Financial-grade API (FAPI)

SimpleIdServer supports the Financial-grade API profile.

It is a highly secured OAuth profile that aims to provide specific implementation, guideline for security and interoperability. It can be applied to APIs in any Market area that requires a higher level of security than provided by standard OAuth or OpenID Connect for example : Open Banking.

FAPI 1.0

• Financial-grade API Security Profile 1.0 - Part 1: Baseline (specification)
• Financial-grade API Security Profile 1.0 - Part 2: Advanced (specification)
• JWT Secured Authorization Response Mode for OAuth 2.0 (specification)

FAPI 2.0

• FAPI: Client Initiated Backchannel Authentication (CIBA) Profile (specification)
• FAPI 2.0 Security Profile (specification)
• Grant Management for OAuth 2.0 (Draft) (specification)