Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Expand
titleMENU
Table of Contents
stylenone

...

The Long-lived consent type is further categorized based on the consent payment parameters as shown in the following table:

Consent Type

Relevant Use Cases

Consent Parameters Type

Payment Amount

Payment Schedule

Typical Usage Examples

Long-lived

Fixed Recurring Payments (FRPs)

Fixed Recurring

Fixed (known)

Fixed (known)

  • P2P standing orders

  • P2M monthly subscription

  • Installment payments

  • BNPL

Variable Recurring Payments (VRPs)

Fixed On-demand

Fixed (known)

Variable (unknown)

Account top-up

Variable Recurring Payments (VRPs)

Variable Recurring

Variable (unknown)

Fixed (known)

P2M utility payments

Variable Recurring Payments (VRPs)

Variable On-demand

Variable (unknown)

Variable (unknown)

  • Account Sweeping

  • Cab booking App

Variable Recurring Payments (VRPs)

Variable-defined

Variable (Known)

Fixed (known - predefined list of dates)

  • Installment payments (payment plan)

  • Project completion-based payments

...

  1. The Payment Consent must be authorized by the User via Multi-Factor Authentication (MFA) at their LFI (“VRP Consent Setup”). However, each individual payment instructed by the TPP using the Long-lived Consent does not require MFA of the User by the LFI.

  2. The payee is fixed but the timing or amount of each payment need not be fixed during the VRP Consent Setup. Instead, it is subject to the constraints of certain parameters (“Consent Control Parameters”), agreed between the TPP and the User, which are enforced by the LFI.

  3. The Consent Control Parameters are included within the Consent. Therefore, they are subject to the LFI requiring MFA of the User, as part of the Consent Setup.

1.5 Multi-Payments to

...

Variable Beneficiaries

The long-lived Multi-Payments Consent can be extended to include payments to multiple variable beneficiaries. This can be of one of 2 types:

Multi-Payment Type

User Present

Excplicit Authorization

Beneficiary

Consent Parameters Type

Typical Usage Examples

Fixed Recurring Payments (FRPs)

or

Variable Recurring Payments (VRPs)

No

Multiple Fixed

Variable-defined (known - predefined list of Beneficiaries)

User Not-Present Multi-

Implicit-Auth Variable-defined Beneficiary (

UNPMB

IAVDB)

Automated PFM/BFM & sweeping

Yes

Multiple

Variable (unknown)

User Present Multi

Explicit-Auth Variable Beneficiary (

UPMB

EAVB)

Payment app POS payments

1.5.1

...

Implicit-Auth Variable-defined Beneficiary (

...

IAVDB) Multi-Payments - Example User Story

Panel
panelIconIdfc1ec21b-3d40-498b-93f8-df20afd1c4cf
panelIcon:asffd:
panelIconText:asffd:
bgColor#E6FCFF

User Story

As a User (Consumer or Business),

I want to use a TPP to setup a sequence of future payments of fixed or variable amounts on a fixed or variable schedule, to a predefined list of domestic beneficiary accounts owned by one or more a businesses or individuals,

so that I can arrange to transfer funds or pay the relevant beneficiaries automatically without the need for me to be present and initiate or take any actions with the TPP forinitiating the payment every time.

1.5.2

...

Explicit-Auth Variable Beneficiary (

...

EAVB) Multi-Payments - Example User Story

Panel
panelIconIdfc1ec21b-3d40-498b-93f8-df20afd1c4cf
panelIcon:asffd:
panelIconText:asffd:
bgColor#E6FCFF

User Story

As a User (Consumer or Business),

I want to use a TPP to set up a sequence of future payments of fixed or variable amounts from my payment account with a fixed or variable schedule, to any domestic beneficiary account owned by a business or an individual,

so that I can arrange to pay the relevant beneficiary by initiating a payment from the TPP app without the , subject to pre-agreed authorization conditions, without the need for me to authorize each payment with my LFI.

2. User Journey

...

3. Wireframes

image-20240305-143530.pngImage Removed

3.1. Consent Setup

...

#

...

Step

...

Rules & Guidelines

...

MPCS-1

1.5.3 Prerequisites for Variable Beneficiary Multi-Payments

...

...

Basic Consent Parameters

TPPs MUST:

1.1 Enable Users to provide and review the parameters related to the initiation of a series of Multi-Payments they need to consent to. These parameters include:

Note: Depending on the use case the Payee details may not be displayed to the User in full. However, these need to be part of the payment request sent by the TPP to the LFI.

Fixed Recurring Payments (FRPs) Consent

...

1.5.3.1 Liability Model

The liability model must be updated for the case of Variable Beneficiary Multi-Payment Consents. TPPs are expected to be fully liable for any disputes with Users in relation to unauthorized payments.

1.5.3.2 TPP T&Cs

The T&Cs of TPPs MUST request Users to agree that they will be one or more “factors” (i.e. conditions) that will be used by the TPP as their explicit authorization for each payment initiation of Multi-Payments to Variable Beneficiaries. Examples of these factors may be the following:

  • User biometrics, RFID token, Vehicle registration, mobile phone, plastic card, other User identification (e.g. Emirates ID), standard MFA process etc.

TPPs will have the option to require one or more factors for explicit authorization. The factors will be agreed between TPPs and Users to be the qualifying conditions for each payment initiation to be considered as authorized. The authorization factors MUST be presented to Users while providing explicit consent for the long-lived Variable Beneficiary Multi-payment Consent.

The factors used by TPPs MUST be in alignment with the list of required evidence that will be listed in the liability model.

2. User Journey

...

3. Wireframes

...

3.1. Consent Setup

MPCS-5

#

Step

Rules & Guidelines

MPCS-1

Multi-Payments Consent

Basic Consent Parameters

TPPs MUST:

1.1 Enable Users to provide and review the parameters related to the initiation of a series of Multi-Payments they need to consent to. These parameters include:

Recurring Payments (VRPs) - Fixed On-demand Consent

Note: Depending on the use case the Payee details may not be displayed to the User in full. However, these need to be part of the payment request sent by the TPP to the LFI.

