Improvement of Aion API

Dear Partners,

We are pleased to inform you that today we launched a number of new features and improvements to our PSD2 API’s. We like to highlight some of them:

  1. Maximum AIS consent duration time is equal to 180 days instead of 90 days.
  • There are 3 types of AIS consent supported:
  • Detailed Consent - The Consent Management is handled between TPP and PSU. The TPP is then submitting the detailed consent information – PSU identification, services and account numbers affected – to Aion Bank for authorisation by the PSU. Aion Bank is displaying the consent details to the PSU when performing the SCA.
  • Global Consent - The Consent Management is handled between TPP and PSU. The TPP is submitting then a global consent information, which is only the PSU identification, to Aion Bank for authorisation by the PSU. Aion Bank is displaying only the general access to the PSU’s account to the PSU when performing the SCA.
  • Bank Offered Consent - The TPP is asking Aion Bank to deal with the Consent Management. Aion Bank might ask the PSU for an IBAN based detailed consent modelling. This is authorised by the PSU with an SCA. The detailed consent information can be retrieved by the TPP in the following step by reading the corresponding consent object.

The Bank Offered Consent function is supported by the same call as the Consent Request on Dedicated Accounts. The only difference is that the call contains the "accounts", "balances" and/or "transactions" sub attributes within the "access" attribute all with an empty array. Aion Bank will then agree bilaterally directly with the PSU on which accounts the requested access consent should be supported. The result can be retrieved by the TPP by using the GET Consent Request method.

Bank Offered Consent request body example:

{

"access": {},

"combinedServiceIndicator": false,

"frequencyPerDay": 4,

"recurringIndicator": true,

"validUntil": "2029-12-12"

}

There are two changes for payment initiation requests.

The condition on the debtor account for payments is set to optional. This applies to single payments as well as to related recurring payments. The detailed consent information can be retrieved by the TPP in the following step by reading the corresponding consent object.

New header TPP-Rejection-NoFunds-Preferred is available. If it equals "true" then the TPP prefers a rejection of the payment initiation if not sufficient funds are available.

New endpoint get payment information is available. It responds with a debtorName field even if it wasn’t provided by TPP.

Do note that some of these changes will only be available to PSU’s who are using our mobile application once they have updated to the latest version. It can take up to a couple of weeks before the latest version has been made available to everyone.