Our two new Corporate Banking APIs support businesses in smoother payment processing. OP Corporate International Payment Tracking API and OP Corporate Account Verification API can help your company make payments that are faster, safer, and easier to follow in real time.

Make your company’s payments reliable and transparent with OP’s new Corporate Banking APIs

<div>
<div class="markdown-container">
<div>
<p>Just like our previous Corporate Banking APIs, the two new APIs are built using well-known technologies such as JSON, REST and OAuth 2.0, which will make integrating them to your own systems smooth and trouble-free. For more technical details, please see the following API documentation:</p>
<ul class="opux-bullet-list">
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-international-payment-tracking-api" href="/products/banking/docs/op-corporate-international-payment-tracking-api">OP Corporate International Payment Tracking API documentation</a></li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-verification-api" href="/products/banking/docs/op-corporate-account-verification-api">OP Corporate Account Verification API documentation</a></li>
</ul>
<p>At this point, the APIs are in the experimental phase, meaning that we are developing them and welcome any feedback from you. We are expecting to launch the products in the sandbox as well as in production in spring 2023. Now it is your chance to have a say on what the final APIs will look like! Send us an email to <a class="opux-inline-link" title="mailto:corp-payment-APIs@op.fi" href="mailto:corp-payment-APIs@op.fi" rel="noreferrer">corp-payment-APIs@op.fi</a> and let us know what you need from these APIs.</p>
<h3>Track your international payments in your company’s own application</h3>
<p>How to know where your international payments are every step of the way – even when the recipient reports they have not received theirs?</p>
<p>With OP Corporate International Payment Tracking API, you are in control of your international payments. Automate the tracking of payments and integrate the solution with your company’s existing systems. The API allows you to see each step of the payment from debiting to crediting to the beneficiary in real time. If your payment fails, the API alerts you immediately. This way, you always know the status of your payments. If there is a problem with a payment, you can act right away and avoid your business processes slowing down because of it.</p>
<p>The International Payment Tracking API supports SWIFT gpi payments that are sent via OP. You can make the payment in any of OP's channels (for example, the Web Services channel or any of OP’s digital services, such as op.fi) and then track its progress in your company’s own application. A gpi payment is a cross-border payment under SWIFT global payments innovation service rules. It is transferred faster, and can be tracked in more detail than a regular SWIFT payment. The majority of cross-border payments in OP are gpi payments.</p>
<h3>Frictionless payments with correct payee details</h3>
<p>Errors in payee details are frustrating and cause extra work and hassle for the payer. OP Corporate Account Verification API helps your company avoid those situations by checking the payee information is correct before you even initiate a payment. The solution also informs you if the account is open to receive the payment. These checks can easily be integrated as part of your company’s processes such as payments or supplier management.</p>
<p>When the account details are correct, payments are executed faster and more reliably. An improved payment completion rate saves you time and money.</p>
<p>For some banks, you can also verify that the recipient’s name corresponds to the account holder, which helps you to be alert when you are adding or updating your business partners’ bank details. It also enhances the security of payments.</p>
<p>Remember to check out our previous Corporate Banking APIs, too:</p>
<ul class="opux-bullet-list">
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">OP Corporate Account Data API</a> enables you to view an up-to-date account balance in your own app and retrieve account transactions whenever you need them.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">OP Corporate Payment API</a> allows you to initiate payments from an app using your company’s account – no need to wait for the next batch run.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-refund-api" href="/products/banking/docs/op-corporate-refund-api">OP Corporate Refund API</a> allows you to refund a SEPA credit transaction.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-transaction-filter-api" href="/products/banking/docs/op-corporate-transaction-filter-api">OP Corporate Transaction Filter API</a> lets you query your corporate account transactions using selected search filters.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-transaction-info-api" href="/products/banking/docs/op-corporate-transaction-info-api">OP Corporate Transaction Info API</a> provides you with details of account transactions for reconciliation purposes.</li>
</ul>
<p><a class="opux-inline-link" title="https://www.op.fi/yritykset/maksuliike-ja-kassanhallinta/maksuliikkeen-rajapinnat" href="https://www.op.fi/yritykset/maksuliike-ja-kassanhallinta/maksuliikkeen-rajapinnat" target="_blank" rel="noopener noreferrer">Read more about our Corporate Banking APIs on op.fi.</a></p>
<p>We are working on new APIs all the time. <a class="opux-inline-link" title="/newsletter" href="/newsletter">Subscribe to our newsletter</a> and you will be the first to know about our new releases!</p>
</div>
</div>
</div>

OP Corporate Banking APIs are finally available to companies who want to use them on another company’s behalf. To make managing mandates simple, we are introducing a new API: OP Corporate Service Provider API. 