Fixed Recurring Payments (FRPs) Consent

Variable Recurring Payments (VRPs) - Fixed On- Variable Recurring demand Consent

Variable Recurring Payments (VRPs) - Variable On-demand Recurring Consent

Variable Recurring Payments (VRPs) - Variable-defined Consent

Variable-defined Payments & Schedule

Variable Recurring Payments (VRPs) - Variable On-demand Consent

1.2 Set the Accepted Authorization Type

Additional Consent Parameters

52528830/Common+Rules+and+Guidelines#7.-Accepted-Authorization-Type).1.3 Set the Authorization Time Window

Variable Recurring Payments (VRPs) - Variable-defined Consent

52528830/Common+Rules+and+Guidelines#8.-Authorization-Time-Window) if there are specific timing requirements that must be met for the consent authorization. This is also relevant to cases where multiple authorizers are required to authorize the payment consent.
  • 1.3.1 For Fixed Recurring Consent and Variable Recurring Consent, the Authorization Time Window MUST be less than the time of the first payment in the Periodic Payment Schedule.

  • 1.3.2 For Variable-defined Consent, the Authorization Time Window MUST be less than the time of the first payment in the Variable-defined Payments Schedule.

1.4 Set the Risk Information Block

Additional Consent Parameters

1.2 Set the Accepted Authorization Type (as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#9Guidelines#7.-RiskAccepted-InformationAuthorization-BlockType).

1.5 Enable Users to provide explicit consent for the initiation of a series of future Multi-Payments of fixed or variable amounts based on a fixed periodic schedule or a variable schedule from their online payment account held at their LFI as per the payment parameters specified in the consent.

MPCS-2

Consent Staging

As per 3 Set the Authorization Time Window (as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#10Guidelines#8.-ConsentAuthorization-Staging

MPCS-3

Hand-off to LFI

As per Time-Window) if there are specific timing requirements that must be met for the consent authorization. This is also relevant to cases where multiple authorizers are required to authorize the payment consent.

  • 1.3.1 For Fixed Recurring Consent and Variable Recurring Consent, the Authorization Time Window MUST be less than the time of the first payment in the Periodic Payment Schedule.

  • 1.3.2 For Variable-defined Consent, the Authorization Time Window MUST be less than the time of the first payment in the Variable-defined Payments Schedule.

1.4 Set the Risk Information Block (as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#11Guidelines#9.-HandRisk-off-to-LFI

Example wording to use: ‘We will securely transfer to YOUR LFI to authenticate and authorize your payments setup“.

MPCS-4

Authentication

As per the following sections:

Information-Block)

1.5 Enable Users to provide explicit consent for the initiation of a series of future Multi-Payments of fixed or variable amounts based on a fixed periodic schedule or a variable schedule from their online payment account held at their LFI as per the payment parameters specified in the consent.

MPCS-2

Consent Staging

As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/

52527741

52528830/

Authentication

Common+Rules+and+

Authorization#2

Guidelines#10.-

Redirectionhttps://

Consent-Staging

MPCS-3

Hand-off to LFI

As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/

52527741

52528830/

Authentication

Common+Rules+and+

Authorization#3.-Decoupled

Guidelines#11.-Hand-off-to-LFI

Example wording to use: ‘We will securely transfer to YOUR LFI to authenticate and authorize your payments setup“.

MPCS-4

Authentication

LFI Authentication Only

As per the following sections:

Centralized Authentication and Authorization (Federated) Only

As per https://openfinanceuae.atlassian.net/wiki/x/HoBBAw

MPCS-5

Confirmation/ Authorization

LFIs MUST:

5.1 Enable Users to authenticate using Multi-Factor Authentication (MFA) in order to review and authorize the long-lived payment Consent.

5.2 Retrieve from the OFP the payment Consent details staged by the TPP using the unique Consent Identifier.

5.3 Allow Users to select a payment account for the initiation of the multi-payments, if this was not provided in the retrieved staged Payment Consent details as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#12.-Payment-Account-Selection-at-LFI

  • 5.3.1 Allow Users to select a payment account for the initiation of the multi-payments even if it has insufficient funds at the time of the payment Consent authorization. This allows Users to fund the payment accounts appropriately before the dates of the payment initiation. However, the LFIs MUST inform the User, if the selected payment account has insufficient funds.

5.4 Only present additional screens, if necessary to allow the validation and confirmation of the payment Consent (e.g., Beneficiary adding & activation and Proxy lookup).

5.5 NOT earmark (i.e. block) any funds related to the payment Consent in the Users' payment account at the point of Consent authorization.

5.6 Check the authorization status of the selected payment account is in accordance with the TPPs' Accepted Authorization Type as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#13.-Check-Accepted-Authorization-Type.

5.7 Add to the payment Consent the IBAN of the Payee returned by the Proxy resolution process, if the multi-payments Consent was submitted for User Authorization with one or more Beneficiaries using a Proxy as the Payee Identification. The In these cases, the Consent is thereafter tied to the IBAN(s) of the Payee(s) rather than the proxy itselfproxies themselves. This will allow the future multi-payments to be initiated to this these IBAN(s) even if the Payee changes the (s) change proxy between the time of the Consent and the initiation of multi-payments as part of that related to the Consent.

  • 5.7.1 Return back to the OFP (and the TPP) Include in the payment Consent response to the OFP the IBAN(s) of the Payee identification(s) returned by the Proxy resolution.

5.8 Present to Users the following minimum required information for authorizing the long-lived payments Consent:

  • User Payment Account

  • Payee Identification details

  • Payer Note (Optional)

  • Consent (one or more if included in the Consent e.g. for Variable-defined)

    • For Variable Beneficiaries, a message stating the payee will be specified and validated during the payment initiation

  • Payer Note (Optional)

  • Consent Reference

  • Payment Amount & Currency (if relevant, depending on the type of the long-lived payment Consent)

  • Consent Controls Parameters (if relevant, depending on the type of the long-lived payment Consent)

  • Consent Control Period & Start Date (if relevant, depending on the type of the long-lived payment Consent)

  • The Payment Schedule (Periodic or Variable-defined) (if relevant, depending on the type of the long-lived payment Consent)

  • Consent Expiration Date & Time

  • Fees & VAT (if applicable): These are potential charges that will be applied to the User account for making a payment in relation to the long-lived payment Consent. Both bank charges and VAT MUST be presented, stated separately, prior to the User Consent authorization. If applicable, LFIs MUST apply the charges on the date of each payment initiation and not at the point of payment Consent authorization.

