PSD2-XS2A

PSD2-XS2A API

Find here information on our XS2A API:

API-STOREDescription of OAUTH2Version history

PSD2-XS2A Sandbox

Find here information on our XS2A Sandbox:

API-STORE Documentation of the Sandbox Description of OAUTH2Version history 

PSD2-XS2A Fallback

An adapted version (regarding the roles of the TPP) of the online banking serves as XS2A fallback:

• AISP are shown account information, balances and transactions of the payment transaction accounts
• PISP are allowed to perform payments for payment transaction accounts
• Service providers that are AISP/PISP at the same time will be able to see account information (balances, transactions) and perform payments

The following points must also be observed:

• Link: https://api.sparda.de:8443/wps/sparda-modern-banking.jsp?blz=XXXXXXXX (XXXXXXXX must be replaced by the bank sort code of the respective Sparda Bank)
• As TPP you have to call this address with your eIDAS certificate – otherwise you will be rejected. The access permissions are distributed on the basis of the certificate.
• In addition to entering the customer credentials, a strong customer authentication is required for the first login and at the latest every 90 days, which can only be performed in the presence of the customer.

FinTS

The FinTS interface is still be available. Please note, that it has been adapted to PSD2. In the future, it will therefore be necessary to perform a SCA as soon as the customer has payment transaction accounts (this must be repeated every 90 days at the latest).

To call the FinTS interface, we simply ask you to supply the FinTS product registration number (DK number). Certificates are currently not supported. A blockade by IPs is not planned for the time being.

TAN procedures

The following TAN procedures are technically possible via the offered interfaces (depending on the bank, further restrictions may apply):