Customer Accounts Administration v0.5.1
Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.
This API provides administrative management of a customer's relationship with banking accounts.
setCustomerAccountEntitlements
creates a customer's entitlements to one or more accounts, allowing the customer to perform various banking activities with those accounts.
Download OpenAPI Definition (YAML)
Base URLs:
License: Apiture API License
Authentication
- OAuth2 authentication (
clientCredentials
)- Client Credentials OAuth2 flow that allows a secure service application to access resources. (This access is not used with insecure clients such as web or mobile applications.) See details at Secure Access.
- Flow:
clientCredentials
- Token URL = https://dev-oidc.apiture-comm-nonprod.com/oidc/token
Scope | Scope Description |
---|---|
bankingAdmin/read |
Read a wide variety of banking and other financial institution and customer data. |
bankingAdmin/write |
Write a wide variety of banking and other financial institution and customer data. |
adminData/read |
Read access to non-banking data and resources. |
adminData/write |
Read, write, and delete access to non-banking data and resources. |
samlPlatform/write |
Write access to security-critical Apiture internal key and certificate data. |
samlPlatform/read |
Read access to integration resources, e.g. supported codes. |
samlAdmin/write |
Write, delete and execute access to service provider metadata and SAML computation operations. |
systemIntegrations/read |
Read access to integration definition resources. |
systemIntegrations/write |
Write, delete and execute access to integration definition resources. |
Customer Accounts Administration
Banking Customer Accounts Administration
setCustomerAccountEntitlements
Code samples
# You can also use wget
curl -X PUT https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer {access-token}'
PUT https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements HTTP/1.1
Host: api.apiture.com
Content-Type: application/json
Accept: application/json
const fetch = require('node-fetch');
const inputBody = '{
"accounts": [
{
"accountNumber": "123456789",
"productType": "checking",
"productCode": "DDA_01"
},
{
"accountNumber": "123456788",
"accountMicrNumber": "123456788",
"productType": "checking",
"productCode": "DDA_02"
},
{
"accountNumber": "123456787",
"productType": "checking",
"productCode": "DDA_03"
}
],
"assignments": {
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
}';
const headers = {
'Content-Type':'application/json',
'Accept':'application/json',
'Authorization':'Bearer {access-token}'
};
fetch('https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements',
{
method: 'PUT',
body: inputBody,
headers: headers
})
.then(function(res) {
return res.json();
}).then(function(body) {
console.log(body);
});
var headers = {
'Content-Type':'application/json',
'Accept':'application/json',
'Authorization':'Bearer {access-token}'
};
$.ajax({
url: 'https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements',
method: 'put',
headers: headers,
success: function(data) {
console.log(JSON.stringify(data));
}
})
require 'rest-client'
require 'json'
headers = {
'Content-Type' => 'application/json',
'Accept' => 'application/json',
'Authorization' => 'Bearer {access-token}'
}
result = RestClient.put 'https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements',
params: {
}, headers: headers
p JSON.parse(result)
import requests
headers = {
'Content-Type': 'application/json',
'Accept': 'application/json',
'Authorization': 'Bearer {access-token}'
}
r = requests.put('https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements', params={
}, headers = headers)
print r.json()
URL obj = new URL("https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements");
HttpURLConnection con = (HttpURLConnection) obj.openConnection();
con.setRequestMethod("PUT");
int responseCode = con.getResponseCode();
BufferedReader in = new BufferedReader(
new InputStreamReader(con.getInputStream()));
String inputLine;
StringBuffer response = new StringBuffer();
while ((inputLine = in.readLine()) != null) {
response.append(inputLine);
}
in.close();
System.out.println(response.toString());
package main
import (
"bytes"
"net/http"
)
func main() {
headers := map[string][]string{
"Content-Type": []string{"application/json"},
"Accept": []string{"application/json"},
"Authorization": []string{"Bearer {access-token}"},
}
data := bytes.NewBuffer([]byte{jsonReq})
req, err := http.NewRequest("PUT", "https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements", data)
req.Header = headers
client := &http.Client{}
resp, err := client.Do(req)
// ...