5.9 Check the Authorization Time window is valid as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#20.-Check-Authorization-Time-Window

5.10 Change the state of the payment Consent from Awaiting Authorization to Authorized when all Authorizers (one or more) have authorized the payment Consent.

5.11 Update the payment Consent details stored in the OFP with all the information included in the payment Consent authorized by the User.

OFP MUST:

5.12 Confirm back to the LFIs that the payment Consent details have been updated successfully.

5.13 Start tracking the Consent Control Parameters for the Control Period at the Control Period Start Date, if provided, or the Consent creation Date otherwise. The Control Period starts from 00:00:00 of the day and ends at 23:59:59 of the Control Period end day, calculated based on the Control Period type as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.3.2-VRP-Consent-Control-Period-%26-Start-Date.

5.14 Return back to the TPP in the payment Consent response the IBAN(s) of the Payee identification(s) returned by the Proxy resolution, if the payment Consent was submitted for User Authorization with one or more Payees using a Proxy as the Payee Identification.

Multi-Authorization Journey Only

5.14 15 As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#18.-Multi-User-Authorization-Flow

MPCS-6

Hand-off back to the TPP

6.1 As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#14.-Hand-off-back-to-the-TPP

MPCS-7

Confirmation to User

7.1 As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#16.-Confirmation-to-User

7.2 As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#19.-Payment-Details-Saving

...

MPPI

#

Step

Rules & Guidelines

MPPI-1

Payment Initiation

Scheduled Multi-Payments Only (Fixed Recurring Payment Consent, Variable Recurring Consent and Variable-defined Consent) Variable Beneficiaries Only

TPPs MUST:

1.1 Submit NOT submit to OFP any payment initiation requests on the scheduled dates defined in the Periodic or the Variable-defined Payment Schedule of the long-lived Payment Consent authorized by the Userin relation to an authorized Multi-payment Consent with Variable Beneficiaries if the User authorization conditions have not been met.

1.2 Schedule the execution time of the payments related to the Periodic or the Variable-defined Payment Schedule to occur during time periods of low payment volume such as the early hours of the day, unless there are specific requirements based on their business case.

TPPs MUST:

1.3 Submit to OFP payment initiation requests with the same fixed parameters as per the long-lived Payment Consent authorized by the User. In case where the consent was setup using the Payee’s proxy, the payment request MUST also include the IBAN from the proxy Payee identification returned back to the TPP during the payment Consent setup.

1.4 Submit to OFP payment initiation requests with variable parameters within the allowable limits of the Consent Controls as per the long-lived Payment Consent authorized by the User.

1.5 Include in each one of the payment initiation requests the same Payer Note as specified in the authorized long-lived Payment Consent, as the default value, if previously provided. However, this may be overwritten by a new Payer Note provided by the User or the TPP, if relevant, for each payment initiation request.

1.6 Include in each of the payment initiation requests a Payment Reference. This MUST be populated as follows:

  • 1.6.1 If the Payment Reference in the authorized long-lived Payment Consent was provided by the User, TPPs MUST use the same Payment Reference for every payment initiated under the long-lived Payment Consent.

  • 1.6.2 If the Payment Reference in the authorized long-lived Payment Consent was pre-populated by the TPP, TPPs can:

    • EITHER use the same Payment Reference for every payment initiated under the long-lived Payment Consent

    • OR pre-populate the Payment Reference with different information for every payment initiated under the long-lived Payment Consent based on the requirements of the TPPs or their servicing customers.

VRPs Only

TPPs MUST:

1.7 NOT submit any payment initiation requests of amount more than the maximum payment value per payment initiation, if specified in the long-lived Payment Consent for VRPs.

1.8 Keep track of the cumulative value of all payment initiations and NOT submit any VRP payment initiation requests that will result in exceeding the maximum limit, if specified in the long-lived Payment Consent for the VRPs.

1.9 Keep track of the maximum cumulative number of all payment initiation and NOT submit any VRP payment initiation requests that will result in exceeding the maximum limit, if specified in the long-lived Payment Consent for the VRPs.

1.10 Keep track of the cumulative payment value of all payment initiations per time window Present to Users for each payment initiation the following minimum required information:

1.3 Ensure that all required authorization conditions as agreed with the User during the Consent setup are met.

1.4 Generate a unique identifier for the transaction that links the Users’s authorization factors with the payment details (i.e. amount and payee identification). TPPs MUST generate an audit trail of the User’s payment initiation actions during the session. TPPs MUST have all required records as evidence required as listed in the liability model.

1.5 Provide Users the ability to abort the payment journey, if Users decided to terminate the request.

Scheduled Multi-Payments Only (Fixed Recurring Payment Consent, Variable Recurring Consent and Variable-defined Consent)

TPPs MUST:

1.6 Submit to OFP payment initiation requests on the scheduled dates defined in the Periodic or the Variable-defined Payment Schedule of the long-lived Payment Consent authorized by the User.

1.7 Schedule the execution time of the payments related to the Periodic or the Variable-defined Payment Schedule to occur during time periods of low payment volume such as the early hours of the day, unless there are specific requirements based on their business case.

TPPs MUST:

1.8 Submit to OFP payment initiation requests with the same fixed parameters as per the long-lived Payment Consent authorized by the User. In case where the consent was setup using the Payee’s proxy, the payment request MUST also include the IBAN from the proxy Payee identification returned back to the TPP during the payment Consent setup.

1.9 Submit to OFP payment initiation requests with variable parameters within the allowable limits of the Consent Controls as per the long-lived Payment Consent authorized by the User.

1.10 Include in each one of the payment initiation requests the same Payer Note as specified in the authorized long-lived Payment Consent, as the default value, if previously provided. However, this may be overwritten by a new Payer Note provided by the User or the TPP, if relevant, for each payment initiation request.

1.11 Include in each of the payment initiation requests a Payment Reference. This MUST be populated as follows:

  • 1.11.1 If the Payment Reference in the authorized long-lived Payment Consent was provided by the User, TPPs MUST use the same Payment Reference for every payment initiated under the long-lived Payment Consent.

