Skip to content

Delegated SCA - User Experience v2.1

When a customer is redirected to you to authorize a Delegated SCA payment consent through Open Finance, you must present an Authorization Page that clearly explains the payment the customer is authorizing — that the TPP is seeking permission to initiate payments on their behalf, but the customer will be required to authenticate and approve each individual payment before it is executed — no payment will be taken automatically. The page must accurately reflect the payee and the nature of the delegated consent being granted.

The examples and interactive wireframes provided below define the expected structure, content, and behavior of the Authorization Page and must be followed.

While you may adapt visual elements such as color palette, fonts, and styling, you must not alter the meaning, clarity, or completeness of the payment information shown. The representation of AlTareq (including logos, naming, and action buttons) must be preserved at all times. The customer must be able to clearly understand what payment they are authorizing and that the authorization is part of the AlTareq ecosystem.

Your Authorization Page must be submitted as part of CX certification prior to production. Any material changes to a production Authorization Page must also be resubmitted for review and approval.

Interactive Demo

Customise the request body fields below and watch the Consent and Authorisation page previews update live.

domestic_payment_piiConsent Body (AEDomesticPaymentPII)
View Consent endpoint ↗
consentBodyAEPaymentConsentResponse
View Consent endpoint ↗

Configure the mock accounts the authenticated user holds at their bank. The Authorisation Page will offer these accounts when the user picks a debtor account, or validate the Initiation.DebtorAccount against them when one is pre-selected by the TPP.

Simulated User AccountsAccounts the authenticated user holds at their bank

Live UI Preview

Changes made above are immediately reflected in both panels.

UI Behaviour Driven by API Fields

Debtor Account Selection

The presence or absence of Initiation.DebtorAccount in domestic_payment_pii determines whether the user selects their account at the LFI or if it is pre-selected by the TPP.

TIP

Passing a DebtorAccount reduces friction for users who have already selected their account within the TPP's own interface, but removes the user's ability to choose a different account at the LFI.

Creditor Configuration

The presence or absence of creditors in Initiation.Creditor in domestic_payment_pii determines how the LFI presents payment recipient information to the user.

Initiation.CreditorLFI Authorisation Page Behaviour
1 creditorThe single payee's name and account details are displayed under "Who you're paying". (See Example 1)
2–10 defined creditorsAll specified payees are listed under "Who you're paying". (See Examples 2, 3 & 4)
Undefined (absent or empty)A general message informs the user that the TPP is responsible for selecting beneficiaries at payment time. (See Example 5)

Permissions and Data Access

The table below describes the text shown to users on the Consent Page.

PermissionsText shown to user on Consent Page
ReadAccountsBasicYou also grant us permission to access your account details before making the payment.
ReadAccountsDetailYou also grant us permission to access your account details before making the payment.
ReadRefundAccountYou also grant us permission to access your account details in order to process a refund.
ReadAccountsBasicReadAccountsDetailYou also grant us permission to access your account details before making the payment.
ReadAccountsBasicReadBalancesYou also grant us permission to access your account details and balance before making the payment.
ReadAccountsBasicReadRefundAccountYou also grant us permission to access your account details before making the payment, as well as to process refunds.
ReadAccountsDetailReadBalancesYou also grant us permission to access your account details and balance before making the payment.
ReadAccountsDetailReadRefundAccountYou also grant us permission to access your account details before making the payment, as well as to process refunds.
ReadAccountsBasicReadAccountsDetailReadBalancesYou also grant us permission to access your account details and balance before making the payment.
ReadAccountsBasicReadAccountsDetailReadRefundAccountYou also grant us permission to access your account details before making the payment, as well as to process refunds.
ReadAccountsBasicReadBalancesReadRefundAccountYou also grant us permission to access your account details and balance before making the payment, as well as to process refunds.
ReadAccountsDetailReadBalancesReadRefundAccountYou also grant us permission to access your account details and balance before making the payment, as well as to process refunds.
ReadAccountsBasicReadAccountsDetailReadBalancesReadRefundAccountYou also grant us permission to access your account details and balance before making the payment, as well as to process refunds.

Example User Journeys

Example 1 - Account Selected at TPP

delegated-sca
Click to expand

Example 2 - Account Selected at LFI

delegated-sca
Click to expand

Example 3 - Three Creditors

delegated-sca
Click to expand

Example 4 - Undefined Creditors

delegated-sca
Click to expand