Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Author

...

Erick Domingues Anthony Jones

...

Version

...

draft-v.1.0

...

Classification

...

Public

...

  • Ensure Server Certificates are Valid:

    • Generate transport, signing and encryption certificates on the Trust Framework; rotating them at least once every 12 months (certificate expiration is set at 13 months).

  • Ensure Published APIs are Valid and Certified:

    • Publish the API endpoints and ensure the correct version is available before any defined ecosystem go-live date.

    • Ensure server metadata is always up to date, including server logo, server description and customer-facing name.

  • Integrate with Directory for Onboarding:

    • Integrate with the Trust Framework registration endpoints, ensuring all clients registered are onboarded and validated following the ecosystem registration framework. Registration Framework

  • Integrate Authentication:

    • Integrate with the Trust Framework JWKS endpoints, recovering client public keys when validating message signatures and executing message encryption.

    • Integrate with the Directory OCSP/CRL services, verifying that used certificates are valid and up-to-date.

...

5.1 Creating an Account

Please refer to https://openfinanceuae.atlassian.net/wiki/spaces/MarketEngagementTFDocsv1/pages/edit-v2/117801029#4.1-Creating-an-Account

5.2 Signing the Ecosystem Participation Document

Please refer to https://openfinanceuae.atlassian.net/wiki/spaces/MarketEngagementTFDocsv1/pages/edit-v2/117801029#4.2-Signing-the-Ecosystem-Participation-Document

5.3 Onboarding Additional Users

Please refer to https://openfinanceuae.atlassian.net/wiki/spaces/MarketEngagementTFDocsv1/pages/117801029/Trust+Framework+User+Documentation#4.3-Onboarding-Additional-Users

5.4 Registering Clients

The Client Resource enables organizations to register details of their OpenID Relying Parties (Clients), which will interact with OAuth 2.0 Authorization Servers to access protected APIs. The interaction rules between clients and Authorization Server endpoints are outlined in the Security Profile - FAPI document at https://openfinanceuae.atlassian.net/wiki/x/TYCFBg

...