ofOpen Finance Guide
GlossárioSTETBlogContato
object

SupplementaryData

ISO20022: Additional information that cannot be captured in the structured elements and/or any other specific block.

API: This structure is used to embed the relevant URLs for returning the status report to the PISP and to specify which authentication approaches are accepted by the PISP and which has been chosen by the ASPSP

Fields (5)

  • acceptedAuthenticationApproacharray<string>

    can only be set by the PISP

    can only be set by the PISP authentication approaches that are supported by the PISP. The PISP can provide several choices separated by commas. REDIRECT: the PSU is redirected by the TPP to the ASPSP which processes identification and authentication DECOUPLED: the TPP identifies the PSU and forwards the identification to the ASPSP which processes the authentication through a decoupled device EMBEDDED: the TPP identifies the PSU and forwards the identification to the ASPSP which starts the authentication. The TPP forwards one authentication factor of the PSU (e.g. OTP or response to a challenge)

    Code
    REDIRECT
    DECOUPLED
    EMBEDDED

    Type: array<string>

    Item: combination of possible values for authentication approaches

  • appliedAuthenticationApproachAppliedAuthenticationApproach

    The ASPSP, based on the authentication approaches proposed by the PISP, choose the one that it can processed, in respect with the preferences and constraints of the PSU and indicates in this field which approach has been chosen

    Schema: AppliedAuthenticationApproach

    Code
    REDIRECT
    DECOUPLED
    EMBEDDED
  • scaHintstringenum · 2

    can only be set by the PISP

    can only be set by the PISP Hint given by the merchant and/or the PISP about an SCA exemption context

    Code
    noScaExemption
    scaExemption
  • successfulReportUrlstring

    URL to be used by the ASPSP in order to notify the PISP of the finalisation of the authentication and consent process in REDIRECT and DECOUPLED approach

    URL to be used by the ASPSP in order to notify the PISP of the finalisation of the authentication and consent process in REDIRECT and DECOUPLED approach

  • unsuccessfulReportUrlstring

    URL to be used by the ASPSP in order to notify the PISP of the failure of the authentication and consent process in REDIRECT and DECOUPLED approach

    URL to be used by the ASPSP in order to notify the PISP of the failure of the authentication and consent process in REDIRECT and DECOUPLED approach If this URL is not provided by the PISP, the ASPSP will use the "successfulReportUrl" even in case of failure of the Payment Request processing