Versions Compared

Version Old Version 26 New Version 27
Changes made by

Praveen Ponnumony

Praveen Ponnumony

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Panel
borderStyledashed
titleOB Standards


Page Properties
idStandards-Production


Implement Open Data v2.2N/A
Implement Read/Write API Specification v3.1 
Implement Customer Experience Guidelines v1.1 
Implement App-to-App RedirectionN/A
Implement OB Security Profile Implementer's Draft v1.1.2 
Implement FAPI Profile Implementers Draft 2 
Implement CIBA Profile Implementers Draft 1N/A
Implement Dynamic Client Registration v1.1N/A
Implement Dynamic Client Registration v3.1N/A
Decommission Read/Write API Specification v1.x/2.xN/A
Decommission OB Security Profile Implementer's Draft v1.xN/A



...

Panel
borderStyledashed
titleMethod of Identification


Page Properties
idID-Production


Commence support for eIDAS QWAC certificatesFrom Q2 2020
Commence support for eIDAS QSEAL certificates
 From Q2 2020

Commence support for OBIE QWAC-like certificates

From 14th September
Commence support for OBIE QSEAL-like certificatesFrom 14th September
Cease support for OBIE non eIDAS-like certificates for transportNo Plans
Cease support for OBIE non eIDAS-like certificates for signingNo Plans
Support for MTLS token endpoint authenticationFrom 14th September
Support for private_key_jwt token endpoint authenticationFrom 14th September
Cease support for client id and client secret token endpoint authenticationNo PlansAlpha FX suggests TPPs to use Private Key JWT but won’t stop the support for client id and secret




Panel
titleColorWhite
titleBGColor#6180c3
borderStyledashed
titlePost Brexit Certificate Implementation


Page Properties
idStandards-Production


PRE-BREXIT - Certificates Accepted (until 31st Dec 2020)
  •  eIDAS QWAC
  •  eIDAS QSealC
  •  OB legacy (obtransport, obsigning)
  •  OBWAC
  •  OBSeal
  •  Other (Please define) 

POST-BREXIT TRANSITION - Certificates Accepted (1st Jan 2021 - 30th Jun 2021)
  •  eIDAS QWAC
  •  eIDAS QSealC
  •  OB legacy (obtransport, obsigning)
  •  OBWAC
  •  OBSeal
  •  Other (Please define) 

POST-BREXIT POST TRANSITION - Certificates Accepted (from 1st Jul 2021)
  •  eIDAS QWAC
  •  eIDAS QSealC
  •  OB legacy (obtransport, obsigning)
  •  OBWAC
  •  OBSeal
  •  Other (Please define) 

Planned Implementation Date to Satisfy FCA's Post Transition



TPP PSU Migration Options Outcomes Supported



POST-BREXIT Certificate Implementation Status (updated by OBIE IES team)





...

Panel
titleColorBlack
borderStyledashed
titlePSD2


Page Properties
idTC-PSD2


Dispute Management System?

No (See notes)We have our own operational process in place
FCA Adjustment Period - Maintaining Screen Scraping?No

Seeking Fallback Exemption?

Exemption granted on  


Adjusted or Fallback Interface?

We are planning to scope the work required for a fallback interface should the exemption fail so that the interface fallback can be confirmed as possible within the required 2 month window. If exemption is achieved we’ll keep the implementation plan for the fallback in place for the possible revocation of the exemption.


Adjusted or Fallback URL?N/A
Contact Email or Phone Number?clientservices@alphafx.co.uk.
Dev Portal URL?https://developer.alpha-fx.co.uk/

Test Facility Implementation Date?

 
Production Interface Implementation Date? 
Contingency MeasuresAlpha FX are aligned to FCA adjustment period and supporting the phased migration of Screen Scraping by TPPs
Article 10 - Maximum time period after authentication?No restrictions applied other than SCA at Auth and Re-Auth
Article 10 - Endpoints exempt of SCANone

Authentication Method - Open Banking Channel (Browser)?

Login credentials (Username and password) + SMS OTP to begin with, then as we move to our SCA solution we will have:

Biometric + Trusted device

Password + Trusted Device

SMS OTP + Password (for clients without our mobile app)

Authentication Method - Open Banking Channel (APP)?

See Authentication Method - Open Banking Channel (Browser)? above


Authentication Method - Private Channel (Browser)?

See Authentication Method - Open Banking Channel (Browser)? above


Authentication Method - Private Channel (APP)?

See Authentication Method - Open Banking Channel (Browser)? above


Authentication Method Implementation Date (Open Banking Channel)?

TBC

Authentication Method Implementation Date (Private Channel)?

TBC

SCA Implementation Date?

 

SCA Scope? (will it inhibit non PSD2 accounts)

PSD2 Accounts only



...