refunds, who needs capture, partial refund and a cron reconciliation job working cleanly inside Magento admin.

How SADAD Payment Gateway Compares

Criterion	ECOSIRE	Custom Build	Competitor
SADAD method natively in Magento checkout	Included	Partial support	Partial support
Built and tested against your specific acquirer/gateway	Included	Included	Not included
3D Secure redirect-and-return flow	Included	Partial support	Partial support
Online capture and partial/full refunds from admin	Included	Partial support	Partial support
Installed and configured on your environment by the vendor	Included	Partial support	Not included
Ongoing support for Magento + gateway API updates	Included	Partial support	Partial support
Instant self-serve download	Not included	Not included	Included

Frequently Asked Questions about SADAD Payment Gateway

How long until the SADAD gateway is live on my store?

Because this is built-to-order, typical delivery is about 5 to 10 business days from when you provide your SADAD acquirer/gateway credentials and sandbox access. We confirm an exact lead time after a short scoping call. The window covers building to your specific acquirer, installing on your staging environment, and verifying a live test transaction before go-live.

Do I get ongoing support and updates after launch?

Yes. Every build includes 30 days of post-launch support for any defects in the delivered integration. After that, an optional maintenance plan keeps the module compatible as Magento (Open Source or Adobe Commerce) releases security patches and as your gateway changes its API, 3D Secure rules or callback format. ECOSIRE owns the code and ships you the updated package.

Does this work on Adobe Commerce as well as Magento Open Source?

Yes. The module uses standard Magento payment service contracts and the gateway command framework, so it installs on both editions. We build and test against your exact version (2.4.x line) and note any B2B, multi-website or Hyvä/PWA Studio specifics during scoping.

Is cardholder data stored on my server?

No raw PAN or CVV is persisted. The integration uses the gateway's hosted/redirect 3D Secure flow so card data is handled by the acquirer. We log only masked, non-sensitive transaction references for reconciliation and dispute support, which keeps your PCI scope minimal.

Can I run it in sandbox first and accept partial refunds?

Yes. The module ships with separate sandbox and production credential fields, so you validate the full flow against the gateway's test environment before switching to live. Online capture and both partial and full refunds are issued directly from the Magento admin Invoice and Credit Memo screens, with a cron job reconciling any pending transactions.