Tesco Personal Finance PLC

OB Standards

Implement Open Data v2.2		Update on Production Date to be provided by May
Implement Read/Write API Specification v3.1		Update on Production Date to be provided by May
Implement Customer Experience Guidelines v1.1		Update on Production Date to be provided by May
Implement App-to-App Redirection		Currently expected September 2019
Implement OB Security Profile Implementer's Draft v1.1.2		Update on Production Date to be provided by May
Implement FAPI Profile Implementers Draft 2	n/a
Implement CIBA Profile Implementers Draft 1	n/a
Implement Dynamic Client Registration v1.1	n/a
Implement Dynamic Client Registration v3.1		Update on Production Date to be provided by May
Decommission Read/Write API Specification v1.x/2.x	n/a
Decommission OB Security Profile Implementer's Draft v1.x	n/a
Article 10 SCA Exemption (for 90 days)		Resources covered (delete as appropriate): Accounts, Balances, Transactions, Beneficiaries, Direct Debits, Standing Orders, Products, Offers, Parties, Scheduled Payments, Statements

Method of Identification

Commence support for eIDAS QWAC certificates		Update on Production Date to be provided by April
Commence support for eIDAS QSEAL certificates		Update on Production Date to be provided by April
Commence support for OBIE QWAC-like certificates		Update on Production Date to be provided by April
Commence support for OBIE QSEAL-like certificates		Update on Production Date to be provided by April
Cease support for OBIE non eIDAS-like certificates for transport		Update on Production Date to be provided by April
Cease support for OBIE non eIDAS-like certificates for signing		Update on Production Date to be provided by April
Support for MTLS token endpoint authentication		Update on Production Date to be provided by May
Support for private_key_jwt token endpoint authentication	n/a
Cease support for client id and client secret token endpoint authentication	n/a

Implementation

Directory?	Open Banking
Location of Well Known Endpoints?	OB Technical Directory and OB Implementation Guide
API Standard Implemented?	Open Banking
Name of Account Holder Implementation Date?	TBC	Update on deployment date of v3.1.1 to be provided in May.
Supported identification method?	MTLS
Major Milestones	Updates on production delivery dates to be provided in May. Updates on certificate support to be provided in April	(Inc Other Products, API Updates, API Deprecations, etc)
FAPI Compliant?	Yes
CIBA	No
Using Open Banking as your eIDAS Trust Framework?
Are you caching the Directory?
Transaction IDs

Customer Journey

Implementing Customer Experience Guidelines?	Yes
Implementing Bespoke User Journeys?	No	Closely aligned to CEG v1.2
Implementing App to App?	Yes
App to App Implementation Date?	September 2019
Options on 90 day re-authentication?	Yes	Re authentication will be required after 90 days. Will also be required in scenarios that imply risk and therefore SCA is deemed appropriate by Tesco Bank.
Support Embedded Flow?	No

PSD2

Dispute Management System?	Yes
Seeking Fallback Exemption?	Yes
Adjusted or Fallback Interface?	No
Adjusted or Fallback URL?	N/A
Contact Email or Phone Number?
Dev Portal URL?	https://developer.tescobank.com/
Test Facility Implementation Date?	14 Mar 2019
Production Interface Implementation Date?
Authentication Method - Open Banking Channel (Browser)?	Knowledge – Password & Security Number. Possession – Device or OTP. Inherence – n/a
Authentication Method - Open Banking Channel (APP)?	Knowledge – Password & Security Number. Possession – Device or OTP. Inherence – Fingerprint / Face Recognition
Authentication Method - Private Channel (Browser)?	Knowledge – Password & Security Number. Possession – Device or OTP. Inherence – n/a
Authentication Method - Private Channel (APP)?	Knowledge – Password & Security Number. Possession – Device or OTP. Inherence – Fingerprint / Face Recognition
Authentication Method Implementation Date (Open Banking Channel)?	TBC	Update to be provided in May
Authentication Method Implementation Date (Private Channel)?	N/A	Already in place
SCA Implementation Date?	14 Sep 2019
SCA Scope? (will it inhibit non PSD2 accounts)	Yes	Will impact ISAs, Fixed Rate Savers, Loans Will not impact Mortgage and Insurance