  • 1.11.2 If the Payment Reference in the authorized long-lived Payment Consent was pre-populated by the TPP, TPPs can:

    • EITHER use the same Payment Reference for every payment initiated under the long-lived Payment Consent

    • OR pre-populate the Payment Reference with different information for every payment initiated under the long-lived Payment Consent based on the requirements of the TPPs or their servicing customers.

VRPs Only

TPPs MUST:

1.12 NOT submit any payment initiation requests of amount more than the maximum payment value per payment initiation, if specified in the long-lived Payment Consent for VRPs.

1.13 Keep track of the cumulative value of all payment initiations and NOT submit any VRP payment initiation requests that will result in exceeding the maximum limit, if specified in the long-lived Payment Consent for the VRPs.

1.11 14 Keep track of the maximum cumulative payment volume number of all payment initiations per time window initiation and NOT submit any VRP payment initiation requests that will result in exceeding the maximum limit, if specified in the long-lived Payment Consent for the VRPs.

MPPI-2

Processing of Payment Initiation Requests

OFP MUST:

2.1 Allow the TPPs to submit individual payment initiation requests under 1.15 Keep track of the cumulative payment value of all payment initiations per time window and NOT submit any VRP payment initiation requests that will result in exceeding the maximum limit, if specified in the long-lived Payment Consent authorized by the User, without any additional MFA or authorization from the User.2.2 Check that the received payment initiation requests relate to a valid for the VRPs.

1.16 Keep track of the cumulative payment volume of payment initiations per time window and NOT submit any VRP payment initiation requests that will result in exceeding the maximum limit, if specified in the long-lived Payment Consent authorized by the User. The Consent MUST be in the Authorized state. The OFP MUST reject any payment initiation messages related to a Payment Consent in a different state (e.g. expired) and respond back to the TPP with the appropriate error message/code.

2.3 Check the payment initiation request parameters against the authorized long-lived Payment Consent. More specifically, the OFP MUST check the following:

  • The Payee Identification details in the submitted payment initiation request matches exactly the Payee Identification in the authorized Payment Consent.

  • The date of the submitted payment initiation request is within:

    the validity period

    for the VRPs.

    Variable-defined Beneficiaries Only

    1.17 Include in each of the payment initiation requests one of the Payee Identification details included in the Pre-defined Beneficiary List, as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.5.1-Payee-Identification-for-Variable-defined-Beneficiaries

    Variable Beneficiaries Only

    1.18 Include in each of the payment initiation requests the Payee Identification details, which were not provided as part of the long-lived Payment Consent

    (i

    authorized.

    e. Consent Expiration Date & Time)
  • the period defined in the Periodic or Variable-defined Payment Schedule (for Fixed Recurring, Variable Recurring and Variable-defined Consent types). In this case, the dates of each payment initiation request MUST match exactly the dates in the Payment Schedule.

  • The amount in the submitted payment initiation request:

    • matches exactly the payment amount for consents of type Fixed Recurring and Fixed On-demand.

    • matches exactly the payment amount for the date of the payment initiation for consents of type Variable-defined.

    • is less or equal to the maximum payment value per payment initiation for consents of type Variable Recurring and Variable On-demand.

  • FRPs Only

    OFT MUST:

    2.4 Check the Fixed Recurring Payment initiation request parameters against the Fixed Recurring

    1.19 Include in each of the payment initiation requests the unique identifier for the transaction related to the User’s authorization of the payment details

    MPPI-2

    Processing of Payment Initiation Requests

    OFP MUST:

    2.1 Allow the TPPs to submit individual payment initiation requests under the long-lived Payment Consent authorized by the User, without any additional MFA or authorization from the User.

    2.2 Check that the received payment initiation requests relate to a valid long-lived Payment Consent authorized by the User. The Consent MUST be in the Authorized state. The OFP MUST reject any payment initiation messages related to a Payment Consent in a different state (e.g. expired) and respond back to the TPP with the appropriate error message/code.

    2.3 Check the payment initiation request parameters against the authorized long-lived Payment Consent. More specifically, the OFP MUST:

    Check the cumulative Total Number of payment initiations including the

    check the following:

    • The Payee Identification details in the submitted payment initiation request is less than the Total Number of Payments as defined matches exactly the Payee Identification in the authorized long-lived Fixed Recurring Payment Consent, except in the case of Variable Beneficiaries Consent.

      • 2.

    5 Increment the cumulative total number of payments after the payment has been successfully executed and received payment status confirmation from the payee Bank. The initial value of this parameter should be zero for each authorized Fixed Recurring Payment Consent.

    2.6 Set the Fixed Recurring Payment Consent state to a terminal state (Finished), if the cumulative total number of payments requests becomes equal to the Total Number of Payments parameter of the Fixed Recurring Payment Consent.

    VRPs Only

    OFP MUST:

    2.7 Check the payment initiation request parameters against the authorized long-lived VRP Payment Consent. More specifically, the OFP MUST check the following:

    • The cumulative Total Value of all payment initiations including the amount of the submitted payment initiation request is less or equal to the Maximum Cumulative Value of all payment initiations defined in the authorized long-lived Payment Consent (For Variable Recurring and Variable On-demand Consent types).

    • The cumulative Total Number of all payment initiations including the submitted payment initiation request is less or equal to the Maximum Cumulative Number of all payment initiations defined in the authorized long-lived Payment Consent (For Variable Recurring Consent and Variable On-demand Consent types).

    • The cumulative Total Value of all payment initiations per Consent Control Period including the amount of
      • 3.1 For Variable-defined Beneficiaris, the Payee Identification details in the submitted payment initiation request MUST match exactly one of the Payee Identification entries in the authorized Payment Consent Predefined Beneficiary List.

    • The date of the submitted payment initiation request is within:

      • the validity period of the long-lived Payment Consent (i.e. Consent Expiration Date & Time)

      • the period defined in the Periodic or Variable-defined Payment Schedule (for Fixed Recurring, Variable Recurring and Variable-defined Consent types). In this case, the dates of each payment initiation request MUST match exactly the dates in the Payment Schedule.

    • The amount in the submitted payment initiation request:

      • matches exactly the payment amount for consents of type Fixed Recurring and Fixed On-demand.

      • matches exactly the payment amount for the date of the payment initiation for consents of type Variable-defined.

