Skip to main content
CyberSource Enterprise Gateway for Odoo — A build-to-order Odoo payment provider that connects checkout to Visa CyberSource S — 1/1Illustrative preview

A build-to-order Odoo payment provider that connects checkout to Visa CyberSource Secure Acceptance with

Decision Manager fraud screening, 3DS2/SCA, and TMS tokenization. ECOSIRE scopes, builds, installs, and supports it — it is not an instant apps.odoo.com download.

What is CyberSource Enterprise Gateway for Odoo?

A build-to-order Odoo payment provider that connects checkout to Visa CyberSource Secure Acceptance with Decision Manager fraud screening, 3DS2/SCA, and TMS tokenization. ECOSIRE scopes, builds, installs, and supports it — it is not an instant apps.odoo.com download. Built to order by ECOSIRE for Odoo 17, 18, 19 — indicative price from $999.00 USD; request a quote for a scoped proposal.

Key Features

Extends `payment.provider` with CyberSource merchant ID, transaction key, and Secure Acceptance profile ID stored as write-only secured fields
Secure Acceptance in hosted checkout or flexible Flex Microform mode, selectable per provider record
HMAC-SHA256 `signed_field_names` signing on outbound requests and full signature verification on the returned response before any state change
Decision Manager fraud screening mapped to Odoo states — `ACCEPT`/`REJECT`/`REVIEW` drive `done`/`error`/`pending` plus a review activity for finance
3DS2 / SCA via CyberSource Payer Authentication to satisfy PSD2 and card-scheme mandates
Token Management Service (TMS) tokenization — vaulted token saved on `payment.token` for one-click reorders and subscription renewals, never the raw PAN
Full `payment.transaction` state machine: `draft`, `pending`, `authorized`, `done`, `cancel`, `error` with reason-code logging on the chatter
Separate authorize-then-capture support with a back-office capture/void action for manual-review workflows
Refund support that posts back to CyberSource and reconciles the `account.payment` in Odoo
Multi-currency handling reconciled against `res.currency` — presentment vs processing currency handled explicitly
Redirect and webhook controllers with idempotent handling and per-request signature validation
`ir.model.access.csv` plus record rules restricting credential visibility to the Payment Administrator group
Works in `website_sale` checkout and `account_payment` invoice-payment flows; transaction status readable over XML-RPC / JSON-RPC
Configurable test/sandbox vs production endpoints with a boot-time guard preventing test keys in a production database
Built and tested against your target Odoo 17.0, 18.0, or 19.0, Community or Enterprise

Built to order, done for you

No DIY setup — a working app, built, installed and supported by ECOSIRE.

  1. 1

    You order

    Start with a one-time build price. We scope it with you at kickoff.

  2. 2

    We build & install

    ECOSIRE builds, configures and installs it on your Odoo.

  3. 3

    Go live + support

    You go live in about one working week, with two weeks of go-live support. Defects in the code we deliver are fixed free of charge.

Technical Specifications

Odoo Compatibility
Odoo 17, Odoo 18, Odoo 19
Editions
Enterprise & Community
License
Licence confirmation required
Python Requirement
Python 3.10+
Database
PostgreSQL 12+

About this Product

Enterprise merchants already running Visa CyberSource for its Decision Manager fraud rules, tokenization vault, and acquirer relationships hit a wall in Odoo: the core payment framework ships Stripe, Adyen, PayPal, and a handful of others, but there is no first-party CyberSource provider. Teams end up bouncing customers to a hosted page outside Odoo, reconciling settlements by hand, and losing the fraud signals and stored credentials they already pay for. The native payment.provider model has no place to store a CyberSource merchant ID, transaction key, or profile, and no code path to sign a Secure Acceptance request or verify its signed response.

