TS12 SCA Workflows
These workflows implement TS12, the payment Strong Customer Authentication (SCA) profile for the EUDI Wallet defined in ETSI TS 119 462. It lets the wallet act as an SCA element for payments.
SCA is mandated under PSD2 Article 97(1) for electronic payment initiation, for accessing a payment account online, and for other actions that carry a risk of fraud. The EUDI Wallet supports all three authentication factor categories (knowledge, possession, inherence) and Dynamic Linking.
TS12 defines four SCA workflows, each driven by an SCA Attestation that the user's Account Servicing Payment Service Provider (ASPSP) issues into their Wallet Unit.
SCA Attestation Types
| Attestation Type | Claims | Purpose |
|---|---|---|
| Payment Service User | None | Login and risk-based step-up authentication |
| Payment Card | pan_last_four, scheme, scheme_logo | Payment Authorisation and Recurring Payment Mandate |
| Payment Account | iban, bic, currency | Payment Authorisation, Recurring Payment Mandate, and Account Information Access |
Transaction Types
| Workflow | Type Identifier | Attestation Used | Description |
|---|---|---|---|
| Login and Risk-based Authentication | urn:eudi:sca:login_risk_transaction:1 | Payment Service User | Step-up SCA for sensitive actions (e.g. login from a new device) |
| Payment Authorisation | urn:eudi:sca:payment:1 | Payment Account, Payment Card | Authorise a payment via a PISP or directly |
| E-mandate | urn:eudi:sca:emandate:1 | Payment Account, Payment Card | Authorise a payment mandate (single, open-ended, recurring or instalment) |
| Account Information Access | urn:eudi:sca:account_access:1 | Payment Account | Authorise an AISP to access account data |
Each workflow follows the same 5-step developer pattern: obtain an API key, create a credential definition, issue a credential, create a presentation definition, and send a verification request with transaction data.
Learn more
- Payment Authorisation in EUDI Wallets (iGrant.io paper, v2.3): the detailed design, rationale and background behind these workflows.
- ETSI TS 119 462: the standard that defines the TS12 payment profile.
- Building blocks used across the workflows: Payment Wallet Attestation and Payment Data Confirmation.