/
Nationwide Building Society (Virgin Money merged APIs)

Nationwide Building Society (Virgin Money merged APIs)

SCA-RTS 90-day reauth Implementation



Security Profile



-Which Security profile have you Implemented or planning to implement?

(Lowest version = Current, Highest version = Planned)

  • OB Security Profile (Legacy)
  • FAPI (ID2)
  • FAPI 1 Advanced
  • Other (Please define) 


Security Profile - Next Planned Version Implementation Date

No update planned


CIBA Profile - Implemented or planning to implement

(Lowest version = Current, Highest version = Planned)

  • None
  • CIBA
  • CIBA FAPI Profile


CIBA Profile - Next Planned Version Implementation Date

N/A


Security Profile Certification date?

No certification planned


Token Endpoint Authentication Methods Supported

  • client_secret_post
  • client_secret_basic
  • client_secret_jwt
  • tls_client_auth
  • Private_key_jwt


Planned date to Cease support for client id and client secret token endpoint authentication

N/A


POST-BREXIT POST TRANSITION - Certificates Accepted (from 1st Jul 2021)

  • eIDAS QWAC
  • eIDAS QSealC
  • OB legacy (obtransport, obsigning)
  • OBWAC
  • OBSeal
  • Other (Please define) 






Customer Journey



-What is your approach to Implementing OBL Customer Experience Guidelines (CEG)?

(tick all that apply)

  • Already Implemented
  • Planning to implement or upgrade
  • Not planning to implement CEG


Which version have you implemented or planning to implement?

(Lowest version = Current, Highest version = Planned)

  • V3.1.2
  • V3.1.3
  • V3.1.4
  • V3.1.5
  • V3.1.6
  • V3.1.7
  • V3.1.8
  • V3.1.9
  • V3.1.10
  • V3.1.11
  • V4.0
  • V4.0.1


Which date are you planning to implement your latest CEG version?

No update planned


Redirection Model

  • App to App redirection
  • Decoupled authentication
  • Embedded Flow
  • Bespoke User Journeys






PSD2



-Which Directory are you using as your Trust Framework?

Open Banking


Are you caching the Directory?

Yes


Transaction IDs Supported

Option 1


Are you Seeking Fallback Exemption?

  • Yes
  • No


Article 10 - Maximum time period after authentication

10 years (3650 days) for AISP (as long as the customer has allowed access for at least that length of time)


Article 10 - Endpoints exempt of SCA

Balances, transactions, standing orders and direct debits


Major Milestones

January 2023:

B, Clydesdale and Yorkshire Bank branded open banking services decommissioning following completion of our rebranding programme.  These accounts can now be accessed via the Virgin Money (merged) API services.


July 2020:

Virgin Money APIs launched
Domestic Immediate and Domestic Scheduled now includes Bacs and CHAPS.


March 2020:

QWAC/QSEAL eIDAS support


September 2019:

AISP endpoint APIs uplift to v3.1.2
Domestic Immediate Payments PISP uplift to v3.1.2
App to App redirect


August 2019:

Confirmation of Funds (PISP) API


Brand(s)

Virgin Money (merged)






ASPSP Dev Portal and Contact Details



Location of Well Known Endpoints

Virgin Money (merged):

https://api.openbanking.virginmoney.com/open-banking/v3.0/.well-known/openid-configuration



Modified Customer Interface URL (if applicable)

n/a


Dev Portal URL

https://developer.virginmoney.com  


Test Facility URL

https://cb.sandbox-api-nc.cybservices.co.uk/open-banking/v3.0/.well-known/openid-configuration


Brand Landing Pages URL

Brand logo for merged Virgin Money APIs

ASPSP Support Desk Email or Phone Number

(including queries about consent success rates) 

OpenBankingResponse@virginmoney.com

Support requests should be raised via the Open Banking Service Desk by choosing Nationwide Building Society as the ASPSP and stating the ticket relates to our merged APIs.



ADDITIONAL ASPSP INFORMATION

What products are available under the Merged and Stand-Alone Virgin Money APIs?

A comprehensive list of products supported by each set of APIs is provided in this document





Key Implementations

Key Implementations


High Cost Credit