POST-BREXIT Certificate Implementation Status (updated by OBIE IES team)
Panel
titleColor
Black
borderStyle
dashed
title
ImplementationCustomer Journey
Page Properties
id
TC-IMP
Page Properties
id
TC-IMP
Directory?
Preta
Preta connection exists but currently the services are not activated.
Location of Well Known Endpoints?
Dev Portal
API Standard Implemented?
Berlin Group Standards XS2A 1.3
Name of Account Holder Implementation Date?
Completed -
Date of Current eIDAS Implementation?
The dedicated interface has been designed for TPPs to connect where they have obtained a QWAC from QTSP
Current Certificates used for Identification?
QWAC
QWAC
Current Certificates used for Transport?
QWAC
Current Certificates used for Signing?
Date of Future eIDAS Implementation?
No future update currently planned.
Future Certificates used for Identification?
Future Certificates used for Transport?
Future Certificates used for Signing?
Major Milestones
API Live for wide usage
Brand(s)
Security Profile?
Security Profile Certification?
No
CIBA
No
Using Open Banking as your eIDAS Trust Framework?
No
CJ
What is your approach to Implementing OBIE Customer Experience Guidelines (CEG)?
(tick all that apply)
Already Implemented
Planning to implement or upgrade
Not planning to implement CEG
Based on Berlin Group Standards
Which version have you implemented or planning to implement?
(Lowest version = Current, Highest version = Planned)
V3.1.2
V3.1.3
V3.1.4
V3.1.5
V3.1.6
V3.1.7
V3.1.8
Which date are you planning to implement your latest CEG version?
TBC
Redirection Model
App to App redirection
Decoupled authentication
Embedded Flow
Bespoke User Journeys
No. However, the National Bank of Belgium has requested this feature for Puilaetco Belgium, another affiliate of KBL group. Therefore, the functionality will be implemented for all group affiliates once further guidance from NBB will be provided.
Options on 90 day re-authentication?
At log in after 90 days the customer will have to re-authenticate.
Panel
titleColor
Black
borderStyle
dashed
title
PSD2
Page Properties
id
TC-PSD2
Page Properties
id
TC-CJ
Implementing Customer Experience Guidelines?
No
Based on Berlin Group Standards
Current CEG Version?
Next CEG Version?
Next Version Implementation Date
Implementing Bespoke User Journeys?
No
Implementing App to App?
No (See Note)
No. However, the National Bank of Belgium has requested this feature for Puilaetco Belgium, another affiliate of KBL group. Therefore, the functionality will be implemented for all group affiliates once further guidance from NBB will be provided.
App to App Implementation Date?
N/A
Options on 90 day re-authentication?
90 Day Re-authentication
Yes - Consent has a validity date which is maximum 90 days. Once it has been validated via the redirection mechanism, the AISP can use it until it expires for accessing the account data without having to initiate a SCA from the client.
Support Embedded Flow?
No
Which Directory are you using as your Trust Framework?
Preta
Are you caching the Directory?
No
Transaction IDs Supported
AISP - Option 4
PISP - Option 1
For AISP, no transaction ID available to TPP. For PISP, a unique transaction ID is generated by the bank.
ASPSPs provide a Unique, Immutable TransactionID from their core system
ASPSPs generate a Unique TransactionID from a set of Immutable fields
ASPSPs specify field(s) for TPP to generate a Unique Transaction Identifier
ASPSPs provide neither a TransactionID nor the method by which TPPs can generate one
Panel
borderStyle
dashed
title
Customer Journey
Are you enrolled to Dispute Management System?
Yes
No
Are you Seeking Fallback Exemption?
Yes
No
Article 10 - Maximum time period after authentication
Article 10 - Endpoints exempt of SCA
Major Milestones
API Live for wide usage
Brand(s)
Panel
titleColor
Black
borderStyle
dashed
title
PSD2ASPSP Dev Portal and Contact Details
Page Properties
id
TC-PSD2
Dispute Management System?
No
FCA Adjustment Period - Maintaining Screen Scraping?
Yes
Seeking Fallback Exemption?
Yes
Adjusted or Fallback Interface?
No
A fallback interface plan is currently under investigation, should the exemption be rejected. Fallback interface would be the PSU interface
Please specify the location of the guidance that explains your strategy and plans for when your dedicated interface is unavailable. This should be a
URL
to your dev portal or artefact that provides TPPs with the information they requireArticle 10 - Maximum time period after authentication?
Please specify how long the AISP has from the time when they receive the access token (after PSU authentication). This is the period the AISP must submit their first request before SCA will be re-applied to endpoints NOT exempt of SCA under Article 10. ASPSPs should consider that this timeline is consistent with the time limit applied by the ASPSP in the existing online PSU interface (i.e. before the PSU is logged out)
Article 10 - Endpoints exempt of SCA
Please specify which AIS endpoints will be exempt from SCA under Article 10. (delete as appropriate): Accounts, Balances, Transactions, Beneficiaries, Direct Debits, Standing Orders, Products, Offers, Parties, Scheduled Payments, Statements
Authentication Method - Open Banking Channel (Browser)?
Username, Pin code and OTP (generated from smartcard)
Authentication Method - Open Banking Channel (APP)?