Service provider authorisation available for OP Corporate Banking APIs

<p>In corporate banking, it’s common to outsource banking processes to partners such as accounting firms and centralized service centers. Until now, our Corporate Banking APIs have not supported this kind of operating model, and companies that use outsourcing have been limited to our Web Services channel.</p>
<p>To allow service providers and their customers to benefit from our APIs, we are announcing a new feature on <a class="opux-inline-link" title="https://valtuutus.op.fi/corporate-api-admin/" href="https://valtuutus.op.fi/corporate-api-admin/" target="_blank" rel="noopener noreferrer">OP API Admin</a>, our self-service portal for onboarding Corporate Banking APIs. Now, any company can create an agreement which allows a service provider to use selected APIs and accounts on their behalf!</p>
<h3>OP Corporate Service Provider API helps you manage your mandates</h3>
<p>A service provider mandate allows you to use OP Corporate Banking APIs on behalf of another company. As a service provider, you can use the customer company’s OAuth credentials. However, you will still use your own certificates (MTLS).</p>
<p>To help service providers automate their processes for mandate handling, we have published new OP Corporate Service Provider API. It enables you to</p>
<ul class="opux-bullet-list">
<li>retrieve all valid service provider mandates granted to your company</li>
<li>retrieve mandate details for an individual customer company</li>
<li>retrieve or renew a customer company’s OAuth credentials used in API traffic.</li>
</ul>
<p><a class="opux-inline-link" title="/products/banking/docs/op-corporate-service-provider-api" href="/products/banking/docs/op-corporate-service-provider-api">Read the API documentation</a></p>
<h3>How to use OP’s APIs as a service provider</h3>
<p>To get started, register your company as a service provider on OP API Admin. Once your registration is complete, your customer companies will be able to authorize you to use OP Corporate Banking APIs on their behalf.</p>
<p>Next, your customer needs to grant a mandate to you. To achieve this, the customer must create an API agreement on OP API Admin, where they will also select the APIs and accounts included in the mandate.</p>
<p>Once the API agreement is signed, use the new Corporate Service Provider API to retrieve your customer company’s OAuth credentials. With the credentials, you can start using Corporate Banking APIs on their behalf, so you’re good to go!</p>
<p>If you want to test the new feature in sandbox, please contact us at <a class="opux-inline-link" title="mailto:corp-payment-APIs@op.fi" href="mailto:corp-payment-APIs@op.fi" rel="noreferrer">corp-payment-APIs@op.fi</a>.</p>
<h3>Real-time banking with OP Corporate Banking APIs</h3>
<p>OP Corporate Banking APIs form a steadily growing set of APIs that are designed to streamline company’s financial administration. Forget about batch runs - let your payments and transaction data flow in real time with OP’s modern REST APIs. With them, you can fully automate your payment transfers and transaction queries.</p>
<p>In addition to the Service Provider API, we currently offer four Corporate Banking APIs:</p>
<ul class="opux-bullet-list">
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">OP Corporate Account Data API</a>: view up-to-date account balances in your own app and retrieve account transactions whenever you need them.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">OP Corporate Payment API</a>: initiate payments from an app using your company’s account – no need to wait for the next batch run.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-transaction-filter-api" href="/products/banking/docs/op-corporate-transaction-filter-api">OP Corporate Transaction Filter API</a>: query your corporate account transactions using selected search filters.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-refund-api" href="/products/banking/docs/op-corporate-refund-api">OP Corporate Refund API</a>: refund payments based on the details of the original received payment without having to find out the original payer’s account number.</li>
</ul>
<p>All four APIs are available in production. <a class="opux-inline-link" title="https://www.op.fi/corporate-customers/payment-transfers-and-cash-management/corporate-banking-api" href="https://www.op.fi/corporate-customers/payment-transfers-and-cash-management/corporate-banking-api" target="_blank" rel="noopener noreferrer">Read more about the benefits and use cases of all our Corporate Banking APIs on op.fi.</a></p>
<p>We’re working on new APIs all the time. <a class="opux-inline-link" title="/newsletter" href="/newsletter">Subscribe to our newsletter</a> and you’ll be the first to know about our new releases!</p>

OP Online Payment takes e-commerce to the next level with its new multi-bank feature. It allows merchants to collect credit transfers from customers of all Finnish banks – with just one e-payment solution.

