OPT-OAU-004Bank and TPPOAuth2 and tokens
PSU identification hints
Can the TPP pass a PSU identifier to the bank?
The options
login_hintThe PSU identifier as the bank knows it.
login_hint_tokenAn opaque token issued by the bank after a first authentication, which the TPP sends back in a new request.
id_token_hintIf the bank has implemented OpenID Connect.
- In STET 1.6.3
- Bank side
- The content of the
login_hint_tokenand the way it identifies the PSU are specific to each bank. It can be delivered through introspection or in a payment status response. - TPP side
- Treat the
login_hint_tokenas an opaque value. With decoupled, passing a PSU identifier is mandatory (OPT-SCA-002).
The entry as stored
{
"id": "OPT-OAU-004",
"edition": "1.6.3",
"chooser": "both",
"title": {
"fr": "Indices d'identification du PSU",
"en": "PSU identification hints",
"es": "Indicaciones para identificar al PSU",
"pt-br": "Hints de identificação do PSU"
},
"question": {
"fr": "Le TPP peut-il transmettre un identifiant du PSU à la banque ?",
"en": "Can the TPP pass a PSU identifier to the bank?",
"es": "¿Puede el TPP transmitir al banco un identificador del PSU?",
"pt-br": "O TPP pode transmitir um identificador do PSU ao banco?"
},
"options": [
{
"label": {
"fr": "`login_hint`",
"en": "`login_hint`",
"es": "`login_hint`",
"pt-br": "`login_hint`"
},
"text": {
"fr": "L'identifiant du PSU tel que la banque le connaît.",
"en": "The PSU identifier as the bank knows it.",
"es": "El identificador del PSU tal como lo conoce el banco.",
"pt-br": "O identificador do PSU tal como o banco o conhece."
}
},
{
"label": {
"fr": "`login_hint_token`",
"en": "`login_hint_token`",
"es": "`login_hint_token`",
"pt-br": "`login_hint_token`"
},
"text": {
"fr": "Un jeton opaque émis par la banque après une première authentification, que le TPP renvoie dans une nouvelle demande.",
"en": "An opaque token issued by the bank after a first authentication, which the TPP sends back in a new request.",
"es": "Un token opaco emitido por el banco tras una primera autenticación, que el TPP reenvía en una nueva solicitud.",
"pt-br": "Um token opaco emitido pelo banco após uma primeira autenticação, que o TPP reenvia em uma nova solicitação."
}
},
{
"label": {
"fr": "`id_token_hint`",
"en": "`id_token_hint`",
"es": "`id_token_hint`",
"pt-br": "`id_token_hint`"
},
"text": {
"fr": "Si la banque a implémenté OpenID Connect.",
"en": "If the bank has implemented OpenID Connect.",
"es": "Si el banco ha implementado OpenID Connect.",
"pt-br": "Se o banco tiver implementado OpenID Connect."
}
}
],
"stet": {
"sections": [
{
"part": "framework",
"section": "3.3.1",
"page": 18
},
{
"part": "framework",
"section": "3.4.2.7",
"page": 39
}
],
"openapi": [
"SupplementaryData.loginHintToken"
],
"flows": [],
"changes": [],
"remark": null
},
"aspsp": {
"fr": "Le contenu du `login_hint_token` et la façon dont il identifie le PSU sont propres à chaque banque. Il peut être livré par l'introspection ou dans une réponse de statut de paiement.",
"en": "The content of the `login_hint_token` and the way it identifies the PSU are specific to each bank. It can be delivered through introspection or in a payment status response.",
"es": "El contenido del `login_hint_token` y la forma en que identifica al PSU son propios de cada banco. Puede entregarse por introspección o en una respuesta de estado de pago.",
"pt-br": "O conteúdo do `login_hint_token` e a forma como ele identifica o PSU são específicos de cada banco. Ele pode ser entregue pela introspecção ou em uma resposta de status de pagamento."
},
"tpp": {
"fr": "Traiter le `login_hint_token` comme une valeur opaque. En decoupled, transmettre un identifiant du PSU est obligatoire (OPT-SCA-002).",
"en": "Treat the `login_hint_token` as an opaque value. With decoupled, passing a PSU identifier is mandatory (OPT-SCA-002).",
"es": "Tratar el `login_hint_token` como un valor opaco. En decoupled, es obligatorio transmitir un identificador del PSU (OPT-SCA-002).",
"pt-br": "Tratar o `login_hint_token` como um valor opaco. Em decoupled, transmitir um identificador do PSU é obrigatório (OPT-SCA-002)."
},
"regulation": null,
"note": null,
"production": null,
"verifiedAt": "2026-10-19"
}