SCA for funds transfers

Learn how to use our Authentication SDK to authenticate your users when they make transfers.

Each time a user in the European Economic Area (EEA) wants to transfer funds, you must authenticate them using SCA. To do so:

Initiate authentication.
Initiate the transfer using the sdkOutput that you got when you checked the device eligibility.
Authenticate your user with the Authentication SDK.
Finalize the transfer using the sdkOutput from the authentication step.

Requirements

Make sure that you have installed the Authentication SDK.
Make sure that you have registered a device for your user.
Make sure that your API credential has the following role:
- TransferService Webservice Initiate role

Initiate authentication

Before initiating a transfer, you must initiate the process to authenticate your users.

The following tabs explain how to initiate authentication using Kotlin or Swift.

You will use the sdkOutput when initiating the transfer.

Initiate transfer

The steps to initiate a transfer depend on whether you want to:

Authenticate the user when initiating a transfer request.
Authenticate the reviewer when approving a transfer request.

Because a reviewer can approve multiple transfers at the same time, performing SCA during approval allows you to satisfy the authentication requirements for multiple transfers with a single SCA process.

The following tabs explain both methods for initiating a transfer that requires SCA.

Authenticate user

When authenticating your user, PSD2 requires you to show to your user the amount and the counterparty (payee) of the transfer that the user is authenticating for. To comply with these regulations, we recommend that you implement a push notification and use the amount and counterparty fields from:

The response to the POST /transfers request you used to create the transfer.
The response to a GET /transfers/{id} request.

To authenticate your user with the Authentication SDK:

Trigger the SDK to start user authentication and pass the auth-param1 value from the previous step as sdkInput.
Pass sdkOutput to your server.

Finalize transfer

The steps to initiate a transfer depend on whether you:

Authenticated the user when initiating a transfer request.
Authenticated the reviewer when approving a transfer request.

The following tabs explain both methods for finalizing a transfer after completing SCA.