...
Group name | Description | |||||
---|---|---|---|---|---|---|
AirBank XS2A CZ | Required fields: client_id, client_secret TPP receives all the above mentioned parameters in the response on the call to TPP must provide QWAC when calling this endpoint. Payload example: { | |||||
CSOB XS2A CZ | Required fields: client_id, client_secret, APIKey TPP receives the APIKey after completing its registration on developer portal. Please, see https://developers.csob.cz/how-to/dev-register. TPP receives client_id and client_secret in the response on the call to https://api.csob.cz/api/csob/oauth2/v1/register endpoint. TPP must provide QWAC and APIKey when calling this endpoint. Request example:
| |||||
CSOB XS2A SK | Required fields: client_id, client_secret TPP receives all the above mentioned parameters in the response on the call to https://api.csob.sk/enroll/enroll endpoint. TPP must provide QWAC when calling this endpoint. Payload example: { | |||||
Erstebank XS2A CZ | Required fields: client_id, client_secret, APIKey TPP receives the above mentioned parameters after completing its registration on developer portal - https://developers.erstegroup.com/register | |||||
Commerzbank XS2A DE | Required fields: organizationIdentifier from QWAC. TPP can extract organizationIdentifier from the public part of its QWAC. | |||||
Comdirect XS2A DE | Required fields: organizationIdentifier from QWAC. TPP can extract organizationIdentifier from the public part of its QWAC. | |||||
Santander XS2A DE | Required fields: organizationIdentifier from QWAC. TPP can extract organizationIdentifier from the public part of its QWAC. TPP-Registration:
| |||||
DKB XS2A DE | Starting from 24.03.2021 TPP registration via developer portal is no longer needed or possible. TPP credentials are no longer required. Instead, DKB implements automatic registration of the TPP after the first call to the API using QWAC. As described in the document
This call can be made via this example cURL
The response should look like
TPP must provide QWAC when calling this endpoint. The call itself will result in an error, but the automatic registration of TPP should be triggered. According to DKB, the TPPs who were registered prior to these changes do not need to execute this call | |||||
HCOB XS2A DE | Required fields:
TPP receives the above mentioned parameters after completing its registration on developer portal - https://tpp.hcob-bank.com/store/site/pages/sign-up.jag | |||||
Hauck and Aufhauser XS2A DE | Required fields:
TPP receives the above mentioned parameters after completing its registration on developer portal - https://tpp.hauck-aufhaeuser.com/store/site/pages/sign-up.jag | |||||
ING XS2A | Required fields: serialNumber from the QSEAL certificate. TPP can extract serialNumber from the public part of its QSEAL. value: “SN=$extracted_serialNumber” example:
| |||||
Erstebank/Sparkasse XS2A AT | Required fields: client_id, client_secret, tppId, applicationId TPP receives all the above mentioned parameters in the response on the call to https://webapi.developers.erstegroup.com/api/v1/initiation/bank.eba endpoint. TPP must provide QWAC when calling this endpoint. Payload example: { | |||||
Raiffeisen XS2A AT | Required fields: clientId TPP receives clientId after uploading its QWAC to QWAC is checked on the transport layer during the SSL Handshake. See request and response details at https://api-dashboard.raiffeisen.at/web/#!/psd2-oauth-flow | |||||
Hypo XS2A AT | Required fields: clientId TPP receives clientId after uploading its QWAC to QWAC is checked on the transport layer during the SSL Handshake. See request and response details at https://api-dashboard.hypo.at/web/#!/psd2-oauth-flow | |||||
Amex XS2A | Required fields: client_id, client_secret. TPP receives the above mentioned parameters after completing its registration on developer portal - https://developer.americanexpress.com/open-banking | |||||
Erstebank XS2A SK | Required fields: client_id, client_secret, APIKey TPP receives the above mentioned parameters after completing its registration on developer portal - https://developers.erstegroup.com/register | |||||
Bank Verlag XS2A DE | No TPP credentials are needed to access Bank Verlag XS2A API | |||||
Barclaycard XS2A DE | Required fields: client_id, client_secret. TPP receives the above mentioned parameters after completing its registration on developer portal - https://developer.barclays.com/register | |||||
PayPal XS2A (DRAFT) | Required fields: client_id, client_secret. TPP receives the above mentioned parameters after completing the registration on the TPP Landing Page; https://www.paypal.com/partnerexp/tppLanding If TPP Certificate is expiring, send the new certificates via email to the Paypal support team (email contact can be provided on-request)
| |||||
Tatra XS2A SK | TPP receives clientId and clientSecret after completing its registration on developer portal - https://developer.tatrabanka.sk/ | |||||
Raiffeisen XS2A Sandbox AT | Required fields: clientId, clientSecret TPP receives clientId and clientSecret after completing its registration on developer portal - https://api-dashboard.raiffeisen.at/web/#!/register. Credentials are displayed in the TPP application profile. | |||||
Sparda XS2A DE | Required fields: organizationIdentifier from QWAC. TPP can extract organizationIdentifier from the public part of its QWAC. | |||||
VR XS2A DE | Required fields: serialNumber from the QSEAL certificate. TPP can extract serialNumber from the public part of its QSEAL. value: “SN=$extracted_serialNumber” | |||||
Bunq XS2A | Required fields:
TPP receives the above mentioned parameters after completing the registration process descripbed at - https://doc.bunq.com/ (section PSD2 service provider). | |||||
Solarisbank (Penta) | Required fields: organizationIdentifier from QWAC. TPP can extract organizationIdentifier from the public part of its QWAC. | |||||
Revolut XS2A | Required fields:
The Key ID can be found as kid in the JWKs file created during the registration process required by Revolut. It is described here: https://developer.revolut.com/docs/build-banking-apps/#identification-and-authentication-dynamic-client-registration | |||||
N26 XS2A | Required fields: organizationIdentifier from QWAC. TPP can extract organizationIdentifier from the public part of its QWAC. | |||||
Qonto XS2A | Required fields: client_id and client_secret | |||||
Komerční banka XS2A (SK) | Required fields:
TPPs receives these parameters when they complete registration via the developer portal Komerční banka (SK) https://api.koba.sk/portal | |||||
Fidor Bank XS2A | Required fields: client_id as organizationIdentifier from QWAC. TPP is required to onboard via GET /hello as described here http://docs.fidorsolutions.cloud/#tag/TPP-Onboarding. The call must be made using QWAC. |
...