OB-PIS-008PSR 36(4)(ha)Payment initiation

The PISP chooses the authentication procedure

What the text fixes

Where the ASPSP offers several authentication procedures, the PISP chooses which one is presented to the payer.

Article: PSR 36(4)(ha)Provisional numbering of the April 2026 compromise (Council doc. 8221/26). The final numbering will be added when the Official Journal publishes the text, without changing the id.
Who is bound: ASPSP
Who it is for: API, Product
Application: 21 months after entry into force, the general application date (Article 112).
Level 2: No EBA mandate covers this obligation.
Origin: New, with no equivalent in PSD2 or in the 2018 RTS.

STET 1.6.3

Partial

The PISP lists the approaches it accepts in acceptedAuthenticationApproach and the bank picks the one it applies in appliedAuthenticationApproach. The text gives the choice to the PISP.

Handbook pages

Sources

Council doc. 8221/26, page 245

Checked on October 4, 2026

The entry as JSON

{
  "id": "OB-PIS-008",
  "article": "PSR 36(4)(ha)",
  "alsoIn": [],
  "articleFinal": null,
  "actors": [
    "aspsp"
  ],
  "roles": [
    "api",
    "product"
  ],
  "appliesAt": "T+21",
  "title": {
    "fr": "Le PISP choisit la procédure d'authentification",
    "en": "The PISP chooses the authentication procedure",
    "es": "El PISP elige el procedimiento de autenticación",
    "pt-br": "O PISP escolhe o procedimento de autenticação"
  },
  "level1": {
    "fr": "Quand l'ASPSP propose plusieurs procédures d'authentification, le PISP choisit celle qui est présentée au payeur.",
    "en": "Where the ASPSP offers several authentication procedures, the PISP chooses which one is presented to the payer.",
    "es": "Cuando el ASPSP ofrece varios procedimientos de autenticación, el PISP elige cuál se presenta al ordenante.",
    "pt-br": "Quando o ASPSP oferece vários procedimentos de autenticação, o PISP escolhe qual é apresentado ao pagador."
  },
  "level2": null,
  "origin": [],
  "stet": {
    "1.6.3": {
      "status": "partial",
      "note": {
        "fr": "Le PISP indique les approches qu'il accepte dans `acceptedAuthenticationApproach` et la banque retient celle qu'elle applique dans `appliedAuthenticationApproach`. Le texte donne le choix au PISP.",
        "en": "The PISP lists the approaches it accepts in `acceptedAuthenticationApproach` and the bank picks the one it applies in `appliedAuthenticationApproach`. The text gives the choice to the PISP.",
        "es": "El PISP indica los enfoques que acepta en `acceptedAuthenticationApproach` y el banco elige el que aplica en `appliedAuthenticationApproach`. El texto da la elección al PISP.",
        "pt-br": "O PISP indica as abordagens que aceita em `acceptedAuthenticationApproach` e o banco escolhe a que aplica em `appliedAuthenticationApproach`. O texto dá a escolha ao PISP."
      },
      "pages": [
        "endpoints/pisp/payment-requests-post",
        "resources/supplementary-data"
      ]
    }
  },
  "verification": null,
  "sources": [
    {
      "document": "8221/26",
      "page": 245
    }
  ],
  "verifiedAt": "2026-10-04"
}

All obligations Markdown version