PayPal Dispute Webhook

How to provide Forter access to your PayPal Dispute Webhooks. To enable Forter to process your chargebacks, please integrate your PSP with Forter by following these steps.

Required Keys Required Keys

1. API Key - Client ID and Secret
2. Webhook

1

Log into the Paypal Developer
Log in to https://developer.paypal.com and navigate to Apps & Credentials, selecting either Live for the production environment or Sandbox for the test environment.

2

Select app
Look in the REST API apps selection and select an existing app (if available), then continue to Step 3. If you do NOT see any apps in the REST API apps section, please check whether your PayPal app is configured as an NVP/SOAP API app, and once confirmed, continue to Step 4.
A PayPal app should have been created when you configured PayPal as a payment method on your checkout page, and you should NOT create a dedicated app specifically for Forter.

3

REST API Apps Webhook Configuration
Click the configured REST API app, and you should see a screen similar to the one below, showing the title of your REST API app (in this example, the app is called Merchant_App). Copy the Client ID and Secret Key values to send to Forter POC
Ensure the user has the required API access permissions enabled.

• Transaction Search
• Disputes (read + write)

Scroll to the bottom of this page to see the Live Webhooks section. Click the “Add Webhook” button to set up the Forter dispute webhook.

Continue to Step 5 to configure the PayPal webhook.

4

NVP/SOAP API Apps Webhook Configuration
Click on Manage Webhooks and you should see a screen similar to below with the title NVP SOAP Webhooks. Copy the Client ID value and the Secret Key values to send to Forter.

Scroll to the bottom of this page and you will see the Live Webhooks section. Click the “Add Webhook” button to setup the Forter dispute webhook.

5

Configure the Paypal Webhook
Clicking the Add Webhook Button will generate a popup that looks like the below image

In the Webhook URL input, enter the following URL: https://api.forter-secure.com/webhooks/paypal/ using the site ID from the Credentials section of Forter Portal. Make sure to add the Forter siteId that corresponds to the PayPal environment (e.g. production to production, sandbox to sandbox)

Then from the list of events select: Customer Dispute which will add the below 3 fields. The webhook will fire and notify when any of these 3 events are triggered.

• Customer dispute created
• Customer dispute resolved
• Customer dispute updated

At the bottom of the section, click Save.

6

Copy Webhook ID
You should now see a new webhook configuration. Please copy the Webhook ID. Forter will also use this value to authenticate the Paypal webhooks.

7

Send Credentials to Forter
Save your Client ID, Secret, and Webhook ID to a .txt file with the file naming convention "JCBR-yourSiteName-processorName" (e.g. "JCBR-TShirtsExpress-PayPal") and upload it securely to your S3 folder. Please notify your Forter Implementation Engineer once you have uploaded these files. Your Forter Implementation Engineer will securely add your secret key to the Forter database and let you know when this step is complete.

8

Use the Paypal Webhook Tester
Once the webhook is configured, use the Paypal Webhook simulator in the Developer Dashboard to confirm connectivity to Forter by entering the Webhook URL configured in step 3 and select “Dispute created” for the Event Type. Your Forter Implementation Engineer can confirm connectivity to Forter to ensure that the webhook was configured with the correct Webhook URL.