Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Page Properties


n/a
Org NameNationwide
Org TypeASPSP
Brand(s)Nationwide
Profile Versionv1.1.2
Conformance Tool Versionv2.0.6
Client Authentication Typeclient secret post
Response Typecode id_token
Submitted By
Victoria Lashmar
Date Submitted
 
Attestation
Test Results
Status
Status
colourYellowGreen
titlePartialCertified
No. of Failures21
Mitigation(s)

Nationwide is required to continue with TLS1.0/1.1 in order to maintain parity with our other digital channels.


Planned Fix Date
Date Passed 
Notes

Advisory ACR value is not returned in id_token when TPP requests it as an essential claim.

Authorization endpoint is accepting Updated from "Partial" to "Certified" on the 06/02/20. Evidence provided on authorization endpoint now using TLS 1.0/1.12.