Skip to main content

Account Information Access

The Account Information Access extension enables an Account Information Service Provider (AISP) to request consented access to a customer's payment account information using an SCA Attestation presented from their EUDI Wallet. The flow follows the TS12 Electronic Payments SCA Implementation with Wallet specification.

How it works

  1. The organisation enables the Account Information Access extension from the dashboard.
  2. An administrator configures the service description shown to the customer and the account attributes to request (e.g. IBAN, BIC, currency).
  3. When a customer needs to grant account access, a verification request with an urn:eudi:sca:account_access:1 transaction data payload is triggered using the configured presentation definition.
  4. The customer reviews the service, AISP identifier and scope of access, and presents an SCA Attestation from their EUDI Wallet.
  5. The system verifies the presentation, its Key Binding JWT and the dynamic link to the transaction, and completes the account access consent.

Configuration

Account access request

Configure the account attributes the AISP requests from the customer's Payment Account Credential:

AttributeDescription
ibanInternational Bank Account Number
bicBank Identifier Code
currencyAccount currency

Transaction data

The verification request includes an urn:eudi:sca:account_access:1 transaction data object describing the AISP, what is being requested, and the service description shown to the customer:

FieldTypeDescription
transaction_idStringUnique identifier for the account access transaction
date_timeDateTimeTimestamp of the access request
aispObjectThe Account Information Service Provider requesting access
├─ legal_nameStringLegal name of the AISP
├─ brand_nameStringBrand name of the AISP
└─ domain_nameStringDomain of the AISP
descriptionStringHuman-readable service description shown to the customer

Integration

Once configured, the system automatically generates an SCA Attestation Presentation Definition bound to the urn:eudi:sca:account_access:1 transaction data type. This presentation definition can be viewed from the extension configuration page and is used when initiating account access requests via the API.

API endpoints:

  • GET/v3/config/extension/account-information-access - Retrieve current configuration
Caution: Disabling the Account Information Access extension deletes its configuration. This action is not reversible.