UMTB Support Page

Get Started

• In order to operate with the bank within the framework of open banking, the consumer of the information or the initiator of the payments ("the third-party provider“-TPP) is required to have two valid digital certificates, issued by the OBIE:

• QWAC type certificate

• QSEALC type certificate

• Using these certificates, the transmissions between the TPP and the bank will be encrypted and signed.

• Access to the bank testing environment (known as Sandbox) will only be possible for inquiries that come with a pair of valid standard certificates issued for the purpose of performing tests. Similarly, access to the production environment will only be possible with standard and valid certificates issued for production.

• The registration of the TPP application for open banking (a process known as Onboarding) is carried out automatically with the first successful referral of the supplier's server to the Establish Consent service in the case of an information consumer or Initiate Payment in the case of a payment initiator. In the automatic registration process, the details contained in the digital certificates are collected and saved.

• The certificates will contain (among other things):

• The name of the TPP (O - Organization Name)

• The name of the application that addresses the bank (OU - Organization Unit)

• The email address of a contact person on behalf of the TPP (subjectAlternativeName in the QSEALC certificate)

• These details will be used for identifying the TPP and for contacting via email.

• Proper completion of the Onboarding process for one of these environments is required in order to enable the registration of the TPP to the developer portal.

• Development of applications to work with open banking services

• Applications for open banking will be developed according to the latest NextGenPSD2 XS2A standard published by The Berlin Group - A European Standards Initiative

• In order to receive information from the bank, a process of obtaining a power of attorney in accordance with the OAuth2 standard must be carried out, which includes providing the power of attorney details to the bank and obtaining the customer's consent – a process known as - Strong Customer Authentication – SCA. The process ends with the bank granting authorizations to a third-party provider using type tokens.

• Access Token is delivered to the TPP after the end of the customer's consent process and is valid for one hour.

• Refresh Token enables receiving a new Access Token and its validity is 31 days.

• In the "API Products" menu on the portal you can find documentation explaining how the bank implements the open banking standard in each and every version.

• Performing tests against the sandbox

• The bank expects third-party providers to perform tests for applications under development against the sandbox before running them in the production environment. In this way, the bank will be able to provide better support to developers.

• Access to the bank's open banking services

• The access address to the Sandbox environment is: https://sboapi.umtb.co.uk/london/psd2/v<version number>/

• The access address to the Production environment is: https://oapi.umtb.co.uk/london/psd2/v<version number>/

OB Services Availability

• Open banking services will be available 24/7 except between the hours 17:00 to 20:00 Monday to Friday

• How to apply a request to OB support:

• To contact the Support team of London branch, please choose Contact Us and fill a form (open ticket). The mail will be sent to OB Support team. The form structure will be different for Unidentified and Identified TPP. At the end of processing the application, a report will be sent to TPP by email. This option (via open tickets) is the recommended way to receive OB Support.

• To contact through the call center - in urgent cases, a representative of the TPP can contact the bank’s call center via the number +44 7448 0600 and choose the option for Open Banking Technical Support (for the hours of receiving support by the center, see SLA). At the end of processing the application, a report will be sent to TPP by email.

• Assistance and support for the TPP developers

• The OB Support team will assist as much as possible the TPPs who develop applications in understanding how the standard is implemented by the bank and in solving problems. However, the OB Support team expects that TPP developers will apply for assistance only after they learn and become familiar with the standard.

SLA

• Support hours

• Open tickets will be handled on Business days between 09:00 – 17:00.

• Business days do not include Saturday, Sunday and holidays as specified on the ‘Contacts Us’ page of the umtb.co.uk website.

• Tickets raised after business hours will be handled the next business day.

• The start time of treatment of an application received during business hours is according to the Severity level.

• Report on planned shutdowns

• The developers' portal will report on scheduled shutdown dates for upgrades or troubleshooting.

• The bank will report an estimated time to return to normal functioning.

• An update on a planned shutdown will be given 7 days in advance.

• Suspension of access to the TPP

• The bank reserves the right to temporarily suspend the TPP access to the open banking services for information security reasons.