}
Set entitlements for a banking customer with respect to one or more banking accounts
PUT https://api.apiture.com/bankingAdmin/bankingCustomers/{bankingCustomerId}/accountEntitlements
Create or update the entitlements that a banking customer has with respect to one or more banking accounts. These entitlements control what banking activity the customer may conduct with respect to each account.
This operation also creates the account resource in Apiture Digital Banking if the account only exists in the banking core.
Note: The customer must be enabled for digital banking via the Admin Customers API.
Body parameter
{
"accounts": [
{
"accountNumber": "123456789",
"productType": "checking",
"productCode": "DDA_01"
},
{
"accountNumber": "123456788",
"accountMicrNumber": "123456788",
"productType": "checking",
"productCode": "DDA_02"
},
{
"accountNumber": "123456787",
"productType": "checking",
"productCode": "DDA_03"
}
],
"assignments": {
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
}
Parameters
Parameter | Description |
---|---|
body | customerBankingAccountEntitlementsAssignment (required) A list of accounts and the entitlements to assign the customer with respect to each banking account. |
bankingCustomerId in: path | resourceId (required) The unique identifier of this banking customer. This is an opaque string. minLength: 6 maxLength: 48 pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$" |
Example responses
200 Response
{
"items": [
{
"account": {
"id": "52abfb19a4810b8b90e7",
"accountNumber": "123456789",
"productType": "checking",
"productCode": "DDA_01"
},
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
},
{
"account": {
"id": "a1b4067f35ae4f0ac4a6",
"accountNumber": "234567890",
"productType": "checking",
"productCode": "DDA_01"
},
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
]
}
Responses
Status | Description |
---|---|
200 | OK |
OK. Customer entitlements updated for all accounts. | |
Schema: customerBankingAccountEntitlements |
Status | Description |
---|---|
400 | Bad Request |
Bad Request. The request body, request headers, and/or query parameters are not well-formed. This problem responsemay have one of the following
| |
Schema: Inline |
Status | Description |
---|---|
401 | Unauthorized |
Unauthorized. The operation requires authentication but no authentication or insufficient authentication was given. This problem responsemay have one of the following
| |
Schema: Inline |
Status | Description |
---|---|
403 | Forbidden |
Forbidden. The authenticated caller is not authorized to perform the requested operation. This problem responsemay have one of the following
| |
Schema: Inline |
Status | Description |
---|---|
404 | Not Found |
Not found. There is no such resource at the request URL. This problem responsemay have one of the following
| |
Schema: Inline |
Status | Description |
---|---|
422 | Unprocessable Entity |
Unprocessable Entity. The request body and/or query parameters were well formed but otherwise invalid. This problem responsemay have one of the following
|
Status | Description |
---|---|
429 | Too Many Requests |
Too Many Requests. The client has sent too many requests in a given amount of time. This problem responsemay have one of the following
| |
Schema: Inline |
Status | Description |
---|---|
4XX | Unknown |
Client Request Problem. The client request had a problem not listed under another specific 400-level HTTP response code. View the detail in the problem response for additional details. | |
Schema: Inline |
Status | Description |
---|---|
5XX | Unknown |
Server Problem. The server encountered a problem not listed under another specific 500-level HTTP response code. View the detail in the problem response for additional details. | |
Schema: Inline |
Response Schema
Status Code 400
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Status Code 401
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Status Code 403
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Status Code 404
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Status Code 429
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Status Code 4XX
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Status Code 5XX
Property Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
» type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" . maxLength: 2048 |
» title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type . maxLength: 120 |
» status | The HTTP status code for this occurrence of the problem. minimum: 100 maximum: 599 |
» detail | A human-readable explanation specific to this occurrence of the problem. maxLength: 256 |
» instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment maxLength: 2048 |
» id | The unique identifier for this problem. This is an immutable opaque string. minLength: 6 maxLength: 48 pattern: ^[-_:.~$a-zA-Z0-9]{6,48}$ |
» occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC. minLength: 20 maxLength: 30 |
» problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 |
» attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
Schemas
accountNickname
"Payroll Checking"
Account Nickname (v1.2.0)
The nickname (friendly name) the customer has given this account. Each customer can define their own nickname for the same account. If omitted, the customer has not set a nickname.
