Section A : Using private-key-jwt profile

• Open the openID test suite: https://www.certification.openid.net and login with your google account.

1. Create a new test plan by clicking on create a new test plan button on below screen:

2. Select below mentioned option on the test plan screen for private-key-jwt profile:

3. Under configuration tab select the json configuration and provide below config. banfico-private-key-jwt-fapi-config.json

4. Click on create test plan button and below screen will open:

5. User can then run all the test cases one by one.

6. For most of the Test cases, the test status will be moved to

   Waiting
   . At that time, Click the
   Proceed to test
   button.

7. Page will be redirected to Consent portal login page. Enter the Bank user credentials and login. Select the Account and Click Confirm.

8. For the

   fapi1-advanced-final-user-rejects-authentication
   test scenario,
   deny
   button must be clicked on the Consent approval screen.

9. For some of the Negative Test scenarios, the page will be redirected to an error page (Invalid parameter: redirect_uri), on clicking the

   Proceed to test
   button. For such negative scenarios, just take a screenshot of the Error page that is displayed and upload it in the corresponding Test case. Select the Image, upload it and Click
   Return to test
   plan button. Once the Image is uploaded, the Test must be Finished with a
   Review
   Status.

Section B: Using mtls-auth profile

• Open the openID test suite: https://www.certification.openid.net and login with your google account.

1. Create a new test plan by clicking on
   Create a new test plan
   button on the below screen:

2. Select the below mentioned option on the test plan screen for
   mtls-auth
   profile:

3. Under the configuration tab, select the json configuration and provide the below config.
   banfico-MTLS-fapi-config.json . Click on
   create test plan
   button and the below screen will open:

4. User can then run all the test cases one by one.