Additional TPP registration and authentication
Some ASPSPs require a separate TPP registration/authentication in addition to a QWAC/QSEAL certificate. This applies only to TPPs with their own supervisory license. finAPI customers using the finAPI PSD2 License can use the finAPI TPP registration.
For ASPSPs that require registration, the first step is TPP registration in an ASPSP portal. We can provide a list of TPP registration requirements to finAPI customers upon request to support@finapi.io.
After the TPP registration, the respective TPP credentials have to be stored in finAPI Access to allow usage of these credentials to connect to ASPSPs. Here is a list of the required TPP credentials per bank that must be stored in finAPI Access:
Group name | Description |
---|---|
AirBank XS2A CZ | Required fields: TPP receives all the above mentioned parameters in the response on the call to the Payload example:
JSON
|
CSOB XS2A CZ | Required fields: TPP receives the APIKey after completing the registration on the developer portal. Please, see https://developers.csob.cz/how-to/dev-register. TPP receives client_id and client_secret in the response on the call to https://api.csob.cz/api/csob/oauth2/v1/register endpoint. TPP must provide QWAC and APIKey when calling this endpoint. Request example:
CODE
|
CSOB XS2A SK | Required fields: TPP receives all the above-mentioned parameters in the response on the call to https://api.csob.sk/enroll/enroll endpoint. TPP must provide a valid QWAC when calling this endpoint. Payload example:
JSON
|
Erstebank XS2A CZ | Required fields: TPP receives the above-mentioned parameters after completing the registration on the developer portal - see https://developers.erstegroup.com/register for further info. |
Commerzbank XS2A DE | Required fields: TPP can extract |
Comdirect XS2A DE | Required fields: TPP can extract |
Santander XS2A DE | Required fields: TPP can extract TPP-Registration:
NONE
|
DKB XS2A DE
| Starting from 24.03.2021 TPP registration via developer portal is no longer needed or possible. TPP credentials are no longer required. Instead, DKB implements automatic registration of the TPP after the first call to the API using QWAC. As described in the document
This call can be made via this example cURL
CODE
The response should look like
JSON
TPP must provide QWAC when calling this endpoint. The call itself will result in an error, but the automatic registration of TPP should be triggered. According to DKB, the TPPs who were registered prior to these changes do not need to execute this call |
HCOB XS2A DE
| Required fields:
TPP receives the above mentioned parameters after completing its registration on developer portal - https://tpp.hcob-bank.com/store/site/pages/sign-up.jag |
ING XS2A | Required fields: Format of the value: TPP can extract Example:
JSON
|
Erstebank/Sparkasse XS2A AT | Required fields: TPP receives these parameters in the response on the call to https://webapi.developers.erstegroup.com/api/v1/initiation/bank.eba endpoint. TPP must provide a valid QWAC when calling this endpoint. Payload example:
JSON
|
Raiffeisen XS2A AT | Required fields: TPP receives it after uploading a valid QWAC to QWAC is checked on the transport layer during the SSL Handshake. See request and response details at https://api-dashboard.raiffeisen.at/web/#!/psd2-oauth-flow |
Hypo XS2A AT | Required fields: TPP receives it after uploading a valid QWAC to QWAC is checked on the transport layer during the SSL Handshake. See request and response details at https://api-dashboard.hypo.at/web/#!/psd2-oauth-flow |
Amex XS2A | Required fields: TPP receives the these parameters after completing the registration on the developer portal - see https://developer.americanexpress.com/open-banking for further info |
Erstebank XS2A SK | Required fields: TPP receives these parameters after completing the registration on the developer portal - see https://developers.erstegroup.com/register for further info. |
Bank Verlag XS2A DE
| No TPP credentials are needed to access Bank Verlag XS2A API |
Barclaycard XS2A DE | Required fields: TPP receives these parameters after completing the registration on the developer portal - see https://developer.barclays.com/register for further info. |
PayPal XS2A | Required fields: TPP receives these parameters after completing the registration on the TPP landing page: https://www.paypal.com/partnerexp/tppLanding If the TPP’s Certificate is expiring, send the new certificates via email to the Paypal support team (email contact can be provided on-request) |
Tatra XS2A SK | Required fields: TPP receives these parameters after completing the registration on the developer portal - see https://developer.tatrabanka.sk/ for further info. |
Raiffeisen XS2A Sandbox AT | Required fields: TPP receives these parameters after completing the registration on the developer portal - see https://api-dashboard.raiffeisen.at/web/#!/register. Credentials are displayed in the TPP application profile. |
Sparda XS2A DE | Required fields: TPP can extract the |
VR XS2A DE | Required fields: The format of the value: TPP can extract the |
Bunq XS2A | Required fields:
TPP receives these parameters after completing the registration process described at - https://doc.bunq.com/ (section “PSD2 service provider”). |
Solarisbank (Penta) | Required fields: TPP can extract the |
Revolut XS2A | Required fields:
The Key ID can be found as the value of the |
N26 XS2A | Required fields: TPP can extract the |
Qonto XS2A | Required fields: |
Komerční banka XS2A (SK) | Required fields: TPPs receives these parameters after completing the registration via the developer portal https://api.koba.sk/portal |
Fidor Bank XS2A | Required fields: TPP is required to onboard via |
M.M. Warburg XS2A DE | Required fields: The format of the value: TPP can extract the Example:
JSON
|
Posojilnica Bank XS2A | Required fields: TPP receives it after uploading a valid QWAC to See request and response details at https://api-dashboard.poso.at/web/#!/psd2-oauth-flow |
VUB XS2A | Required fields: To register as a TPP, a call to the endpoint https://api.vub.sk/psd2/register is required. For more details, go to the documentation page and then go to the section PSD2_OpenIdRegister_swagger.yaml. |
Holvi Bank XS2A | Required fields: To register as a TPP, a call to the endpoint https://psd2.holvi.com/v1/onboarding/signup/ is required. For more details, go to the documentation page and then go to section “Onboarding API”. |
Cross-european TPP - global | Required fields: Please define the credentials, you have received from our partner.
This TPP Bank Group will serve all banks that are integrated using our partner’s API and don’t require separate TPP registrations on the banks' side for every environment that your application is running in. We recommend reaching out to our support (E-Mail: support@finapi.io) to clarify how you can obtain these credentials from our partner. |
Cross-european TPP - per-environment | Required fields: Please define the credentials, you have received from our partner.
This TPP Bank Group will serve all banks that are integrated using our partner's API and require separate TPP registrations on the banks' side for every environment that your application is running in. We recommend reaching out to our support (E-Mail: support@finapi.io) to clarify how you can obtain these credentials from our partner. |