      • is less or equal to the maximum payment value per payment initiation for consents of type Variable Recurring and Variable On-demand.

    FRPs Only

    OFT MUST:

    2.4 Check the Fixed Recurring Payment initiation request parameters against the Fixed Recurring Payment Consent. More specifically, the OFP MUST:

    • Check the cumulative Total Number of payment initiations including the submitted payment initiation request is less or equal to the Maximum Cumulative Value of all payment initiations within the Consent Control Period than the Total Number of Payments as defined in the authorized long-lived Payment Consent (For Variable Recurring Consent and Variable On-demand Consent types).The cumulative Total Number of all payment initiations per Consent Control Period including the submitted payment initiation request is less or equal to the Maximum Cumulative Number all payment initiations within the Consent Control Period as defined in Fixed Recurring Payment Consent.

    2.5 Increment the cumulative total number of payments after the payment has been successfully executed and received payment status confirmation from the payee Bank. The initial value of this parameter should be zero for each authorized Fixed Recurring Payment Consent.

    2.6 Set the Fixed Recurring Payment Consent state to a terminal state (Finished), if the cumulative total number of payments requests becomes equal to the Total Number of Payments parameter of the Fixed Recurring Payment Consent.

    VRPs Only

    OFP MUST:

    2.7 Check the payment initiation request parameters against the authorized long-lived

    Payment Consent (

    VRP Payment Consent. More specifically, the OFP MUST check the following:

    • The cumulative Total Value of all payment initiations including the amount of the submitted payment initiation request is less or equal to the Maximum Cumulative Value of all payment initiations defined in the authorized long-lived Payment Consent (For Variable Recurring Consent and Variable On-demand Consent types).

    2.8 Check that the date of the payment initiation and the payment amount match exactly the Variable-defined Payment Schedule of the authorized Consent for the Variable-defined Payments.

    2.9 Increment the cumulative Total Number and the cumulative Total Value of payments under the VRP Consent after the payment successfully executed and received payment status confirmation from the payee Bank. The initial value of these parameters should be zero for each authorized VRP Consent.

    2.10 Increment the cumulative Total Number and the cumulative Total Value of all payment initiations per Control Period after the payment successfully executed and received payment status confirmation from the payee Bank. These parameters are reset to zero when a new Consent Control Period starts at 00:00:00 of the first day of the Control Period.

    2.11 Set the long-lived Payment Consent state to a terminal state (Finished), if the cumulative total number of payment requests becomes equal to the Total Number of Payments parameter of the VRP Consent.

    OFP MUST:

    2.12 Allow the description of the Payment Reference in the submitted payment initiation request to be different than the one defined in the Payment Reference of the long-lived Payment Consent.

    2.13 Reject the payment initiation and provide the necessary error message to the TPP if any other checks of the payment initiation request parameters fails against Consent parameters of the authorized long-lived Payment Consent.

    2.14 Send a payment initiation request to the LFI for initiating an instant payment using the payment parameters included in the payment initiation request including:

    • User Payment Account (or account identifier)

    • Payment Amount & Currency

    • Payee Identification details

    • Payer Note (If provided)

    • Payment Reference

    LFIs MUST:

    2.6. Allow the OFP to submit the payment initiation request without any additional MFA or authorization from the User.

    2.7 Additionally apply all existing BAU payment account controls and limits such as single transaction value limit, total transaction value limit, AML checking (if applicable) and others, as if the payment request has been initiated by the existing channels of the LFI. LFIs MUST send an appropriate error response to the OFP in case the payment is rejected due to violating any of these limits or checks.

    2.8 Reject the payment initiation if the payment account selected for the payment has insufficient funds. The OFP MUST be notified about this rejection with an appropriate error message.

    2.9 Subject to successful BAU checking, validation and payment processing, proceed with the execution of the payment by either submitting the payment to the underlying payment rails or executing internally as Intra-bank payment.

    2.10 Provide the OFP with all the available information in relation to the initiated payment instruction including the payment’s unique identifier Payment Transaction ID. The format of the Payment Transaction ID can be found in the UAE Open Finance Standard specifications.

    OFP MUST:

    2.11 Send an appropriate error response to the TPPs in case the payment is rejected due to violating any of the LFIs BAU payment accounts checks or limits.

    2.12 Send to the TPP the appropriate error message in case the payment payment initiation was rejected by the LFI due to insufficient funds in the selected payment account.

    2.13 Provide the TPP with all the available information in relation to the initiated payment instruction including the payment’s unique identifier Payment Transaction ID.

    • The cumulative Total Number of all payment initiations including the submitted payment initiation request is less or equal to the Maximum Cumulative Number of all payment initiations defined in the authorized long-lived Payment Consent (For Variable Recurring Consent and Variable On-demand Consent types).

    • The cumulative Total Value of all payment initiations per Consent Control Period including the amount of the submitted payment initiation request is less or equal to the Maximum Cumulative Value of all payment initiations within the Consent Control Period as defined in the authorized long-lived Payment Consent (For Variable Recurring Consent and Variable On-demand Consent types).

    • The cumulative Total Number of all payment initiations per Consent Control Period including the submitted payment initiation request is less or equal to the Maximum Cumulative Number all payment initiations within the Consent Control Period as defined in the authorized long-lived Payment Consent (For Variable Recurring Consent and Variable On-demand Consent types).

    2.8 Check that the date of the payment initiation and the payment amount match exactly the Variable-defined Payment Schedule of the authorized Consent for the Variable-defined Payments.

    2.9 Increment the cumulative Total Number and the cumulative Total Value of payments under the VRP Consent after the payment successfully executed and received payment status confirmation from the payee Bank. The initial value of these parameters should be zero for each authorized VRP Consent.

    2.10 Increment the cumulative Total Number and the cumulative Total Value of all payment initiations per Control Period after the payment successfully executed and received payment status confirmation from the payee Bank. These parameters are reset to zero when a new Consent Control Period starts at 00:00:00 of the first day of the Control Period.

    2.11 Set the long-lived Payment Consent state to a terminal state (Finished), if the cumulative total number of payment requests becomes equal to the Total Number of Payments parameter of the VRP Consent.

    Variable Beneficiaries Only

    2.12 Check that the payment initiation request contains valid payee identification details and that there is a unique identifier related to the Users’s authorization of the payment details.

