Barclays Bank UK Plc

OB Standards

Implement Open Data v2.2	COMPLETE
Implement Read/Write API Specification v3.1	COMPLETE
Implement Customer Experience Guidelines v1.1	COMPLETE
Implement App-to-App Redirection	COMPLETE
Implement OB Security Profile Implementer's Draft v1.1.2	COMPLETE
Implement FAPI Profile Implementers Draft 2	Phased migration to FAPI 2 by Q1 2020
Implement CIBA Profile Implementers Draft 1	TBC	Plans to be confirmed
Implement Dynamic Client Registration v1.1	Not Delivered
Implement Dynamic Client Registration v3.1	TBC	Plans to be confirmed
Decommission Read/Write API Specification v1.x/2.x	TBC - No Plans
Decommission OB Security Profile Implementer's Draft v1.x	TBC - No Plans

Method of Identification

Commence support for eIDAS QWAC certificates	From Q1 2020
Commence support for eIDAS QSEAL certificates	From Q1 2020
Commence support for OBIE QWAC-like certificates	From 14th September
Commence support for OBIE QSEAL-like certificates	From 14th September
Cease support for OBIE non eIDAS-like certificates for transport	No Plans
Cease support for OBIE non eIDAS-like certificates for signing	No Plans
Support for MTLS token endpoint authentication	No Plans
Support for private_key_jwt token endpoint authentication	June 2019
Cease support for client id and client secret token endpoint authentication	No Plans	Barclays suggests TPPs to use Private Key JWT but won’t stop the support for client id and secret

Implementation

Directory?	Open Banking
Location of Well Known Endpoints?	OB Technical Directory
API Standard Implemented?	Open Banking
Name of Account Holder Implementation Date?	September 2019
Supported identification method?	Currenty support OB identity provider service and OB-WAC / OB-SEAL Support to be extended to EIDAS QWAC / QSEAL from Q1 2020
Major Milestones	v3.1 – 14 Mar 2019 v3.1.1 – 14 Sep 2019 Implementation of all AIS / PIS / CoF end points COMPLETE AIS / PIS / CoF journeys supported for following payment account types: Current Accounts (Personal and Business) Current Accounts (Corporate) Savings Accounts (Personal and Business) Personal Credit Cards (Barclaycard) Corporate Credit Cards Currency Accounts (Personal and Business) Currency Accounts (Corporate) Pingit E-Wallets	See developer.barclays.com for additional information relating to end point coverage
Security Profile?	Currently Open Banking Security Profile Phased migration to FAPI 2 by Q1 2020
Security Profile Certification?	Yes
CIBA	TBC - No plans
Using Open Banking as your eIDAS Trust Framework?	TBC
Are you caching the Directory?
Transaction IDs	March 2019 - Option 3 Supported	3 (longer term commitment to option 1)

Customer Journey

Implementing Customer Experience Guidelines?	Yes
Implementing Bespoke User Journeys?	No
Implementing App to App?	Yes
App to App Implementation Date?	Live
Options on 90 day re-authentication?	90 day re-authentication required across all Open Banking flows
Support Embedded Flow?	No

PSD2

Dispute Management System?	Yes
FCA Adjustment Period - Maintaining Screen Scraping?	Yes
Seeking Fallback Exemption?	Yes
Adjusted or Fallback Interface?	No
Adjusted or Fallback URL?	N/A
Contact Email or Phone Number?	BarclaysAPISupport@barclayscorp.com
Dev Portal URLs	https://developer.barclays.com/open-banking
Test Facility Implementation Date?	14 Mar 2019
Production Interface Implementation Date?	14 Mar 2019
Contingency Measures	Barclays are aligned to FCA adjustment period and supporting the phased migration of Screen Scraping by TPPs
Article 10 - Maximum time period after authentication?	No restrictions applied other than SCA at Auth and Re-Auth
Article 10 - Endpoints exempt of SCA	None
Authentication Method - Open Banking Channel (Browser)?	SCA compliant digital channel logon
Authentication Method - Open Banking Channel (APP)?	SCA compliant digital channel logon
Authentication Method - Private Channel (Browser)?	SCA compliant digital channel logon
Authentication Method - Private Channel (APP)?	SCA compliant digital channel logon
Authentication Method Implementation Date (Open Banking Channel)?	Live
Authentication Method Implementation Date (Private Channel)?	Live
SCA Implementation Date?	Live Note - Barclays are aligned to FCA adjustment period and supporting the phased migration of Screen Scraping by TPPs
SCA Scope? (will it inhibit non PSD2 accounts)	No	Scope of Open Banking flows limited to PSD2 accounts only