Update list of available inline iframe options.

[rickmanelius]

There is significant progress in the issue queues to bring inline iframe options from Stripe and Braintree into Drupal Commerce and Ubercart.

• Ubercart Stripe
• Commerce Stripe
• Commerce Braintree

This will be a huge win for the community because they appear compatible with card on file while allowing cards to be accepted on site and be compatible with PCI-DSS v3.0 SAQ A.

[greggles]

I was going to suggest removing Balanced, but there's currently no mention of them.

What about adding in https://knoxpayments.com/ which is an iframe solution, but uses ACH which means no PCI is required? Probably deserves its own issue.

[robertmaynord]

I have bookmarked this page so I can easily keep track of all three iframe projects. It is very important for Drupal users to be able to quality for PCI-DSS v3.0 SAQ-A. Thanks for your diligence!

[rickmanelius]

@greggles PCI-DSS is specific to payment cards and not financial transactions in general. It's still important and has security requirements, but such a recommendation would probably be best in an article/resource specific to ACH.

[rickmanelius]

For anyone following this thread, there has been a lot of traction on commerce stripe and commerce braintree. I anticipate both of them getting to RBTC within a a few weeks to a month. I'm also seeing work moving along on ubercart stripe for D7, although that may take a little longer to get to completion.

In an ideal scenario, we'd get support for Authorize.net Hosted CIM for Ubercart and Drupal Commerce. However, having multiple viable iframe options on Drupal Commerce is already a huge win so I won't get too greedy/picky :)

[robertmaynord]

Great news!!

[rickmanelius]

Tagging @mglaman, who just published an article on another option to highlight. Article here https://commerceguys.com/blog/drupal-commerce-integration-square-payments-released

[mglaman]

Braintree and Square (and I think Stripe?) have all implemented SAQ A iframe solutions (each field is an iframe) like outlined in https://www.braintreepayments.com/blog/introducing-hosted-fields-a-pci-solution-that-doesnt-compromise-your-control/

[greggles]

It's been a while, so @robertmaynord or @mglaman or @rickmanelius anyone have a current list for 2022?

[greggles]

Trolling through a search of stack overflow payment gateways about iframe I found an option:

• Commerce Sagepay

In the drupal-commerce slack channel ericchew mentioned Auth.net Accept.js UI support has not yet landed, but would enabled a SAQ-A compliant solution.

[greggles]

mglaman on twitter suggested the big 3 which are at least partially there:

• Stripe
• Braintree
• Square

rszrama in slack suggested commerce_chase

Commerce Chase implements their hosted payment form, which I believe is total iframe based: