How often does the TPP poll the token endpoint in CIBA?

interval provided
The bank gives the polling interval in its response.
interval missing
The spec gives no default value. CIBA Core sets a default of five seconds.

In STET 1.6.3: Part 1, §3.4.2.5 Client Initiated Backchannel Authentication Grant, p. 35
Bank side: Set expires_in, which is mandatory, and interval if needed. Identify the PSU and check that a decoupled channel exists. The spec does not say which error to return when there is none.
TPP side: On slow_down, add at least five seconds to the interval, for this request and the following ones. On expired_token, start a new request. Handle access_denied.

The entry as stored

{
  "id": "OPT-OAU-009",
  "edition": "1.6.3",
  "chooser": "aspsp",
  "title": {
    "fr": "Rythme du polling CIBA",
    "en": "CIBA polling rate",
    "es": "Frecuencia del polling CIBA",
    "pt-br": "Frequência do polling CIBA"
  },
  "question": {
    "fr": "À quel rythme le TPP interroge-t-il le token endpoint en CIBA ?",
    "en": "How often does the TPP poll the token endpoint in CIBA?",
    "es": "¿Con qué frecuencia consulta el TPP el token endpoint en CIBA?",
    "pt-br": "Com que frequência o TPP consulta o token endpoint em CIBA?"
  },
  "options": [
    {
      "label": {
        "fr": "`interval` fourni",
        "en": "`interval` provided",
        "es": "`interval` presente",
        "pt-br": "`interval` fornecido"
      },
      "text": {
        "fr": "La banque indique l'intervalle de polling dans sa réponse.",
        "en": "The bank gives the polling interval in its response.",
        "es": "El banco indica el intervalo de polling en su respuesta.",
        "pt-br": "O banco indica o intervalo de polling na resposta."
      }
    },
    {
      "label": {
        "fr": "`interval` absent",
        "en": "`interval` missing",
        "es": "`interval` ausente",
        "pt-br": "`interval` ausente"
      },
      "text": {
        "fr": "La spec ne donne pas de valeur par défaut. CIBA Core en donne une de cinq secondes.",
        "en": "The spec gives no default value. CIBA Core sets a default of five seconds.",
        "es": "La especificación no da ningún valor por defecto. CIBA Core fija uno de cinco segundos.",
        "pt-br": "A especificação não dá valor padrão. O CIBA Core define um de cinco segundos."
      }
    }
  ],
  "stet": {
    "sections": [
      {
        "part": "framework",
        "section": "3.4.2.5",
        "page": 35
      }
    ],
    "openapi": [],
    "flows": [],
    "changes": [],
    "remark": null
  },
  "aspsp": {
    "fr": "Fixer `expires_in`, obligatoire, et `interval` si besoin. Identifier le PSU et vérifier qu'un canal découplé existe. La spec ne dit pas quelle erreur renvoyer quand il n'y en a pas.",
    "en": "Set `expires_in`, which is mandatory, and `interval` if needed. Identify the PSU and check that a decoupled channel exists. The spec does not say which error to return when there is none.",
    "es": "Fijar `expires_in`, que es obligatorio, y también `interval` si hace falta. Identificar al PSU y comprobar que existe un canal desacoplado. La especificación no dice qué error devolver cuando no lo hay.",
    "pt-br": "Definir `expires_in`, obrigatório, e `interval` se necessário. Identificar o PSU e verificar se existe um canal desacoplado. A especificação não diz qual erro retornar quando ele não existe."
  },
  "tpp": {
    "fr": "Sur `slow_down`, ajouter au moins cinq secondes à l'intervalle, pour cette demande et les suivantes. Sur `expired_token`, relancer une demande. Gérer `access_denied`.",
    "en": "On `slow_down`, add at least five seconds to the interval, for this request and the following ones. On `expired_token`, start a new request. Handle `access_denied`.",
    "es": "Si llega `slow_down`, sumar al menos cinco segundos al intervalo, para esta solicitud y las siguientes. Si llega `expired_token`, lanzar una nueva solicitud. Gestionar `access_denied`.",
    "pt-br": "Ao receber `slow_down`, somar pelo menos cinco segundos ao intervalo, para esta solicitação e as seguintes. Ao receber `expired_token`, fazer uma nova solicitação. Tratar `access_denied`."
  },
  "regulation": null,
  "note": null,
  "production": null,
  "verifiedAt": "2026-10-19"
}

All options

The options