type:
string(text)
format: text
maxLength: 50
apiProblem
{
"id": "3fbad566-be86-4b22-9ba6-3ca99fdc0799",
"type": "https://production.api.apiture.com/errors/accountNotFound/v1.0.0",
"title": "Account Not Found",
"status": 422,
"occurredAt": "2022-04-25T12:42:21.375Z",
"detail": "No account exists at the given account_url",
"instance": "https://production.api.apiture.com/banking/transfers/bb709151-575041fcd617"
}
API Problem (v1.2.1)
API problem or error, as per RFC 7807 application/problem+json.
Properties
Name | Description |
---|---|
API Problem (v1.2.1) | API problem or error, as per RFC 7807 application/problem+json. |
type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" .format: uri-reference maxLength: 2048 |
title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type .format: text maxLength: 120 |
status | The HTTP status code for this occurrence of the problem. format: int32 minimum: 100 maximum: 599 |
detail | A human-readable explanation specific to this occurrence of the problem. format: text maxLength: 256 |
instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment format: uri-reference maxLength: 2048 |
id | The unique identifier for this problem. This is an immutable opaque string. read-only minLength: 6 maxLength: 48 pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$" |
occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC.read-only format: date-time minLength: 20 maxLength: 30 |
problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 items: object |
bankingCustomerAccountAssignments
{
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
Banking Customer Account Assignments (v1.1.0)
New or replacement banking account role and options/elections to assign to a customer. Each role establishes one or more entitlements for specific banking activity with respect to the given account(s).
Properties
Name | Description |
---|---|
Banking Customer Account Assignments (v1.1.0) | New or replacement banking account role and options/elections to assign to a customer. Each role establishes one or more entitlements for specific banking activity with respect to the given account(s). |
electronicStatementElection | If true then the customer has consented to receive statements electronically (via email or download) instead of postal mail for this account.default: false |
electronicDocumentElection | If true then the customer has consented to receive other documents (not statements) electronically (via email or download) instead of postal mail for this account.default: false |
roles | (required) Specific account access roles that a customer has relative to a banking account. When updating a customer's account entitlements, roles with a value of false are removed from the customer and permissions omitted from this object are not changed. Each role represents one or more specific entitlements which are dependent upon the type of account. A true value means the customer has that role and therefore the entitlements associated with the role. |
bankingCustomerAccountRoles
{
"default": true,
"view": true,
"basic": true,
"billPay": true,
"loanAdvance": false
}
Banking Customer Account Roles (v1.1.0)
Specific account access roles that a customer has relative to a banking account. When updating a customer's account entitlements, roles with a value of false
are removed from the customer and permissions omitted from this object are not changed. Each role represents one or more specific entitlements which are dependent upon the type of account. A true
value means the customer has that role and therefore the entitlements associated with the role.
