To use Adyen's business accounts in the European Economic Area (EEA), your business must comply with the Payment Services Directive 2 (PSD2). This directive regulates secure payments and account access to reduce fraud.
For some procedures involving business accounts, PSD2 requires you to verify the identity of your user. Some examples of such procedures are:
- Making funds transfers to third-party bank accounts.
- Consulting the transaction history of a business account.
- Creating transfer limits.
PSD2 requires you to use Strong Customer Authentication (SCA). This means that, during authentication, the user is required to provide two out of three factors:
- Knowledge: something that only the user knows, such as a password.
- Possession: something that only the user possesses, such as a personal mobile or web-enabled device.
- Inherence: something that is unique to the user, such as biological and behavioral biometrics.
To help you comply with PSD2, we provide a client-side Authentication SDK that combines the possession factor with either the knowledge or the inherence factor. The SDK helps you configure a two-factor authentication feature that requires a secondary verification method through a separate communication channel, such as a native mobile phone app or a web-enabled device.
How to use the Authentication SDK
To use Adyen's Authentication SDK:
- Install the Authentication SDK and add it to your iOS and Android project, or web application.
- Use the Authentication SDK to register your user's native mobile, or other web-enabled device for SCA.
- Use the Authentication SDK to authenticate your users each time they want to:
- Transfer funds to or from their business account.
- Check their transaction history.