AIB Group (UK) plc

OB Standards

Implement Open Data v2.2	N/A
Implement Read/Write API Specification v3.1	13 Mar 2019
Implement Customer Experience Guidelines v1.1	13 Mar 2019
Implement App-to-App Redirection	13 Mar 2019
Implement OB Security Profile Implementer's Draft v1.1.2	N/A
Implement FAPI Profile Implementers Draft 2	13 Mar 2019
Implement CIBA Profile Implementers Draft 1	N/A
Implement Dynamic Client Registration v1.1	N/A
Implement Dynamic Client Registration v3.1	TBC
Decommission Read/Write API Specification v1.x/2.x	16th Jan 2020	V1.1 of our Account Information API endpoints will be deprecated on the 16th of January 2020.
Decommission OB Security Profile Implementer's Draft v1.x	N/A	AIB supports v1.1.0

Method of Identification

Commence support for eIDAS QWAC certificates	05 Sept 2019
Commence support for eIDAS QSEAL certificates	05 Sep 2019
Commence support for OBIE QWAC-like certificates	N/A
Commence support for OBIE QSEAL-like certificates	30 Aug 2019
Cease support for OBIE non eIDAS-like certificates for transport	14 Mar 2020
Cease support for OBIE non eIDAS-like certificates for signing	14 Mar 2020
Support for MTLS token endpoint authentication	N/A
Support for private_key_jwt token endpoint authentication	04 Sep 2019
Cease support for client id and client secret token endpoint authentication	14 Sep 2019

Implementation

Directory?	Open Banking
Location of Well Known Endpoints?	OB Technical Directory and Dev Portal
API Standard Implemented?	Open Banking
Name of Account Holder Implementation Date?
Supported identification method?	QWAC / QSeal
Major Milestones	N/A	(Inc Other Products, API Updates, API Deprecations, etc)
Security Profile?	Open Banking V1.X
Security Profile Certification?	No
CIBA	N/A
Using Open Banking as your eIDAS Trust Framework?	Yes, JWKS for TPP’s and the EC trusted list for eIDAS QTSP’s
Are you caching the Directory?	Yes
Transaction IDs	Date TBC - Option 4 Supported	4. ASPSPs provide neither a TransactionID nor the method by which TPPs can generate on

Customer Journey

Implementing Customer Experience Guidelines?	Yes
Implementing Bespoke User Journeys?	No
Implementing App to App?	Yes
App to App Implementation Date?	13 Mar 2019
Options on 90 day re-authentication?	At log in after 90 days the customer will have to re-authenticate.
Support Embedded Flow?	No

PSD2

Dispute Management System?	Yes
FCA Adjustment Period - Maintaining Screen Scraping?	Yes
Seeking Fallback Exemption?	Yes
Adjusted or Fallback Interface?	N/A
Adjusted or Fallback URL?
Contact Email or Phone Number?	api@aib.ie
Dev Portal URL?	https://developer.firsttrustbank.co.uk/ https://developer.aibgb.co.uk/
Test Facility Implementation Date?	13 Mar 2019
Production Interface Implementation Date?	13 Mar 2019
Contingency Measures
Article 10 - Maximum time period after authentication?	90 days
Article 10 - Endpoints exempt of SCA	Balances, Transactions (last 90 days only)
Authentication Method - Open Banking Channel (Browser)?
Authentication Method - Open Banking Channel (APP)?
Authentication Method - Private Channel (Browser)?
Authentication Method - Private Channel (APP)?
Authentication Method Implementation Date (Open Banking Channel)?
Authentication Method Implementation Date (Private Channel)?
SCA Implementation Date?
SCA Scope? (will it inhibit non PSD2 accounts)

Key Implementations

High Cost Credit	TBC