Properties
Name | Description |
---|---|
Banking Customer Account Roles (v1.1.0) | Specific account access roles that a customer has relative to a banking account. When updating a customer's account entitlements, roles with a value of false are removed from the customer and permissions omitted from this object are not changed. Each role represents one or more specific entitlements which are dependent upon the type of account. A true value means the customer has that role and therefore the entitlements associated with the role. |
default | If true , assign the default entitlements to the banking customer for the account(s). The defaults are configured by the financial institution and system configuration based on account types. |
view | If true , the customer can view account balance and transaction history. However, unless granted along with basic or other roles, the account cannot be used for banking money movement, such as account transfers, ATM withdrawals, or payments.default: false |
basic | If true , the customer's role is account holder. This includes basic entitlements such as viewing the account details, balances, transaction history, statements, although some of these entitlements vary based on the account type.default: false |
billPay | If true , the customer or member may use the Bill Pay feature with this account, as well as viewing the account balances and transaction history. Unless granted along with basic , the customer cannot use the account for other types of fund transfers.default: false |
loanAdvance | For loan and creditCard accounts, the customer is entitled to transfer money to other deposit accounts or ATM withdrawals, increasing the loan or balance of the account.default: false |
challengeFactor
{
"type": "sms",
"labels": [
"9876"
]
}
Challenge Factor (v1.2.1)
A challenge factor. See requiredIdentityChallenge
for multiple examples.
Properties
Name | Description | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Challenge Factor (v1.2.1) | A challenge factor. See requiredIdentityChallenge for multiple examples. | ||||||||||||
id | The ID of an a challenge factor. This ID is unique within the challenge factors associated with a challenge. The client should pass this id value as the factorId when starting or verifying a challenge factor. Note: The | ||||||||||||
type | (required) The name of challenge factor.
enum values: sms , email , voice , securityQuestions , authenticatorToken | ||||||||||||
labels | array: [ A list of text label which identifies the channel(s) through which the user completes the challenge. For an sms or voice challenge, the only label item is the last four digits of the corresponding phone number. For an email challenge, each label is the masked email address.minItems: 1 maxItems: 4 items: string(text) » format: text » maxLength: 300 | ||||||||||||
securityQuestions | Describes a securityQuestions challenge. This is omitted if the challenge type is not securityQuestions . |
challengeFactorId
"string"
Challenge Factor ID (v1.0.0)
The ID of an a challenge factor. This ID is unique within the factors offered with a challenge.
type:
string
minLength: 3
maxLength: 48
pattern: "^[-a-zA-Z0-9$_]{3,48}$"
challengeFactorType
"sms"
Challenge Factor Type (v1.0.0)
The name of challenge factor.
challengeFactorType
strings may have one of the following enumerated values:
Value | Description |
---|---|
sms | SMS: One-time passcode sent to the primary mobile phone number |
email | Email: One-time passcode sent to the primary email address |
voice | Voice: One-time passcode communicated via automated voice phone call |
authenticatorToken | authenticator Token: One-time passcode issued by a pre-registered hardware device, such as a token key fob, or an authenticator app |
securityQuestions | Security Questions: Prompt with the user's security questions registered with their security profile |
type:
string
enum values: sms
, email
, voice
, securityQuestions
, authenticatorToken
challengeOperationId
"string"
Challenge Operation ID (v1.0.1)
The ID of an operation/action for which the user must verify their identity via an identity challenge. This is passed when starting a challenge factor or when validating the identity challenge responses.
type:
string
minLength: 6
maxLength: 48
pattern: "^[-a-zA-Z0-9$_]{6,48}$"
challengePromptId
"string"
Challenge Prompt ID (v1.0.0)
The unique ID of a prompt (such as a security question) in a challenge factor.
type:
string
minLength: 1
maxLength: 48
pattern: "^[-_:.~$a-zA-Z0-9]+$"
challengeSecurityQuestion
{
"id": "74699fa628911e762ea5",
"prompt": "What is your mother's maiden name?"
}
Challenge Security Question (v1.0.1)
A single security question within the questions
array of the challengeSecurityQuestions
Properties
Name | Description |
---|---|
Challenge Security Question (v1.0.1) | A single security question within the questions array of the challengeSecurityQuestions |
id | (required) The unique ID of security question prompt. This should be included in the challengeVerification response as the promptId .minLength: 1 maxLength: 48 pattern: "^[-_:.~$a-zA-Z0-9]+$" |
prompt | (required) The text prompt of this security question. format: text maxLength: 80 |
challengeSecurityQuestions
{
"questions": [
{
"id": "q1",
"prompt": "What is your mother's maiden name?"