ECOSIRE builds a proper Odoo payment provider that extends payment.provider and payment.transaction so CyberSource behaves like any other acquirer in the checkout, Invoicing, and Sales flows. We implement Secure Acceptance in either hosted or flexible (Flex Microform) mode, compute and verify the HMAC-SHA256 signature on both the outbound request and the returned response, and map CyberSource decision/reason_code values onto Odoo transaction states (draft, pending, authorized, done, cancel, error). Decision Manager screening is wired in so a REVIEW outcome parks the transaction in a pending state with an activity for your finance team rather than silently failing. 3DS2 / SCA is handled through the Payer Authentication step so European and card-scheme mandates are met, and stored credentials use the Token Management Service (TMS) — the vaulted token lives on payment.token for one-click repeat orders and subscriptions, never the raw PAN.

Technically, the module is a clean Odoo addon: a __manifest__.py declaring dependencies on payment (and website_sale/account_payment where you need eCommerce or invoice payment), models in models/ using models.Model with @api.depends computes for signed-field assembly, access rules in ir.model.access.csv plus record rules so only Payment Administrators see credentials and secret keys are stored write-only. The provider form, transaction views, and any OWL/QWeb checkout snippets ship as XML; webhook and redirect handling live in controllers that validate every inbound signature before touching a transaction. Multi-currency is supported end to end — the transaction currency, presentment currency, and CyberSource processing currency are reconciled against Odoo's res.currency. Everything is exposed over Odoo's XML-RPC / JSON-RPC API so your other systems can read transaction status. We build for your exact target: Odoo 17.0, 18.0, or 19.0, Community or Enterprise, and account for the differences (for example Enterprise's accounting reconciliation and follow-up hooks).

Because this is build-to-order, nothing is pre-listed for instant download. We start with a scoping call to confirm your CyberSource account type (Secure Acceptance vs REST/Flex), which flows you need (website checkout, back-office invoice payment, subscriptions), your Odoo version and edition, and your fraud and SCA requirements. Typical delivery is one working week from confirmed scope. You receive the installable source for your version, install and configuration on your environment, UAT on a staging database with a rollback plan, documentation, a training session, and a post-go-live support window. ECOSIRE builds it, installs it, and supports it.

What you get

  • Installable, version-matched Odoo addon source code for your Odoo 17.0/18.0/19.0 and edition
  • Installation and configuration on your staging and production environments, including CyberSource credential wiring
  • UAT on a staging database with sandbox transactions and a documented rollback plan
  • Technical documentation — architecture, model/field reference, signature logic, and endpoint configuration
  • End-user and administrator guide plus a live training session for your finance and web teams
  • Post-go-live support window for defect fixes and configuration questions
  • Private git repository handover with full commit history
  • Configuration checklist for CyberSource Secure Acceptance profile, Decision Manager rules, and TMS setup

Who this is for

Enterprise merchant already on CyberSource

Runs Visa CyberSource for Decision Manager fraud rules, TMS tokens, and acquirer pricing, and wants that same stack driving Odoo checkout instead of an external hosted page and manual reconciliation.

Head of Payments / Finance Systems

Owns settlement accuracy and PCI scope. Needs signed, verifiable transactions, authorize-then-capture control, refunds that reconcile to `account.payment`, and credentials locked to the Payment Administrator role.

Odoo technical lead or integrator

Wants a clean addon that extends `payment.provider`/`payment.transaction` the Odoo way — proper `ir.model.access.csv`, record rules, XML/OWL views, and XML-RPC access — not a bolt-on that breaks on upgrade.

Compliance / risk manager

Must meet PSD2 SCA and card-scheme mandates. Needs enforced 3DS2 Payer Authentication and a documented `REVIEW` path so flagged orders are held for manual decision rather than auto-approved.

