Skip to main content

Payment Authorisation (For Banks)

The Payment Authorisation (For Banks) extension enables an Account Servicing Payment Service Provider (ASPSP) to authorise payments initiated by its own customer using an SCA Attestation presented from their EUDI Wallet. This is the issuer-requested flow defined in the TS12 Electronic Payments SCA Implementation with Wallet specification.

How it works

  1. The organisation enables the Payment Authorisation (For Banks) extension from the dashboard.
  2. An administrator configures the payment details shown during authorisation, such as payee, amount, currency and execution date fields.
  3. When a customer initiates a payment in the bank's channels, a presentation request with an urn:eudi:sca:payment:1 transaction data payload is triggered using the configured presentation definition.
  4. The customer reviews the payment details in their EUDI Wallet and presents the SCA Attestation issued by the bank.
  5. The system verifies the presentation, validates the Key Binding JWT (including amr and transaction_data_hashes), and produces the PSD2 Authentication Code used to approve the payment.

Configuration

Payment authorisation request

Configure the transaction fields that make up a payment authorisation request. These fields are cryptographically bound to the authentication (dynamic linking):

FieldDescription
Payee nameDisplay name of the recipient shown to the payer
Payee accountIBAN or account identifier of the recipient
AmountTransaction amount
CurrencyISO 4217 currency code
Execution dateRequested execution date
Remittance informationOptional reference shown to the payer

Supported SCA Attestation types

Select which SCA Attestation types the bank is willing to accept for this flow:

AttestationDescription
Account attestationRepresents a payment account (IBAN, BIC, currency)
Card attestationRepresents a payment card (scheme, pan_last_four)
User attestationRepresents the authenticated user only

Integration

Once configured, the system automatically generates a Presentation Definition bound to the urn:eudi:sca:payment:1 transaction data type. This presentation definition can be viewed from the extension configuration page and is used when initiating payment authorisation requests via the API.

API endpoints:

  • GET/v3/config/extension/payment-authorisation-issuer - Retrieve current configuration
  • PUT/v3/config/extension/payment-authorisation-issuer - Update payment authorisation settings
Caution: Disabling the Payment Authorisation (For Banks) extension deletes its configuration. This action is not reversible.