← All 3DS flows

Hotel / Resort Website (top level)

3DS flow: Navigate top window. This whole page is redirected to the ACS; the booking context is lost. The OPI return page then loads this page again, which passes the transaction through OPERA to OPI. Browsers may block the navigation from a cross-origin iframe without a recent click.
Embedding attributes (applied to hotel → OPERA and OPERA → OPI iframes)
Apple Pay / Google Pay in cross-origin iframes need allow="payment" on every ancestor iframe. The sandbox attribute blocks this flow.