How CyberSource Enterprise Gateway for Odoo Compares

CriterionECOSIRECustom BuildCompetitorOdoo Native
CyberSource support in OdooPurpose-built provider extending `payment.provider`/`payment.transaction`Possible but you design the integration from scratchRare; most listings cover Stripe/Adyen/PayPal, not CyberSourceNo CyberSource provider ships in core
Decision Manager fraudMapped to Odoo states with a held `REVIEW` pathOnly if your team builds the mappingUsually absent or approve/decline onlyNot available
3DS2 / SCAPayer Authentication enforced for PSD2 complianceMust be implemented and tested by youVaries; often partial or unmaintainedOnly for providers Odoo ships
Tokenization (TMS)Vaulted token on `payment.token`, no raw PAN storedYou handle vault and PCI scope decisionsInconsistent; may store more than neededN/A for CyberSource
Signature verificationHMAC-SHA256 verified on every inbound responseCorrectness depends on your implementationQuality varies by vendorN/A
Odoo version/edition fitBuilt and tested for your 17.0/18.0/19.0, Community or EnterpriseWhatever you scope and maintainOften lags new Odoo releasesShips with your Odoo but no CyberSource
Support & handoverPost-go-live window plus git repo handoverSelf-supported by your teamGeneric ticket queue, no source ownershipCommunity forums only
Delivery modelBuild-to-order, one working week from confirmed scopeYour internal backlog and timelineInstant download but generic and often unmaintainedImmediate but no CyberSource capability

Frequently Asked Questions about CyberSource Enterprise Gateway

How long does delivery take?

This is build-to-order, so there is no instant download. After a scoping call to confirm your CyberSource account type, Odoo version/edition, and required flows, typical delivery is one working week from confirmed scope. Complex fraud-rule or multi-entity setups can extend that, and we tell you before you commit.

Do you support Secure Acceptance and REST/Flex?

Yes. We implement Secure Acceptance in hosted or flexible (Flex Microform) mode. Which one we build depends on your CyberSource account configuration and how much of the card capture you want to keep inside your Odoo checkout — we confirm this during scoping.

How are updates and support handled after go-live?

Every build includes a post-go-live support window for defect fixes and configuration help. Because the module is version-matched to your Odoo (17.0/18.0/19.0), an Odoo minor/major upgrade or a CyberSource API change may require a paid update; we hand over the git repo so any capable team can maintain it, and we offer ongoing support plans.

Is card data ever stored in Odoo?

No raw PAN is stored. Card capture happens through Secure Acceptance or Flex Microform, and stored credentials use CyberSource TMS — only the vaulted token is saved on Odoo's `payment.token` for reorders and subscriptions. This keeps your Odoo database out of PCI cardholder-data scope for stored credentials.

Does it handle 3DS2 / SCA and fraud screening?

Yes. 3DS2 Payer Authentication is wired into the flow for PSD2/SCA compliance, and Decision Manager screening maps `ACCEPT`/`REJECT`/`REVIEW` onto Odoo transaction states. A `REVIEW` result parks the transaction in `pending` with an activity so your team decides, rather than auto-approving a flagged order.

Will it work with my Odoo version and edition?

We build and test against your exact target — Odoo 17.0, 18.0, or 19.0, Community or Enterprise — and account for edition differences such as Enterprise accounting reconciliation. Tell us your version at the scoping call and the deliverable is matched to it.

Can other systems read transaction status?

Yes. The provider and transactions live in standard Odoo models, so status, tokens, and reason codes are readable and actionable over Odoo's XML-RPC and JSON-RPC API for your ERP, data warehouse, or reconciliation tooling.

Request a quote

CyberSource Enterprise Gateway

A build-to-order Odoo payment provider that connects checkout to Visa CyberSource Secure Acceptance with Decision Manager fraud screening, 3DS2/SCA, and TMS tokenization. ECOSIRE scopes, builds, installs, and supports it — it is not an instant apps.odoo.com download.

  • Extends `payment.provider` with CyberSource merchant ID, transaction key, and Secure Acceptance profile ID stored as write-only secured fields
  • Secure Acceptance in hosted checkout or flexible Flex Microform mode, selectable per provider record
  • HMAC-SHA256 `signed_field_names` signing on outbound requests and full signature verification on the returned response before any state change
  • Decision Manager fraud screening mapped to Odoo states — `ACCEPT`/`REJECT`/`REVIEW` drive `done`/`error`/`pending` plus a review activity for finance

Request a Quotation

Tell us about your CyberSource Enterprise Gateway requirements and we'll send pricing, licensing options and a tailored proposal — usually within one business day.

No payment now. This sends a quote request to our team — we'll follow up by email with pricing and next steps.