Payment ServicesPostFinance


Sana Commerce 9.2
Your connector

Set up PostFinance Account


When the PostFinance payment provider is installed it should be configured in the PostFinance BackOffice and in Sana Admin. To configure the PostFinance payment provider and payment methods you should have the PostFinance test/ live account with all the necessary data.

Step 1: In the PostFinance BackOffice click: Configuration > Technical information > Global transaction parameters. Configure the Global transaction parameters.

The table below provides the description of the required settings.

Settings Value
Default operation code Select 'Sale'.
Processing for individual transactions Select 'Online but switch to offline when the online acquiring system is unavailable'.

Step 2: Click: Configuration > Technical information > Global security parameters. Configure the Global security parameters.

The table below provides the description of the required hashing method settings.

Settings Value
Compose the string to be hashed by concatenating the value of Select 'Each parameter followed by the passphrase. (Please refer to our integration guides for further details).'
Hash algorithm Select 'SHA-512' in order to comply with the highest data security standards.

  The same value should be set in Sana Admin (HashAlgorithm).

Character encoding Select 'UTF-8'.

Step 3: Click: Configuration > Technical information > Payment page.

Configure Back button redirection by specifying the URL of the webpage that should be shown to the customer when he clicks the "back" button on the PostFinance secure payment page.

Step 4: Click: Configuration > Technical information > Data and origin verification.

URL of the merchant page containing the payment form that will call the page: orderstandard.asp

PostFinance checks for origin of the request the order originates from. The URL should contain the protocol "http" or "https" at the beginning. If you have installed several languages for your web store or you have multiple web stores for your PostFinance account, make sure you have entered all URLs separated by a semicolon.



If you set up Sana to accept online payments on open invoices, but not while placing the order, enter your web store domain instead of the complete URL with the http or https protocol.

The value of the SHA-IN pass phrase parameter should match the value of the SHASIGNIN parameter in Sana Admin.

Step 5: Click: Configuration > Technical information > Transaction feedback.

The table below provides the description of the required Transaction feedback settings.

 HTTP redirection in the browser
Accepturl Enter the URL to be used when the payment has been authorised, stored, accepted or is waiting to be accepted.
Declineurl Enter the URL to be used when the acquirer declines the authorization more than the maximum permissible number of times (as defined in the payment retry section of the Transaction tab).
Exceptionurl Enter the URL to be used when the payment result is uncertain.
Cancelurl Enter the URL to be used when the customer cancels the payment.

Select the checkboxes:

  • I would like to receive transaction feedback parameters on the redirection URLs.
  • I would like PostFinance to display a short text to the customer on the secure payment page if a redirection to my website is detected immediately after the payment process.
Direct HTTP server-to-server request
Timing of the request Select 'No request'.
Request method Select 'POST'.
Dynamic e-Commerce parameters
'NCERROR', 'PAYID', 'ORDERID' and 'STATUS' are default parameters. Select or deselect other parameters which you wish to receive as feedback for a transaction and move them from one box to another.
Security for request parameters
The value of the SHA-OUT pass phrase parameter should match the value of the SHASIGNOUT parameter in Sana Admin.
HTTP request for status changes
Timing of the request Select 'No request'.

Step 6: Click: Configuration > Technical information > Transaction e-mails.

In the E-mails to the merchant parameters enter the e-mail address to which the information messages from PostFinance should be sent. Determine what type of messages you want to receive. 

Payment ServicesPostFinance