},
{
"id": "q4",
"prompt": "What is your high school's name?"
},
{
"id": "q9",
"prompt": "What is the name of your first pet?"
}
]
}
Challenge Security Questions (v1.0.1)
Describes a securityQuestions
challenge. This is omitted if the challenge type
is not securityQuestions
.
Properties
Name | Description |
---|---|
Challenge Security Questions (v1.0.1) | Describes a securityQuestions challenge. This is omitted if the challenge type is not securityQuestions . |
questions | array: (required) The array of security questions. minItems: 1 maxItems: 8 items: object |
customerBankingAccountEntitlementItem
{
"account": {
"accountNumber": "123456788",
"accountMicrNumber": "123456788",
"productType": "checking",
"productCode": "DDA_01"
},
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
Customer Banking Account Entitlement Item (v3.0.0)
An customer's banking account and the entitlement the customer has over the account.
Properties
Name | Description |
---|---|
Customer Banking Account Entitlement Item (v3.0.0) | An customer's banking account and the entitlement the customer has over the account. |
electronicStatementElection | (required) If true then the customer has consented to receive statements electronically (via email or download) instead of postal mail for this account.default: false |
electronicDocumentElection | (required) If true then the customer has consented to receive other documents (not statements) electronically (via email or download) instead of postal mail for this account.default: false |
roles | (required) Specific account access roles that a customer has relative to a banking account. When updating a customer's account entitlements, roles with a value of false are removed from the customer and permissions omitted from this object are not changed. Each role represents one or more specific entitlements which are dependent upon the type of account. A true value means the customer has that role and therefore the entitlements associated with the role. |
account | (required) A reference for identifying a banking account that is internal to the financial institution. |
customerBankingAccountEntitlements
{
"items": [
{
"account": {
"id": "52abfb19a4810b8b90e7",
"accountNumber": "123456789",
"productType": "checking",
"productCode": "DDA_01"
},
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
},
{
"account": {
"id": "a1b4067f35ae4f0ac4a6",
"accountNumber": "234567890",
"productType": "checking",
"productCode": "DDA_01"
},
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
]
}
Customer Banking Account Entitlements (v4.0.0)
A list of customer banking accounts and their settings and entitlements.
Properties
Name | Description |
---|---|
Customer Banking Account Entitlements (v4.0.0) | A list of customer banking accounts and their settings and entitlements. |
items | array: (required) A list of customer banking accounts and the customer's settings and entitlements for that account minItems: 1 maxItems: 16 items: object |
customerBankingAccountEntitlementsAssignment
{
"accounts": [
{
"accountNumber": "123456789",
"productType": "checking",
"productCode": "DDA_01"
},
{
"accountNumber": "123456788",
"accountMicrNumber": "123456788",
"productType": "checking",
"productCode": "DDA_02"
},
{
"accountNumber": "123456787",
"productType": "checking",
"productCode": "DDA_03"
}
],
"assignments": {
"electronicStatementElection": true,
"electronicDocumentElection": true,
"roles": {
"default": true,
"billPay": true
}
}
}
Customer Banking Account Entitlements Assignment (v3.0.0)
New or updated customer entitlements for one or more customer banking accounts.
Properties
Name | Description |
---|---|
Customer Banking Account Entitlements Assignment (v3.0.0) | New or updated customer entitlements for one or more customer banking accounts. |
accounts | array: (required) A list of internal accounts (accounts held at the current financial institution). minItems: 1 maxItems: 16 items: object |
assignments | (required) New or replacement banking account role and options/elections to assign to a customer. Each role establishes one or more entitlements for specific banking activity with respect to the given account(s). |
customerBankingAccountReference
{
"id": "string",
"accountNumber": "123456789",
"accountMicrNumber": "string",
"productType": "savings",
"productCode": "CD001",
"nickname": "Payroll Checking"
}
Customer Banking Account Reference (v3.0.0)
A reference for identifying a banking account that is internal to the financial institution.