    OFP MUST:

    2.13 Allow the description of the Payment Reference in the submitted payment initiation request to be different than the one defined in the Payment Reference of the long-lived Payment Consent.

    2.14 Reject the payment initiation and provide the necessary error message to the TPP if any other checks of the payment initiation request parameters fails against Consent parameters of the authorized long-lived Payment Consent.

    2.15 Send a payment initiation request to the LFI for initiating an instant payment using the payment parameters included in the payment initiation request including:

    • User Payment Account (or account identifier)

    • Payment Amount & Currency

    • Payee Identification details

    • Payer Note (If provided)

    • Payment Reference

    LFIs MUST:

    2.16. Allow the OFP to submit the payment initiation request without any additional MFA or authorization from the User.

    2.17 Add to the payment initiation request the IBAN of the Payee returned by the Proxy resolution process, if the payment initiation request was submitted using a Proxy as the Payee Identification. The payment initiation request is thereafter tied to the IBAN of the Payee rather than the proxy itself.

    • 2.17.1 Include in the payment initiation response to the OFP the IBAN of the Payee identification returned by the Proxy resolution.

    2.18 Additionally apply all existing BAU payment account controls and limits such as single transaction value limit, total transaction value limit, AML checking (if applicable) and others, as if the payment request has been initiated by the existing channels of the LFI. LFIs MUST send an appropriate error response to the OFP in case the payment is rejected due to violating any of these limits or checks.

    2.19 Reject the payment initiation if the payment account selected for the payment has insufficient funds. The OFP MUST be notified about this rejection with an appropriate error message.

    2.20 Subject to successful BAU checking, validation and payment processing, proceed with the execution of the payment by either submitting the payment to the underlying payment rails or executing internally as Intra-bank payment.

    2.21 Provide the OFP with all the available information in relation to the initiated payment instruction including the payment’s unique identifier Payment Transaction ID. The format of the Payment Transaction ID can be found in the UAE Open Finance Standard specifications.

    OFP MUST:

    2.22 Send an appropriate error response to the TPPs in case the payment is rejected due to violating any of the LFIs BAU payment accounts checks or limits.

    2.23 Send to the TPP the appropriate error message in case the payment payment initiation was rejected by the LFI due to insufficient funds in the selected payment account.

    2.24 Provide the TPP with all the available information in relation to the initiated payment instruction including the payment’s unique identifier Payment Transaction ID.

    MPPI-3

    Payment Status Update

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#15.-Payment-Status-Update

    MPPI-4

    Payment Notifications

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528830/Common+Rules+and+Guidelines#17.-Payment-Notifications

    ...

    #

    Step

    Rules

    MPCU-1

    Consent Update

    TPPs MUST:

    1.1 Enable Users to use the Consent Dashboard to amend the following parameters of a long-lived Payment consent:

    1.2 Require the Users to authenticate with their LFI and authorize the Consent update

    1.2 Require the Users to authenticate with their LFI and authorize the Consent update.

    Info

    Note: The parameters of the long-lived Mulit-Payments Consent that Users are able to update depend on the use case and the business requirements of each TPP. There may be scenarios where the TPPs are fine to allow users to update one or more of the Consent parameters and other scenarios where Users are not allowed to make any changes to the Consent Paramets. In any case, Users are always able to revoke their Consent.

    6. Multi-Payments Common Rules & Guidelines

    ...

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    6.1.1 Allow Users to manually enter the Consent Reference or pre-populate it for the Users (depending on the Use Case). Consent Reference is mandatory due to being the default value to be used for the Payment Reference of the Payment Initiation Requests. The Consent Reference is populated either by the User (i.e. payer) or the TPP using information requested by the beneficiary or any other information that can be provided to the beneficiary to assist in identifying and reconciling any payments initiated using this consent. This information may be mapped to the Payment Reference of each Payment Initiation Request and thus may be transferred via the payment rails to the beneficiary LFI. However, the TPP might not be using this and may be populating the Payment Reference of each of the initiated payment Requests with different information.

    6.1.2 Validate that the format of the Consent Reference is according to the https://openfinanceuae.atlassian.net/wiki/spaces/StandardsDraft01/pages/39159731 Bank Service Initiation API - Swagger Documentation.

    6.2 Period & Payment Schedule

    ...

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    6.2.3.1 Either allow Users to specify the below set of parameters or pre-populate them for the Users based on the specific use-case or the requirements of their receiving beneficiary customer:

    • Predefined Payment Schedule: This is a list of pre-defined pairs of dates and payment amounts. TPPs MUST use this schedule and for each pair of (date, amount) a payment of the associated amount will be initiated on the specific date. For example:

      For a Predefined Payment Schedule of { (1st Jan-24, AED 10), (15th Apr-24, AED 50), (25 Sep-24, AED 1000), } the following payments will be initiated by the TPP:

    • Payment of 10 AED on the 1st Jan-24

    • Payment of 50 AED on the 15th Apr-24

    • Payment of 1000 AED on the 25th Sep-24

      of (date, amount) a payment of the associated amount will be initiated on the specific date. For example:

      • For a Predefined Payment Schedule of { (1st Jan-24, AED 10), (15th Apr-24, AED 50), (25 Sep-24, AED 1000), } the following payments will be initiated by the TPP:

        • Payment of 10 AED on the 1st Jan-24

        • Payment of 50 AED on the 15th Apr-24

        • Payment of 1000 AED on the 25th Sep-24

    6.2.3.2 Limit the entries in the Variable-defined Payment Schedule to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Variable-defined-Schedule-Entries.

    6.2.3.3 Limit each date in the Variable-defined Payment Schedule to be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Consent-Validity-Period.

    6.2.3.2 4 Limit the entries each payment in the Variable-defined Payment Schedule to be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Variable-defined-Schedule-Entries.

    6.2.3.3 Limit each date in the Variable-defined Payment Schedule to be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Consent-Validity-Period.

    6.2.3.4 Limit each payment in the Variable-defined Payment Schedule to be less or equal to -Variable-defined-Payment-Amount.

    6.2.3.5 Allow entries in the Variable-defined Payment Schedule to have the same date and payment amount.

    6.3 VRP Consent Control Parameters

    Consent Control Parameters for Variable Recurring Payments (VRPs) are a set of constraints included within the VRP Consent that restrict the way in which it can be used to make variable payments. The restrictions are enforced both by the TPP and the OFP.

