You have to make sure you Authorize.net return receipt is pointing to the correct path. If you are using a secure server, it should read something like this:
https://domain.xxx.com/catalog/checkout_success.php
This is the path that OS needs Authorize.net to bounce back to. From there, the customer will be able to see what they've just ordered.
Hope this helps.