API Documentation

Introduction

With [PSD2] the European Union has published a new directive on payment services in the internal market.The revised Payment Services Directive (PSD2) is a data and technology-driven directive which aims to drive increased competition, innovation and transparency acrossthe European payments market, while enhancing the security of Internet payments and account access. Among others [PSD2] contains regulations of new services to be operated by so called Third Party Payment Service Providers (TPP) on behalf of a Payment Service User (PSU). These new services are:

• Payment Initiation Service (PIS) to be operated by a Payment Initiation Service Provider (PISP) TPP as defined by article 66 of [PSD2],
• Account Information Service (AIS) to be operated by an Account Information Service Provider (AISP) TPP as defined by article 67 of [PSD2], and
• Confirmation of the Availability of Funds service to be used by Payment Instrument Issuing Service Provider (PIISP) TPP as defined by article 65 of [PSD2].

For operating the new services, a TPP needs to access the account of the PSU which is usually managed by another payment service provider called Account Servicing Payment Service Provider (ASPSP)

References

• PSD2 Directive (EU) 2015/2366;
• PSD2 Regulatory Technical Standards for strong customer authentication and common and secure open standards for communication;
• Berlin Group Operational Rules and Implementation Guidelines v1.3;
• Berlin Group XS2A Extended Service IG Consent CoF V2.0 01 March 2019;

Registration process

The registration process of a TPP goes through the following steps:

1.  Register as TPP and create  a user account within the  Portal, in order to access the system
2.  Acquiring the access credentials for API
3.  For the purpose of identification, as referred to in PSD2 Article 30(1) (a), TPPs shall rely on qualified certificates for electronic seals - QWAC certificates issued according to Regulation (EU) No 910/2014. 
4.  Acquiring a test certificate to access the system in case the TPP is in the process of licensing  and has submitted the authorization documentation to a Competent Authority

Getting Started

Dedicated interface and testing environment:

Identity and Access Management: This simulates the online banking platform, where PSU will login and have access to view list of given consents and list of payments initiated via payments endpoints using URL:  https://iam.sandbox.intesasanpaolobank.ro/

API Gateway: Please use this URL to send API requests:  https://api.sandbox.intesasanpaolobank.ro  

POSTMAN is a widely used software platform designed for API Development. We recommend using POSTMAN (free edition for individuals and small teams) to run API requests, individually or as collections of tests. POSTMAN is available for download here: https://www.getpostman.com/downloads/

Berlin Group APIs

Intesa Sanpaolo Bank Romania (ISPRO) enables TPPs to get access to Developer Portal for the APIs technical documentation and Sandbox environment for testing. The APIs of ISPRO are the technical interfaces to access the services of the bank as an third party. TPPs as Company or developer wanting to use the ISPRO APIs can access APIs technical documentation and the sandbox environment for testing. API is the acronym for Application Programming Interface, which is a software intermediary that allows two applications to talk to each other. Berlin Group set of APIs are designed to provide the interface that can be used to connect to ASPSPs in order to support PSD2 services like: account information services, payment initiation services, funds confirmation service.

APIs published by Intesa Sanpaolo Bank Romania

Any TPP or developer intending to use the API published by the Bank in order to enable PSU as the Bank customer to access the services offered in regard with the following assumptions:

• PSU has an active payment account available online;
• PSU has the mandate to execute transactions from the payment account;
• The dedicated interface uses APIs to support access to account related services, including payment initiation services, as per payment product supported by ISP RO.
• The dedicated interface follows and is compliant with Berlin Group standard ? NextGenPSD2 and XS2A Framework and the subsequent framework, operational rules and technical specifications

 

Endpoints provided for Account Information Service

/v1/consents

/v1/accounts

/v1/accounts/{account-id}

/v1/accounts/{account-id}/balances

/v1/accounts/{account-id}/transactions

Endpoints provided for Payment Initiation Services

Single payments:

• /v1/payments/sepa-credit-transfer
• /v1/payments/cross-border-credit-transfer
• /v1/payments/ro-domestic-credittransfer

Periodic Payments

• /v1/periodic-payments/sepa-credit-transfer
• /v1/periodic-payments/cross-border-credit-transfers
• /v1/periodic-payments/ro-domestic-credittransfer

Bulk Payments

• /v1/bulk-payments/sepa-credit-transfer
• /v1/bulk-payments/cross-border-credit-transfers
• /v1/bulk-payments/ro-domestic-credittransfer
• /v1/{payment-service}/{payment-id}/status

 

Endpoints provided for Funds Confirmation Service

/v1/fund-confirmations

For more details, please explore the APIs catalog and download published documentation in yaml and/or json format.

Help Desk & Support

We are happy to answer your questions. Send us a message to TPPsupport@intesasanpaolo.ro  and we will contact you as soon as possible