Issue a long-lived refresh token during one final SCA, with refresh token rotation implemented.
As part of our transitions for the 90 Day Re-auth Article 10 Changes,
...
Cater Allen is planning to extend the refresh tokens for all TPPs with new long lived unlimited tokens. Date TBC
Article 10A - Endpoints exempt of SCA-RTS
...
Accounts
...
...
Transactions (90days)
...
...
Balances
...
...
Standing orders
...
...
Direct debits
...
...
Beneficiaries
...
...
Products
...
...
Offers
...
...
Parties
...
...
Scheduled Payments
...
...
Statements
Article 10A - Endpoints not exempt of SCA-RTS
...
Transactions (more than 90days)
...
...
Standing orders
...
...
Direct debits
...
...
Beneficiaries
...
...
Products
...
...
Offers
...
...
Parties
...
...
Scheduled Payments
...
...
Statements
Article 10A - Maximum time period after authentication
200 Years =105,120,000
...
Minutes
SCA-RTS implementation
...
status (updated by OBL PS team only)
Status
colour
Green
title
Implemented
In-progress
Panel
titleColor
Black
borderStyle
dashed
title
Security Profile
Page Properties
id
ID-Production
-Which Security profile have you Implemented or planning to implement?
(Lowest version = Current, Highest version = Planned)
OB Security Profile (Legacy)
FAPI (ID2)
FAPI 1 Advanced
Other(Please define)
Security Profile - Next Planned Version Implementation Date
N/A
CIBA Profile - Implemented or planning to implement
(Lowest version = Current, Highest version = Planned)
None
CIBA
CIBA FAPI Profile
CIBA Profile - Next Planned Version Implementation Date
N/A
Security Profile Certification date?
...
Latest certification March 2025
Token Endpoint Authentication Methods Supported
...
client_secret_post
...
...
client_secret_basic
...
...
client_secret_jwt
...
...
tls_client_auth
...
Private_key_jwt
Planned date to Cease support for client id and client secret token endpoint authentication
POST-BREXIT POST TRANSITION - Certificates Accepted (from 1st Jul 2021)
eIDAS QWAC
...
eIDAS QSealC
OB legacy (obtransport, obsigning)
OBWAC
OBSeal
Other (Please define)
Panel
titleColor
Black
borderStyle
dashed
title
Customer Journey
Page Properties
id
TC-CJ
-What is your approach to Implementing OBL Customer Experience Guidelines (CEG)?
(tick all that apply)
Already Implemented
Planning to implement or upgrade
Not planning to implement CEG
Which version have you implemented or planning to implement?
(Lowest version = Current, Highest version = Planned)
V3.1.2
V3.1.3
V3.1.4
V3.1.5
V3.1.6
V3.1.7
V3.1.8
V3.1.9
V3.1.10
V3.1.11
V4.0
Implemented version v. 3.1.11.
Planning to implement v. 4 by March 2025
Which date are you planning to implement your latest CEG version?
March 2025
Redirection Model
App to App redirection
Decoupled authentication
Embedded Flow
Bespoke User Journeys
Panel
titleColor
Black
borderStyle
dashed
title
PSD2
Page Properties
id
TC-PSD2
-Which Directory are you using as your Trust Framework?
Open Banking
Are you caching the Directory?
No
Transaction IDs Supported
No
Are you Seeking Fallback Exemption?
Yes
No
Article 10 - Maximum time period after authentication
N/A
It's immediate.
Article 10 - Endpoints exempt of SCA
N/A
For article 10 we are only going with the 90 days re-authentication but not restrictions on payment types (DDs, SOs) or data for more than 90 days away.
Please note: We do not display statements
Major Milestones
Version 3.1.10 was implemented in January 2023 and Security Conformance SUITE re-certification in progress.
For Production URL we are live with AIS, PIS and CBPII.
Full live proving has been provided for AIS and PIS. For CBPII endpoints we are in Managed Rollout phase testing. Please contact us for further information.
