Embedded session

You can display PAR inside an iframe on your site, so the cardholder enrolls their autopays without leaving your page. The integration is the same as in a full window: only where the login form opens changes.

Embed PAR

To display PAR in an iframe, submit your channel's login form —the one for merchants or for issuers— with its target attribute pointing to the iframe.

Authorized origins

PAR can only be embedded from the origins authorized for your partner. An origin is the scheme, the domain and, if any, the port of your site, for example https://www.example.com.

Ask your Placetopay contact to register every origin you will embed PAR from, in each environment. PAR also uses them to validate the issuers' return and error URLs.

Session lifecycle

The cardholder's session does not depend on cookies, so it works inside an iframe from another domain even if the browser blocks third-party cookies. In exchange, it lives only in the PAR page that is open, and that has two consequences for your integration:

• If the iframe is reloaded or its URL is loaded again, the session ends. To start over, request a new token and submit the form again.
• When the session ends, because of its maximum duration or because it was closed, PAR shows the cardholder that the session ended, inside the same iframe.

When the enrollment finishes, PAR sends the cardholder back to your return URL in the main window, not inside the iframe, so your site takes back control of the full page.