AIB Group (UK) plc

OBIE Standards Calendar

ASPSP	AIB	Notes
Implement Open Data v2.2	N/A
Implement Read/Write API Specification v3.1	13 Mar 2019
Implement Customer Experience Guidelines v1.1	13 Mar 2019
Implement App-to-App Redirection	13 Mar 2019
Implement OB Security Profile Implementer's Draft v1.1.2	N/A
Implement FAPI Profile Implementers Draft 2	13 Mar 2019
Implement CIBA Profile Implementers Draft 1	N/A
Implement Dynamic Client Registration v1.1	N/A
Implement Dynamic Client Registration v3.1	TBC
Decommission Read/Write API Specification v1.x/2.x	TBC
Decommission OB Security Profile Implementer's Draft v1.x	N/A	AIB supports v1.1.0
Article 10 SCA Exemption (for 90 days)		Resources covered (delete as appropriate): Accounts, Balances, Transactions, Beneficiaries, Direct Debits, Standing Orders, Products, Offers, Parties, Scheduled Payments, Statements
Contingency Mechanism (if applicable)		Method (delete as appropriate): Existing PSU interface, but with header signed using signing cert Adapted (clone) version of a PSU interface, with TLS secured using transport cert

Method of Identification Calendar

ASPSP	AIB	Notes
Commence support for eIDAS QWAC certificates	14 Sep 2019
Commence support for eIDAS QSEAL certificates	14 Sep 2019
Commence support for OBIE QWAC-like certificates	N/A
Commence support for OBIE QSEAL-like certificates	30 Aug 2019
Cease support for OBIE non eIDAS-like certificates for transport	14 Sep 2019
Cease support for OBIE non eIDAS-like certificates for signing	14 Sep 2019
Support for MTLS token endpoint authentication	N/A
Support for private_key_jwt token endpoint authentication	06 Sep 2019
Cease support for client id and client secret token endpoint authentication	14 Sep 2019

Implementation

Directory?	Open Banking
Location of Well Known Endpoints?	OB Technical Directory and Dev Portal
API Standard Implemented?	Open Banking
Name of Account Holder Implementation Date?
Supported identification method?	QWAC / QSeal
Major Milestones	N/A
FAPI Compliant?	Yes
CIBA	N/A
Using Open Banking as your eIDAS Trust Framework?	Yes, JWKS for TPP’s and the EC trusted list for eIDAS QTSP’s
Are you caching the Directory?	Yes
Transaction IDs	4. ASPSPs provide neither a TransactionID nor the method by which TPPs can generate one

Customer Journey

Implementing Customer Experience Guidelines?	Yes
Implementing Bespoke User Journeys?	No
Implementing App to App?	Yes
App to App Implementation Date?	13 Mar 2019
Options on 90 day re-authentication?	At log in after 90 days the customer will have to re-authenticate.
Support Embedded Flow?	No

PSD2

Dispute Management System?	Yes
Seeking Fallback Exemption?	Yes
Adjusted or Fallback Interface?
Test Facility Implementation Date?	13 Mar 2019
Production Interface Implementation Date?	13 Mar 2019
Authentication Method - Open Banking Channel (Browser)?
Authentication Method - Open Banking Channel (APP)?
Authentication Method - Private Channel (Browser)?
Authentication Method - Private Channel (APP)?
Authentication Method Implementation Date (Open Banking Channel)?
Authentication Method Implementation Date (Private Channel)?
SCA Implementation Date?
SCA Scope? (will it inhibit non PSD2 accounts)