Collect online payments from all Finnish banks with one API

<div>
<div class="markdown-container">
<div>
<p>OP Online Payment is the modern, state-of-the-art replacement for Finland’s favorite e-payment instrument, OP online payment button (<em>verkkomaksupainike</em>). With the latest update, we’re announcing a new multi-bank feature: with one simple integration, your store can offer payment methods covering every Finnish bank.</p>
<h3>Better customer experience wrapped in modern REST API technology</h3>
<p>In Finnish e-commerce, the online payment button is the most popular payment method by far. OP payment button, the most used e-payment option, was launched in 2001 and can be found in all Finnish online stores. That makes it a very familiar service for Finnish consumers.</p>
<p>OP Online Payment, the successor to OP payment button, comes with the same core functionalities as the old service, but it has been upgraded to meet modern standards both in security and customer experience. Well-established technologies, specifically JSON and REST, make integration to your systems easier than ever. For more technical details, see the <a class="opux-inline-link" title="/products/banking/docs/rest-api" href="/products/banking/docs/rest-api">REST API documentation</a>.</p>
<p>Just like before, OP Online Payment supports refunding payments partially or completely. But we’ve added a completely new optional endpoint that helps you when the payer doesn’t return to the webstore after paying – for example, if the payer closes their browser after the bank informs them about the success of the payment. With the <a class="opux-inline-link" title="/products/banking/docs/merchant-callback-api" href="/products/banking/docs/merchant-callback-api">Merchant Callback endpoint</a>, you can check the status of the payment even in these cases.</p>
<p>Additionally, we recently published a new online payment method: OP Lasku. It’s a consumer financing option that connects seamlessly with the OP Online Payment's user flow. Together, OP Online Payment and OP Lasku form an outstanding payment experience with payment options that suit the needs of any customer.</p>
<p><a class="opux-inline-link" title="https://www.op.fi/yritykset/rahoitus/myynnin-rahoitus/verkkokaupan-rahoitus" href="https://www.op.fi/yritykset/rahoitus/myynnin-rahoitus/verkkokaupan-rahoitus" target="_blank" rel="noopener noreferrer">Learn more about OP Lasku on op.fi (in Finnish)</a></p>
<h3>Multi-bank feature brings Finland’s payment buttons to you</h3>
<p>Until now, online stores have had to connect to each bank separately to collect credit transfer payments. That means multiple integrations to multiple systems that all work differently – which can be burdensome.</p>
<p>To make e-payment integration easier for our merchant customers, we have enhanced OP Online Payment with a multi-bank feature that brings payment buttons from all Finnish banks to you.</p>
<p>This new feature connects your store to the browser flows of all other Finnish banks, so your customer always has access to their preferred payment method - and you only have one integration to worry about. With support for refunds and merchant callbacks, the multi-bank feature makes things incredibly simple and hassle-free!</p>
<p>The multi-bank feature is an add-on service that can be separately agreed upon with your OP cooperative bank. Testing the feature in sandbox is free of charge. We have added detailed onboarding instructions to the <a class="opux-inline-link" title="/products/banking/docs/rest-api" href="/products/banking/docs/rest-api">REST API documentation</a>.</p>
<p><a class="opux-inline-link" title="https://www.op.fi/corporate-customers/payments-and-cash-management/merchant-services/op-online-payment" href="https://www.op.fi/corporate-customers/payments-and-cash-management/merchant-services/op-online-payment" target="_blank" rel="noopener noreferrer">Read more about OP Online Payment on op.fi</a></p>
</div>
</div>
</div>

As businesses strive for efficiency and automation, refunding incorrect and unknown payments remain a source of manual labor. OP Corporate Refund API brings an up-to-date solution to the problem.