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

     6.3.1 Either allow Users to specify the below set of parameters or pre-populate them for the Users based on the specific use-case or the requirements of their receiving beneficiary customer:

    Variable-defined-Payment-Amount.

    6.2.3.5 Allow entries in the Variable-defined Payment Schedule to have the same date and payment amount.

    6.3 VRP Consent Control Parameters

    Consent Control Parameters for Variable Recurring Payments (VRPs) are a set of constraints included within the VRP Consent that restrict the way in which it can be used to make variable payments. The restrictions are enforced both by the TPP and the OFP.

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

     6.3.1 Either allow Users to specify the below set of parameters or pre-populate them for the Users based on the specific use-case or the requirements of their receiving beneficiary customer:

    • The Maximum Payment Amount per payment initiation: This is required if the payment amount is variable instead of fixed. This is related to VRPs that use the Long-lived Consent of the type Variable Recurring Consent and Variable On-demand Consent. This is the maximum amount a variable payment related to the Consent can take. All payment amounts must be smaller or equal to this value. This is limited to <TBC>.VRP-Payment-Amount.

    • The Maximum Cumulative Value of all payment initiations for the entire Consent validity period. This is related to all types of VRP payments. Every payment amount related to the Consent that is successfully initiated and executed is added to the Total Cumulative Value of the Consent which cannot exceed the Maximum Cumulative Value agreed with the User at the point of consent. Any payment amount resulting to a Total Cumulative Value exceeding the Maximum MUST be rejected by the TPP and the LFI. This is limited to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-VRP-Consent-Cumulative-Value.

    • The Maximum Cumulative Number of all payment initiations for the entire Consent validity period. This is related to all types of VRP payments. Every payment initiation related to the Consent that is successfully initiated and executed is added to the Total Cumulative Number of payment initiations of the Consent which cannot exceed the Maximum Cumulative Number agreed with the User at the point of consent. Any payment initiation resulting to the Total Cumulative Number of initiations exceeding the Maximum MUST be rejected by the TPP and the LFI. This is limited to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-VRP-Consent-Cumulative-Payments.

    • The Consent Control Period Type & Start Date (as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.3.2-VRP-Consent-Control-Period-%26-Start-Date)

    • The Maximum Cumulative Value of all payment initiations for the entire Consent validity periodper Consent Control Period. This is related to all types of VRP payments. Every payment amount related to the Consent that is successfully initiated and executed is added to VRPs that use the Long-lived consent of the type Variable On-demand Consent and Fixed On-demand Consent. During each repeating Consent Control Period, the Total Cumulative Value of the Consent which cannot all payment initiations under Variable On-demand Consent and Fixed On-demand Consent MUST NOT exceed the Maximum Cumulative Value agreed with by the User at during the point of consent. Any payment amount resulting to a Total Cumulative Value exceeding the Maximum MUST be rejected by the TPP and the LFIConsent. The Total Cumulative Value is reset on every new Consent Control Period. This is limited to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-VRP-Consent-Cumulative-Value-per-Control-Period.

    • The Maximum Cumulative Number of all payment initiations for the entire Consent validity periodper Consent Control Period. This is related to all types of VRP payments. Every payment initiation related to the Consent that is successfully initiated and executed is added to VRPs that use the Long-lived consent of the type Variable On-demand Consent and Fixed On-demand Consent. During each repeating Consent Control Period, the Total Cumulative Number of all payment initiations of the Consent which cannot under Variable On-demand Consent and Fixed On-demand Consent MUST NOT exceed the Maximum Cumulative Number agreed with by the User at during the point of consent. Any payment initiation resulting to the Consent. The Total Cumulative Number of initiations exceeding the Maximum MUST be rejected by the TPP and the LFIpayment initiations is reset on every new Consent Control Period. This is limited to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-VRP-Consent-Cumulative-Payments-per-Control-Period.The Consent Control Period Type & Start Date (

    6.3.2 VRP Consent Control Period & Start Date

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    6.3.2.1 Either allow Users to manually enter/specify the below parameters or pre-populate them for Users based on the specific use-case or the requirements of their receiving beneficiary customer:

    • Control Period: This is a rolling Period as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.32.2-VRP-Consent-Control-Period-%26-Start-Date)The Maximum Cumulative Value of all payment initiations per Consent Control Period. This is related to VRPs that use the Long-lived consent of the type Variable On-demand Consent and Fixed On-demand Consent. During each repeating Consent Control Period, the Total Cumulative Value of all payment initiations under Variable On-demand Consent and Fixed On-demand Consent MUST NOT exceed the Maximum Cumulative Value agreed by the User during the Consent. The Total Cumulative Value is reset on every new Consent Control Period. This is limited to Period-Type-%26-Start-Date. During each rolling Period specific Consent Control limits are applied. The rolling Control Period may occur one or more times during the Long-lived Consent duration depending on the Period Type and the Control Period Start Date. For example, for a Consent of expiry after 30 days, a Consent Control Period of 1 Day may be repeating up to 30 times, depending on the Period Start Date. Similarly, for a Consent of expiry after 1 year a Control Period of 1 Week may be repeating up to 52 times depending on the Period Start Date.

    • Control Period Start Date: This is the first date of the rolling Control Period, as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-VRP-Cumulative-Value-per-Control-Period.The Maximum Cumulative Number of all payment initiations per Consent Control Period. This is related to VRPs that use the Long-lived consent of the type Variable On-demand Consent and Fixed On-demand Consent. During each repeating Consent Control Period, the Total Cumulative Number of all payment initiations under Variable On-demand Consent and Fixed On-demand Consent MUST NOT exceed the Maximum Cumulative Number agreed by the User during the Consent. The Total Cumulative Number of payment initiations is reset on every new Consent Control Period. This is limited to 52528328/Multi-Payments#6.2.2-Period-Type-%26-Start-Date. The Control Period Start Date is optional and if not set by TPPs, the OFP MUST align the starting point of the Control Period to the Consent creation Date. The Control Period Start Date, if specified, MUST take values of dates in the future. This capability allows Users to select a day in the future when they want to start initiating Fixed or Variable On-Demand payments instead of from the consent creation date. This date MUST less than https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-VRP-Cumulative-Payments-per-Control-Period.

