Implement OB Security Profile Implementer's Draft v1.1.2
Implement FAPI Profile Implementers Draft 2
Implement CIBA Profile Implementers Draft 1
N/A
Implement Dynamic Client Registration v1.1
Live
Implement Dynamic Client Registration v3.1
Decommission Read/Write API Specification v1.x/2.x
AIS v1.1 31st October 2019
Planning to decommission v1 APIs in end of October once TPPs have completed migrationContinue to work with TPPs to complete migration. Formal 2 weeks notice of decommissioning to be issued mid November.
Decommission OB Security Profile Implementer's Draft v1.x
Complete
...
Panel
borderStyle
dashed
title
Implementation
Page Properties
id
TC-IMP
Directory?
Open Banking
Location of Well Known Endpoints?
OB Technical Directory
API Standard Implemented?
Open Banking
Name of Account Holder Implementation Date?
14 June 2019 (single account holder)
November 2019 (multiples account holders)
Supported identification method?
Current view is OBWAC/OBSEAL via agency arrangement
Client Secret until Sep 2019, then MTLS as the token auth method
Major Milestones
V3.1 14 June 2019
Offers endpoint
target date
14 Sep 2019
Credit Card pending transactions planned for Jan 2020 post year end embargo
(Inc Other Products, API Updates, API Deprecations, etc)
Article 10 - Maximum time period after authentication?
When Strong Customer Authentication (SCA) is completed, you will be able to access all account information the customer has agreed they can access during the initial session (1 hour duration). For subsequent requests we will support requests for accounts, balances and for up to 90 days history of transactions data for 90 days following the authentication (provided the customer has allowed access for this period to the TPP)
Article 10 - Endpoints exempt of SCA
14th September 2019
Once initial SCA has been completed you will be able to access the following account information endpoints without SCA (provided the customer has allowed access on an enduring basis to the TPP)
GET /Accounts
GET /accounts/{AccountId}
GET /accounts/{AccountId}/balances
GET /accounts/{AccountId}/transactions
Access to accounts endpoints allows retrieval of the AccountId to call balance and transaction endpoints
Authentication Method - Open Banking Channel (Browser)?
Redirect auth using SCA method that aligns with digital channels.
Authentication Method - Open Banking Channel (APP)?
App to App auth using SCA method that aligns with digital channels.
As they stand today with further auth methods that may be delivered in the future
Authentication Method - Private Channel (APP)?
As they stand today with further auth methods that may be delivered in the future
Authentication Method Implementation Date (Open Banking Channel)?
Methods detailed are currently live in production
Authentication Method Implementation Date (Private Channel)?
Methods detailed are currently live in production
SCA Implementation Date?
TBC (See Notes)
We are planning to implement updated Updated IB authentication screens w/c 9were implemented on 10th September. These will provide This provides members the choice to authenticate using SCA access methods (Card Readeror IB Passnumber and OTP) or maintain access (including via screenscrapers) by continuing to use non-SCA methods of authentication (memorable data). The new log-in screens will also now require members to enter their date of birth. In line with the FCA’s six-month adjustment period we intend to gradually remove the ability of our members to utilise non-SCA methods over this time period as TPPs make the transition to open banking APIs. These changes will also be reflected in our OB browser authentication screens. The process of removing the ability to login using non-SCA access starts in November and is primarily focused on members who have been dormant or habitually use SCA methods to login. This activity will run until early December with the majority of active members who utilise non-SCA methods to login then scheduled to be switched to SCA-only login options throughout January to March 2020
SCA Scope? (will it inhibit non PSD2 accounts)
SCA will be delivered to cover the requirements of Reg 100 PSRs