Properties
Name | Description |
---|---|
Customer Banking Account Reference (v3.0.0) | A reference for identifying a banking account that is internal to the financial institution. |
id | The internal resource ID of the account, if known. minLength: 6 maxLength: 48 pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$" |
accountNumber | (required) The full, unmasked account number identifying the internal account minLength: 1 maxLength: 32 pattern: "^[- a-zA-Z0-9.]{1,32}$" |
accountMicrNumber | The account number portion of the Magnetic Ink Character Recognition (MICR) number. This often differs from the accountNumber at credit unions. This value is required (for credit unions) in order to process NACHA transactions.minLength: 2 maxLength: 17 pattern: "^[0-9]{2,17}$" |
productType | The name of the banking product type for the banking account. enum values: savings , checking , cd , ira , loan , creditCard , moneyMarket , healthSavings |
productCode | (required) The name of the product code for the banking account. format: text minLength: 1 maxLength: 16 |
nickname | A nickname the customer wishes to assign to this account. format: text maxLength: 50 |
fullAccountNumber
"123456789"
Full Account Number (v1.0.0)
A full account number. This is the number that the customer uses to reference the account within the financial institution.
type:
string
minLength: 1
maxLength: 32
pattern: "^[- a-zA-Z0-9.]{1,32}$"
problemResponse
{
"id": "3fbad566-be86-4b22-9ba6-3ca99fdc0799",
"type": "https://production.api.apiture.com/errors/noSuchAccount/v1.0.0",
"title": "Account Not Found",
"status": 422,
"occurredAt": "2022-04-25T12:42:21.375Z",
"detail": "No account exists for the given account reference",
"instance": "https://production.api.apiture.com/banking/transfers/bb709151-575041fcd617"
}
Problem Response (v0.4.1)
API problem or error response, as per RFC 9457 application/problem+json.
Properties
Name | Description |
---|---|
Problem Response (v0.4.1) | API problem or error response, as per RFC 9457 application/problem+json. |
type | A URI reference (RFC3986) that identifies the problem type. If present, this is the URL of human-readable HTML documentation for the problem type. When this member is not present, its value is assumed to be "about:blank" .format: uri-reference maxLength: 2048 |
title | A short, human-readable summary of the problem type. The title is usually the same for all problem with the same type .format: text maxLength: 120 |
status | The HTTP status code for this occurrence of the problem. format: int32 minimum: 100 maximum: 599 |
detail | A human-readable explanation specific to this occurrence of the problem. format: text maxLength: 256 |
instance | A URI reference that identifies the specific occurrence of the problem. This is the URI of an API resource that the problem is related to, with a unique error correlation ID URI fragment format: uri-reference maxLength: 2048 |
id | The unique identifier for this problem. This is an immutable opaque string. read-only minLength: 6 maxLength: 48 pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$" |
occurredAt | The timestamp when the problem occurred, in RFC 3339 date-time YYYY-MM-DDThh:mm:ss.sssZ format, UTC.read-only format: date-time minLength: 20 maxLength: 30 |
problems | array: Optional root-causes if there are multiple problems in the request or API call processing. maxItems: 128 items: object |
attributes | Additional optional attributes related to the problem. This data conforms to the schema associated with the error type. |
productType
"savings"
Product Type (v2.2.0)
The type (or category) of banking product.
productType
strings may have one of the following enumerated values:
Value | Description |
---|---|
savings | Savings: Savings Account |
checking | Checking: Checking Account |
cd | CD: Certificate of Deposit Account |
ira | IRA: Individual Retirement Account |
loan | Loan: Loan Account |
creditCard | Credit Card: Credit Card Account |
moneyMarket | Money Market: Money Market Account |
healthSavings | Health Savings: Health Savings Account |
type:
string
enum values: savings
, checking
, cd
, ira
, loan
, creditCard
, moneyMarket
, healthSavings
readOnlyResourceId
"string"
Read-only Resource Identifier (v1.0.1)
The unique, opaque system-assigned identifier for a resource. This case-sensitive ID is also used in URLs as path parameters or in other properties or parameters that reference a resource by ID rather than URL. Resource IDs are immutable.
