Magento payments plugin
Cardflo provides a dedicated Magento payments plugin, streamlining transaction processing for enterprise merchants. This plugin integrates Cardflo's payment orchestration capabilities directly into the Magento platform, offering advanced routing, decline recovery, and comprehensive payment method support.
Merchants can optimise their payment operations within their Magento environment.
- Category
- Plugins
- Capabilities
- 10
- Available on
- All plans
The overview
A Magento payments plugin serves as the critical interface between an e-commerce storefront and the underlying financial infrastructure, including gateways, acquirers, and processors.
By integrating directly with the Magento 2 framework, these modules facilitate the transmission of payment data from the checkout environment to the relevant authorisation endpoints.
Beyond simple transaction processing, enterprise level extensions manage the complex logic associated with payment orchestration, such as multi-acquirer routing and automated decline recovery. This layer of the stack handles sensitive data via tokenisation, ensuring that primary account numbers do not reside on the merchant server.
The plugin also synchronises transaction statuses, such as authorisation, capture, and settlement, with Magento's internal order management system.
This ensures that treasury and accounting teams have a singular view of financial data, reducing the need for manual reconciliation across disparate merchant IDs or payment service provider dashboards.
How it works
Initialisation and Secure Capture
When a customer initiates a transaction, the plugin invokes a secure field or hosted component to collect card details. This process keeps the merchant environment out of PCI scope by ensuring sensitive data is transmitted directly to a secure vault.
The system generates a temporary token representing the cardholder information for subsequent processing steps.
Dynamic Routing Logic
The plugin evaluates the transaction parameters, such as currency, country, and Merchant Category Code, against predefined business rules. It identifies the most appropriate acquirer to receive the authorisation request.
This stage aims to minimise interchange costs and maximise the probability of successful authorisation through specialised routing across different BIN ranges.
SCA and 3DS Execution
If the transaction falls under PSD2 requirements, the plugin triggers Strong Customer Authentication. It communicates with the issuer to facilitate 3DS challenges where necessary.
By managing these protocols natively within the Magento checkout flow, the plugin helps satisfy regulatory compliance whilst attempting to maintain a friction-free experience for the end user.
Authorisation and Order Management
The plugin receives the response from the acquirer, detailing whether the transaction is approved or declined with a specific reason code. If approved, the plugin updates the Magento order status and triggers the capture process.
In the event of a soft decline, it may initiate a retry via a secondary acquirer.
Why it matters
Operational Resilience Through Redundancy
Relying on a single payment service provider introduces a central point of failure. A robust Magento plugin allows for multi-acquirer connectivity, ensuring that if one gateway experiences downtime or high decline rates, traffic can be diverted immediately to an alternative route.
This redundancy is essential for high-volume enterprise merchants who prioritise uptime and consistent settlement cycles, protecting the business from technical disruptions in the payment chain.
Technical Debt Reduction
Maintaining custom API integrations for multiple payment methods and acquirers is resource intensive. An integrated plugin centralises these connections within the Magento admin panel.
This standardisation facilitates easier updates for compliance mandates like PCI-DSS and PSD3. By utilising a modular plugin, businesses can reduce the engineering hours spent on payments maintenance, allowing technical teams to focus on core e-commerce functionalities and front-end development.
Use cases
Cross-Border Enterprise Merchants
Large-scale retailers selling in multiple jurisdictions use the plugin to route transactions to local acquirers. This helps in reducing cross-border fees and improving authorisation rates by treating payments as domestic transactions rather than international ones.
Subscription and Recurring Billing
Merchants utilising Magento for subscription models use the plugin to handle Merchant Initiated Transactions. It manages stored tokens and account updater services to ensure that renewals continue uninterrupted even when physical cards are replaced by issuers.
B2B Wholesale Platforms
B2B entities often require specific workflow support, such as delayed capture or partial shipments. The plugin allows for authorisation at the point of order, with the final capture triggered only when the goods are dispatched from the warehouse.
By the numbers
Typical uplift observed by merchants moving from a single acquirer setup to an orchestrated plugin with smart routing, though results vary by sector.