    ...

    6.4 Consent Expiration Date & Time

    6.4.1 Consent Expiration for FRPs (Fixed Recurring Consent)

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    6.34.21.1 Either allow Users to manually enter/specify the below parameters or pre-populate them for Users based on the specific use-case or the requirements of their receiving beneficiary customer:

    Control Period: This is a rolling Period

    Set the Payment Consent Expiration Date & Time to the end of day (23:59:59) of the date of the last payment of the Periodic Payments Schedule as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.2.

    2-Period-Type-%26-Start-Date. During each rolling Period specific Consent Control limits are applied. The rolling Control Period may occur one or more times during the Long-lived Consent duration depending on the Period Type and the Control Period Start Date. For example, for a Consent of expiry after 30 days, a Consent Control Period of 1 Day may be repeating up to 30 times, depending on the Period Start Date. Similarly, for a Consent of expiry after 1 year a Control Period of 1 Week may be repeating up to 52 times depending on the Period Start Date.Control Period Start Date: This is the first date of the rolling Control Period, as defined in

    1-Periodic-Payment-Schedule. This will allow the TPP to have a valid consent to be used for retries when looking for recovery from certain erroneous scenarios. The consent validity period MUST be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/

    52528328/Multi-Payments#6.2.2-Period-Type-%26-Start-Date. The Control Period Start Date is optional and if not set by TPPs, the OFP MUST align the starting point of the Control Period to the Consent creation Date. The Control Period Start Date, if specified, MUST take values of dates in the future. This capability allows Users to select a day in the future when they want to start initiating Fixed or Variable On-Demand payments instead of from the consent creation date. This date MUST less than

    52528887/Limits+and+Constants#Max-Consent-Validity-Period.

    6.4.2 Consent Expiration for Periodic Scheduled VRPs (Variable Recurring Consent)

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    5.4.2.1 Set the Payment Consent Expiration Date & Time to the end of day (23:59:59) of the date of the last payment of the Periodic Payments Schedule as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.

    4

    2.

    3

    1-

    Consent

    Periodic-

    Expiration-for-Unscheduled-VRPs-(Fixed-and-Variable-On-demand-Consent)

    Payment-Schedule. This will allow the TPP to have a valid consent to be used for retries when looking for recovery from certain erroneous scenarios. The consent validity period MUST be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Consent-Validity-Period.

    6.4

    ...

    .3 Consent Expiration for

    ...

    Unscheduled VRPs (Fixed and Variable On-demand Consent)

    TTPs MUST:

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF
    #DEEBFF

    TTPs MUST:

    6.4.3.1 Either allow Users to manually enter/select the period of the Fixed On-demand Consent/Variable On-demand Consent during which the payments can be executed OR pre-populate it for the Users based on the specific business case and the receiving beneficiary party.

    6.4.3.2 NOT specify the time of the day for payments to be initiated using the On-demand consents. These payments can take place at any point in time during the consent period subject to the Consent Control Parameters.

    6.4.13.1 3 Set the Payment Consent Expiration Date & Time to the end of day (23:59:59) of the date of the last payment day of the Periodic Payments Schedule as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.2.1-Periodic-Payment-Scheduleconsent period as set per 5.4.3.1. This will allow the TPP to have a valid consent Consent to be used for retries when looking for recovery from certain erroneous scenarios. The consent validity period MUST be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Consent-Validity-Period.

    6.4.

    ...

    4 Consent Expiration for

    ...

    Variable-defined Consent

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    56.4.24.1 Set the Payment Consent Expiration Date & Time to the end of day (23:59:59) of the date of the last payment of the Periodic Variable-defined Payments Schedule as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.2.1-Periodic-Payment3-Variable-defined-Payments-%26-Schedule. This will allow the TPP to have a valid consent Consent to be used for retries when looking for recovery from certain erroneous scenarios. The consent validity period MUST be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Consent-Validity-Period.-Consent-Validity-Period.

    6.5 Payee Identification for Variable Beneficiary Consent

    6.

    ...

    5.1 Payee Identification for Variable-defined Beneficiaries

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    6.45.31.1 Either allow Users to manually enter/select the period of the Fixed On-demand Consent/Variable On-demand Consent during which the payments can be executed OR pre-populate it specify the below set of parameters or pre-populate them for the Users based on the specific business case and the receiving beneficiary party.

    6.4.3.2 NOT specify the time of the day for payments to be initiated using the On-demand consents. These payments can take place at any point in time during the consent period subject to the Consent Control Parameters.

    6.4.3.3 Set the Payment Consent Expiration Date & Time to the end of day (23:59:59) of the last day of the consent period as set per 5.4.3.1. This will allow the TPP to have a valid Consent to be used for retries when looking for recovery from certain erroneous scenarios. The consent validity period MUST be less or equal use-case or the requirements of their receiving beneficiary customers:

    6.5.1.2 Limit the entries in the Predefined Beneficiary List to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Predefined-ConsentBeneficiary-ValidityList-PeriodEntries.

    6.

    ...

    5.2 Payee Identification for Variable

    ...

    Beneficiaries

    Panel
    panelIconId068fdde3-c1f6-4759-9967-8a80e7ba7356
    panelIcon:rock:
    panelIconText:rock:
    bgColor#DEEBFF

    TTPs MUST:

    6.45.42.1 Set the Payment Consent Expiration Date & Time to the end of day (23:59:59) of the date of the last payment of the Variable-defined Payments Schedule as defined in https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528328/Multi-Payments#6.2.3-Variable-defined-Payments-%26-Schedule. This will allow the TPP to have a valid Consent to be used for retries when looking for recovery from certain erroneous scenarios. The consent validity period MUST be less or equal to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft2/pages/52528887/Limits+and+Constants#Max-Consent-Validity-Period.

    7. Multi-Payments to Multiple Beneficiaries

    ...

    Provide a message to Users clearly stating that:

    • The payee will not be specified as part of the Consent and instead will be defined during the payment initiation.

    • The payee will be confirmed when specified before actual payment takes place

    • The User MUST agrees that one or more “factors” (i.e. conditions) stated in the Consent will be used by the TPP as their explicit authorization for each payment initiation.