Guidelines to generate Authorization Code for Credit Card transactions

Question

I'm working on a module that will receive the messages in a custom format with all the information required to process the request (Purchase, Cash Disbursement, Balance Inquiry), so in order to compose the response, i have to generate the authorization code (Field 38 - ISO8583), only if the transaction was processed sucessfully.

As i know, it doesn't have to be unique, but i don't know if any other values from the transaction must be used to generate it.

Any advice will be appreciated.

Answer 1

I've only ever seen the provider generate the code, its then passed through the middleman (you in this case) and on to the consumer.

I don't think this would be bad practice. It would be one number that you could use to identify the whole series of transactions.