PMS Tokenization in SiteMinder

Owned by Mayuri Bhakta
Last updated: 06, Aug 2024
2 min read

What is Tokenization?

Tokenization is where sensitive credit card data is replaced with a unique identifier (the token). Tokenization is done to ensure that guests payment information is safe. It also removes any payment data from being stored in the Property Management System (PMS).

PMSes can use a 3rd party proxy service provider to receive our tokenized reservations instead of receiving reservations directly from SiteMinder as per the traditional SiteMinder reservation delivery model.

How it Works?

Pull Method

For a Property Management System (PMS) that wishes to integrate with a reservation Pull model via a tokenization proxy, the PMS will send the OTA_ReadRQ to the proxy service provider, who in-turn will send the OTA_ReadRQ on the PMS behalf to SiteMinder. The proxy service provider will receive all the undelivered reservations, then tokenize the credit card details (if required) and the PMS will receive the reservations from them with tokenized card data.

For tokenization for selected properties, the PMS has to send @HotelCode in the OTA_ReadRQ.
For tokenization for all properties, the PMS is not required to use @HotelCode.

Prior to the Integration

  • The PMS must sign an agreement with the proxy service provider.

  • The Pilot hotel/hotel group must also sign an agreement with SiteMinder authorizing the use of a 3rd party proxy service provider to send reservations to the connected PMS.

Certification Process

  • We will provide the PMS Partner a The Channel Manager test account and a test Direct Booking booking engine URL to generate test reservations.

  • The PMS partner will do some reservations tests with and without credit card details to check if they are received in the system with the correct tokenization.

Adding more properties after Pilot

  • Each new hotel/hotel group must also sign an agreement with SiteMinder authorizing the use of a 3rd party proxy service provider to send reservations to the connected PMS.

Currently,  we will only provide support for the following certified proxy providers below:

  • PCI Proxy

  • Shift4 (4res)

  • FreedomPay (Push PMS only)

To get a new Tokenization provider certified, please contact our Ecosystem Team.