Compliance features (1.0)

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude

This endpoint updates the status of a psd2_challenge_id. After a customer enters their credentials on your login screen, use this endpoint to update the status of the psd2_challenge_id and include the person_id in the payload.
If successful, the API returns a redirect_URL for the second-factor authentication (done by Solaris). You have to redirect the customer to this URL to perform the 2FA.
Expected error messages:

1. 401 - Unauthorized: The ChallengeID is expired.
2. 404 - Not found: The ChallengeID doesn't exist.
3. 400 - General Bad Request: The IBAN requested by the TPP does not belong to the specified person.

This endpoint validates the psd2_challenge_id for a customer. Before allowing the customer to log in, you can use this endpoint to verify that the customer is coming from Solaris and that the session is still valid.
If the request fails, the customer should see an error message and must restart the process from the TTP's application.
Expected error messages:

1. 401 - Unauthorized: The Challenge ID is expired.
2. 404 - Not found: The Challenge ID doesn't exist.