Security

Security

Keep your payments secure with OAuth 2.0 authentication

The Payments Hub ISO20022 API uses OAuth2-based authentication and access tokens to make sure that only applications authorized and approved by Payments Hub can access API operations.

The API uses 2 JSON Web Token (JWT) Bearer tokens: User-generated JWT Bearer token that is used in an authentication request. App-generated JWT Bearer token that is used for Strong Customer Authentication (SCA) in all API requests that submit a payment.

For information on access tokens and authentication, see Authentication guide.