Home
User Guides
Developer Onboarding
Developer App Management
Account Information Service (AIS) flow
MTLS - Certificate Addition
Letter Of Guarantee flow
PIS - Payments flow
PIS - Refunds flow
PIS - Request To Pay flow
Core Bank - Reference Bank to simulate Core Banking
Consent Module
Admin Module for Bank administrator users
FAPI Conformance Test Suite
Testing Guides
Standards
Certifications
FAQs
APP Management
Developers can create multiple Apps that subscribe to API products. These Apps are used to call the APIs of respective products.
API Products & Apps
According to KSA Open Banking specifications, bank provides three API products:
- KSA AIS
- KSA PIS
- KSA LOG
Developers are allowed only to call respective API products.
Open Banking Security Profile requirements include a signed JWT Request during the consent flow.
- The PSU consent flow starts with a redirect to the url which contains this Request object holding information about consentId (for accounts/letter of guarentee/payments access)
- This JWT is signed with the application private key so that it can verify the application that is attempting to get the PSU grant on providing user data.
- Verification is done by comparing the signature with the public key, which is the JWKs/cert provided when the application gets created.
As an example to create the app, the below cert can be used:
Client Signing Certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----Client Encryption Certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----To create an app with JWKS, use this JWKS URL
For the API calls please use the private key matching this cert (check AIS / PIS / LOG flows documentation).