Estimated reduction in administrative and technical hours when moving from direct API handling to a tokenised plugin environment using hosted components.
Industry standard for plugin-side processing time, ensuring that the additional orchestration logic does not negatively impact the consumer's time-to-payment.
Related terms
Talk to our team about a live rollout on your acquiring stack.
What you get with Magento payments plugin
- Native Magento 2 integration facilitates rapid deployment of payment orchestration capabilities without significant manual coding.
- Smart routing logic assigns transactions to specific acquirers based on currency and card type.
- Support for 3-D Secure 2 protocols ensures compliance with Strong Customer Authentication mandates across Europe.
- Network tokenisation replaces sensitive card data with non-sensitive identifiers to enhance security and reduce risk.
- Automated dunning and retry logic for failed recurring payments improves revenue retention for subscription services.
- Comprehensive support for Alternative Payment Methods allows merchants to localise the checkout experience for global customers.
- Real-time synchronisation of transaction data and refund statuses directly into the Magento order management panel.
- Built-in fraud screening integration allows for the analysis of risk signals before the authorisation request.
- Multi-currency settlement support enables merchants to manage different regional accounts through a single plugin interface.
- Advanced reporting tools provide granular visibility into interchange fees and scheme fees for better margin analysis.
A short scoping call, then a written plan for your MIDs.
Questions about Magento payments plugin
How does a Magento payments plugin impact PCI-DSS compliance requirements?
The plugin typically utilises methods such as iFrames, hosted payment pages, or secure fields to capture payment data.
By ensuring that the actual Primary Account Number never touches the merchant's server, the business can often qualify for a simplified Self-Assessment Questionnaire, such as SAQ A or SAQ A-EP.
This significantly reduces the technical and administrative burden of maintaining compliance, as the payment service provider or orchestrator handles the sensitive data storage and transmission within their secure environment.
Can the plugin handle different Merchant Identification Numbers for different store views?
Yes, enterprise-grade Magento plugins are designed to support multi-site and multi-store configurations. This allows a merchant to assign different Merchant Identification Numbers (MIDs) to specific store views or locales.
This is particularly useful for businesses operating as separate legal entities in different countries or for those wanting to segregate transaction volume between different brands within a single Magento instance for clearer reporting and settlement.
What is the difference between a direct API integration and a Magento plugin?
A direct API integration requires the merchant's development team to build and maintain the connection between Magento and the payment gateway from scratch. A plugin, however, provides a pre-built wrapper that follows Magento's core architectural standards.
This includes hooks for the checkout UI, order status updates, and administrative functions. Using a plugin generally results in faster time-to-market and lower maintenance costs, as the plugin provider handles updates for new features or regulatory changes.
How does the plugin manage soft declines during the checkout process?
When an issuer returns a soft decline, often due to temporary technical issues or specific risk triggers, a sophisticated plugin can initiate an immediate retry. This may involve re-routing the transaction through a different acquirer or prompting the user for additional authentication via 3DS.
By managing these retries programmatically, the plugin helps recover sales that would otherwise be lost to checkout abandonment, thereby improving the overall authorisation rate.
Does the plugin support recurring payments and stored credentials?
Yes, many plugins support the storage of payment tokens for future transactions, known as Merchant Initiated Transactions (MIT). These tokens are stored securely in a vault.
The plugin manages the specific flags required by card schemes to indicate that a transaction is a subsequent payment in a sequence. This is essential for subscription models, allowing the merchant to bill the customer automatically without requiring them to re-enter their card details.
Can I use the plugin to offer Alternative Payment Methods like digital wallets?
Magento plugins for orchestration platforms are typically designed to support a wide range of Alternative Payment Methods (APMs). This includes digital wallets such as Apple Pay and Google Pay, as well as local bank transfer schemes and Buy Now Pay Later options.
The plugin manages the specific redirection and callback logic required for these different methods, presenting them as unified options within the Magento checkout interface.
Ready for velocity?
Tell us about your business. We'll match you with the right acquiring partners and the right route, typically inside a week.