ISO/IEC 25791-1:2026Published

Information technology — OpenID Connect FAPI Security Profile 1.0 — Part 1: Baseline

Technologies de l'information — Profil de sécurité 1.0 basé sur le protocole OpenID Connect conçu pour les API finanières, FAPI — Partie 1: Niveau de référence

Abstract / scope

This document specifies the method for an application to:

  • obtain OAuth tokens in a moderately secure manner for access to protected data;
  • use OpenID Connect (OIDC) to identify the customer (user); and
  • use tokens to access REST APIs in a moderately secure manner.