type:
string
read-only
minLength: 6
maxLength: 48
pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$"
readOnlyTimestamp
"2021-10-30T19:06:04.250Z"
Read-Only Timestamp (v1.0.0)
A readonly or derived timestamp (an instant in time) formatted in RFC 3339 date-time
UTC format: YYYY-MM-DDThh:mm:ss.sssZ
.
type:
string(date-time)
read-only
format: date-time
minLength: 20
maxLength: 30
requiredIdentityChallenge
{
"operationId": "createTransfer",
"challengeId": "0504076c566a3cf7009c",
"factors": [
{
"type": "sms",
"labels": [
"9876"
],
"id": "85c0ee5753fcd0b0953f"
},
{
"type": "voice",
"labels": [
"9876"
],
"id": "d089e10a80a8627df37b"
},
{
"type": "voice",
"labels": [
"6754"
],
"id": "10506ecf9d1c2ee00403"
},
{
"type": "email",
"labels": [
"an****nk@example.com",
"an****98@example.com"
],
"id": "e917d671cb2f030b56f1"
},
{
"type": "authenticatorToken",
"labels": [
"Acme fob"
],
"id": "fe6c452d7da0bbb4e407"
},
{
"type": "securityQuestions",
"securityQuestions": {
"questions": [
{
"id": "q1",
"prompt": "What is your mother's maiden name?"
},
{
"id": "q4",
"prompt": "What is your high school's name?"
},
{
"id": "q9",
"prompt": "What is the name of your first pet?"
}
]
},
"id": "df33c6f88a37d6b3f0a6"
}
]
}
Required Challenge (v1.2.3)
A request from the service for the user to verify their identity. This contains a challenge ID, the corresponding operation ID, and a list of challenge factors for identity verification. The user must complete one of these challenge factors to satisfy the challenge. This schema defines the attributes in the 401 Unauthorized problem response when the 401 problem type name is challengeRequired
. See the "Challenge API" for details.
Properties
Name | Description |
---|---|
Required Challenge (v1.2.3) | A request from the service for the user to verify their identity. This contains a challenge ID, the corresponding operation ID, and a list of challenge factors for identity verification. The user must complete one of these challenge factors to satisfy the challenge. This schema defines the attributes in the 401 Unauthorized problem response when the 401 problem type name is challengeRequired . See the "Challenge API" for details. |
operationId | (required) The ID of an operation/action for which the user must verify their identity via an identity challenge. This is passed when starting a challenge factor or when validating the identity challenge responses. minLength: 6 maxLength: 48 pattern: "^[-a-zA-Z0-9$_]{6,48}$" |
challengeId | (required) The unique ID of this challenge instance. This is an opaque string. This is passed when starting a challenge factor or when validating the identity challenge responses. read-only minLength: 6 maxLength: 48 pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$" |
factors | array: (required) A list of challenge factors. The user must complete one of these challenge factors. The labels in each factor identify one or more channels the user may use, such as a list of email addresses the system may use to send a one-time passcode to the user. *Note: The same channel may be used by multiple factors in the array of factors. For example, the user's primary mobile phone number may be used for both an sms factor and a voice factor.minItems: 1 maxItems: 8 items: object |
resourceId
"string"
Resource Identifier (v1.0.1)
The unique, opaque system identifier for a resource. This case-sensitive ID is also used as path parameters in URLs or in other properties or parameters that reference a resource by ID rather than URL.
type:
string
minLength: 6
maxLength: 48
pattern: "^[-_:.~$a-zA-Z0-9]{6,48}$"
@apiture/api-doc
3.2.4 on Wed Mar 26 2025 19:42:36 GMT+0000 (Coordinated Universal Time).