Versions Compared

Version Old Version 59 New Version 60
Changes made by

Matt Wilson

Callum Flaherty

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Panel
titleColorBlack
borderStyledashed
titleOB Standards


Page Properties
idStandards-Production


Implement Open Data v2.2COMPLETE
Implement Read/Write API Specification v3.1COMPLETECurrent implementation - R/W v3.1.5
Implement Customer Experience Guidelines v1.1COMPLETECurrent implementation - CEG v3.1.5
Implement App-to-App RedirectionCOMPLETE
Implement OB Security Profile Implementer's Draft v1.1.2COMPLETE
Implement FAPI Profile Implementers Draft 2

COMPLETE

TPPs must align their Open Banking implementations to the following security best practices recommended under FAPI 2

  • The request object must contain an exp claim

  • You must use PS256 algorithms to create the request Object signing

  • You must use https://oauth.tiaa.barclays.com as the aud claim in the request Object

  • You must use private_key_jwt instead of client secret authentication

  • You must receive ID tokens with PS256 signing algorithms

  • You must use “response type=code id_token

  • We’ll populate the acr claim in the ID token by default

Implement CIBA Profile Implementers Draft 1TBCPlans to be confirmed
Implement Dynamic Client Registration v1.1Not Delivered
Implement Dynamic Client Registration v3.1TBCPlans to be confirmed
Decommission Read/Write API Specification v1.x/2.x

Plans to decommission AIS v1 / v2 in May however this has been delayed due to COVID.

Plans to decommission PIS v1 on November 23rd 2020. 


Decommission OB Security Profile Implementer's Draft v1.xTBC - No Plans



...