| Expand | ||||
|---|---|---|---|---|
| ||||
|
Version | 1.0 |
|---|---|
Publication Date |
|
Classification | Public |
| Note |
|---|
This Certification Framework is provisional and subject to change. |
1. Introduction
1.1 Objectives
...
Wherever possible, the Open Finance Platform (OFP) will enforce conformance and thereby reduce the ‘burden’ of certification activity requirements for LFIs and TPPs.
1.3 Renewal
...
every time they introduce a new version of the Standards;
every time they make any material changes to their infrastructure and/or Open Finance application API, web or mobile interfaces; and
if requested from time to time at the discretion of the CBUAENebras Open Finance Company (Nebras).
1.4 Ongoing Monitoring
LFIs and TPPs will be subject to ongoing monitoring and enforcement action in case where they introduce any changes which would render a previously obtained certification invalid and where they fail to renew their certification.
...
Each LFI will be required to ensure conformance to the Customer Experience (CX) requirements in the Standards for each use case, for each screen in their Open Finance consent flow and their Open Finance consent dashboard. Each of these screens must meet all the mandatory requirements set out in the Standard.
2.3.1 Process
LFIs will be required to submit screen grabs for each of
...
the following screens to Nebras as evidence of their conformance.
For Bank Service Initiation
One off payments should include
screen 1
etc
Recurring payments should include
tbc
International payments should include
Refunds
AS TABLE
Bank Data Sharing
Single consent
Standing consent
Insurance Data Sharing
Single
Standing
Insurance Quote (coming soon)
Nebras will validate that these screens meet the stated requirements in the Standards and require the LFI to update these screens and resubmit screen grabs if required.
As soon as all screens meet the requirements, Nebras will issue a certification to the LFI.
Ref | Screen | Web | Mobile |
|---|---|---|---|
1 | TPP to LFI Redirection Screen |
|
|
2 | LFI to TPP Redirection Screen |
|
|
3 | Authentication Screen |
|
|
4 | Authentication Screen (2nd Factor) |
| Optional |
5 | Authorization Screen (Single Immediate Payment) |
|
|
6 | Authorization Screen (Single Immediate Payment, showing Shari’ah compliance message) |
|
|
7 | Authorization Screen (Future Dated Payment) |
|
|
8 | Authorization Screen (Multi-Payment) |
|
|
9 | Authorization Screen (International Payment) |
|
|
10 | Authorization Screen (Refund) |
|
|
11 | Authorization Screen (Delegated Authentication) |
|
|
12 | Authorization Screen (Bulk/Batch Payment) |
|
|
13 | Authorization Screen (Bank Data Sharing - One Time) |
|
|
14 | Authorization Screen (Bank Data Sharing - Ongoing) |
|
|
15 | Authorization Screen (Motor Insurance Data Sharing - One Time) |
|
|
16 | Authorization Screen (Motor Insurance Data Sharing - Ongoing) |
|
|
17 | LFI Consent Dashboard (List) |
|
|
18 | LFI Consent Dashboard (Details) |
|
|
19 | LFI Consent Dashboard (Revocation Confirmation) |
|
|
2.3.2 Fees
N/A covered by OFP Fees.
...
TPPs will be required to access the API Hub Sandbox (reference implementation). and execute API calls for each API endpoint relevant to their use case.
Bank Service Initiation, eg
eg
eg
Bank Data Sharing
etc
TABLE
Nebras will validate that the TPP has made successful API calls for each relevant use case and require the TPP to retry if required.
As soon as all APIs have been called successfully, Nebras will issue a certification to the TPP.
...
TPPs will be required to submit screen grabs for each of these screens to Nebras as evidence of their conformance.
LFIs will be required to submit screen grabs for each of these screens to Nebras as evidence of their conformance.
For Bank Service Initiation
One off payments should include
screen 1
etc
Recurring payments should include
tbc
International payments should include
Refunds
AS TABLE
Bank Data Sharing
Single consent
Standing consent
Insurance Data Sharing
Single
Standing
Insurance Quote (coming soon)
Nebras will validate that these screens meet the stated requirements in the Standards and require the TPP to update these screens and resubmit screen grabs if required.
As soon as all screens meet the requirements, Nebras will issue a certification to the TPP.
...