Each time a user in the European Economic Area (EEA) wants to transfer funds, you must authenticate them using SCA. To do so:<\/p>\n
sdkOutput<\/code> that you got when you checked the device for SCA eligibility.<\/li>\n- Authenticate your user<\/a> with the Authentication SDK.<\/li>\n
- Finalize the transfer<\/a> using the
sdkOutput<\/code> from the authentication step.<\/li>\n<\/ol>\nRequirements<\/h2>\n\n- Make sure that you have installed the Authentication SDK<\/a>.
\nMake sure that you have registered a device<\/a> for your user.<\/li>\n- Make sure that your API credential<\/a> has the following role:\n
\n- TransferService Webservice Initiate role<\/strong><\/li>\n<\/ul><\/li>\n<\/ul>\n
Check SCA eligibility<\/h2>\n
Before initiating a transfer, you must check for SCA eligibility and initiate the process to authenticate your users.<\/p>\n
The following tabs explain how to check for SCA eligibility and initiate authentication using Kotlin, Swift, or JavaScript.<\/p>\n\n
\n \n \n <\/tabs>\n <\/div>\n<\/div>\n\nYou will use the sdkOutput<\/code> when initiating the transfer<\/a>.<\/p>\nInitiate transfer<\/h2>\n
The steps to initiate a transfer depend on whether you want to:<\/p>\n
\n- Authenticate the user when initiating a transfer request.<\/li>\n
- Authenticate the reviewer when approving a transfer request.<\/li>\n<\/ul>\n
Because a reviewer can approve multiple transfers at the same time, performing SCA during approval allows you to satisfy the authentication requirements for multiple transfers with a single SCA process.<\/p>\n
The following tabs explain both methods for initiating a transfer that requires SCA.<\/p>\n\n
\n \n \n <\/tabs>\n <\/div>\n<\/div>\n\nAuthenticate user<\/h2>\n
After initiating a transfer<\/a> request, you have 10 minutes to complete the authentication process and finalize the transfer request<\/a>.<\/p>\nWhen authenticating your user, PSD2 requires you to show to your user the amount and the counterparty (payee) of the transfer that the user is authenticating for. To comply with these regulations, we recommend that you implement a push notification and use the amount<\/code> and counterparty<\/code> fields from:<\/p>\n