Get your refunds right with no manual work

<p>OP Corporate Refund API allows our corporate customers to refund erroneous payments in an easy, simple and efficient way. Instead of slow, manual work and contacting the payers personally, companies are now able to automate the whole process.</p>
<p>The benefits are evident for all parties: the companies save time and other resources, and the original debtor gets their money back faster.</p>
<p>Just like our previous Corporate Banking APIs, the Corporate Refund API is built using well-known technologies such as JSON, REST and OAuth 2.0, making integration to your systems smooth. For more technical details, see the <a class="opux-inline-link" title="/products/banking/docs/op-corporate-refund-api" href="/products/banking/docs/op-corporate-refund-api">API documentation</a>.</p>
<h3>Return payments effortlessly</h3>
<p>Large companies with high inbound payment volumes often receive erroneous payment transactions. Sometimes the amount is incorrect. Occasionally the payment was meant for someone else and the payer mistyped the account number. Incorrect or unrecognized payments can’t be balanced with receivables.</p>
<p>In Finland, the receiver can’t usually see the account number of the payer, which has made sorting and refunding them a time-consuming process with a lot of manual work. A company has had to contact the payer personally to request their account number. Usually, the only available contact information is a mail address, so the only option is to resort to paper mail. At worst, it takes up to several weeks for the refund to be credited.</p>
<p>With the new Corporate Refund API, we’re bringing the refund processes to this decade – no more manual investigation and snail mail to customers. From now on, everything is automatic: you can initiate a refund using only the data of the original transaction. We'll take care of the rest and return the amount back to the original payer.</p>
<h3>Sandbox and production APIs available now</h3>
<p>As always, we provide a sandbox version that is available to all interested developers free of charge. Contact us at <a class="opux-inline-link" title="mailto:corp-payment-APIs@op.fi" href="mailto:corp-payment-APIs@op.fi" rel="noreferrer">corp-payment-APIs@op.fi</a>, and we’ll help you access the sandbox.</p>
<p>To onboard in production, go to <a class="opux-inline-link" title="https://valtuutus.op.fi/corporate-api-admin/" href="https://valtuutus.op.fi/corporate-api-admin/" target="_blank" rel="noopener noreferrer">OP API Admin</a>, our self-service portal for Corporate Banking APIs, and follow the instructions. After signing the contract, you’ll get everything you need to start using the API.</p>
<p>Remember to check out our previous Corporate Banking APIs too:</p>
<ul class="opux-bullet-list">
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">OP Corporate Account Data API</a> enables you to view an up-to-date account balance in your own app and retrieve account transactions whenever you need them.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">OP Corporate Payment API</a> allows you to initiate payments from an app using your company’s account – no need to wait for the next batch run.</li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-transaction-info-api" href="/products/banking/docs/op-corporate-transaction-info-api">OP Corporate Transaction Filter API</a> lets you query your corporate account transactions using selected search filters.</li>
</ul>
<p>Read more about the benefits and use cases of all our <a class="opux-inline-link" title="https://www.op.fi/corporate-customers/payment-transfers-and-cash-management/corporate-banking-api" href="https://www.op.fi/corporate-customers/payment-transfers-and-cash-management/corporate-banking-api" target="_blank" rel="noopener noreferrer">Corporate Banking APIs on op.fi</a>.</p>

Automate your company’s refund processes with OP Corporate Refund API

The latest addition to the OP Corporate Banking API product family is designed to help companies make better use of real-time transaction data. The API opens up possibilities for improving services in many areas, including sales and logistics.

New OP Corporate Transaction Filter API now in sandbox

<p>OP Corporate Transaction Filter API delivers real-time, filtered transaction data to any application used in your company.</p>
<p>Transaction Filter API is now available for testing in sandbox environment. Check out the <a class="opux-inline-link" title="/products/banking/docs/op-corporate-transaction-filter-api" href="/products/banking/docs/op-corporate-transaction-filter-api">API documentation</a> to learn more about the technical details, and request access at <a class="opux-inline-link" title="mailto:corp-payment-APIs@op.fi" href="mailto:corp-payment-APIs@op.fi" rel="noreferrer">corp-payment-APIs@op.fi</a>. We will release the production version of the API later this spring.</p>
<h3>Get real-time data to all your applications and improve customer experience</h3>
<p>Today in most companies, transaction data is delivered from the bank to applications used in the financial department. From there, the data flows to other applications in the company, and in many cases, this takes a lot of time. Problems arise when users outside the financial department need to see the account data in real time. Transaction Filter API is designed to bridge this gap by delivering <strong>up-to-date transaction data to any application</strong>.</p>
<p>But real-time account data alone is not enough. Many companies have large transaction volumes, and searching for a specific payment can be time-consuming. Filtering transactions based on different criteria increases efficiency in many business cases.</p>
<p>As an example, customer service often needs to check whether a customer has made the payment before they activate a service or send a product. Other areas that have uses for real-time transaction data include, for example, sales and logistics.</p>
<p>Transaction Filter API allows a company to make <strong>filtered account transaction queries</strong>. The API returns transactions that match the criteria given in the query, such as payment date, amount, reference or message. The complete list of available filters is presented in the <a class="opux-inline-link" title="/products/banking/docs/op-corporate-transaction-filter-api" href="/products/banking/docs/op-corporate-transaction-filter-api">API documentation</a>.</p>
<p>With a simple integration, you can update your CRM, ERP or any other system in real time. Or create a search UI for employees who need to check specific transactions - whatever best suits your needs!</p>
<h3>Don’t forget about our other Corporate Banking APIs</h3>
<p>OP Corporate Banking APIs saw their <a class="opux-inline-link" title="/articles/corporate-banking-apis-in-sandbox" href="/articles/corporate-banking-apis-in-sandbox">first sandbox launch in June 2019</a> with two APIs: <a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">OP Corporate Account Data API</a> and <a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">OP Corporate Payment API</a>. They have been <a class="opux-inline-link" title="/articles/op-corporate-banking-apis-launched-in-production" href="/articles/op-corporate-banking-apis-launched-in-production">in production since December</a> and the first experiences have been promising.</p>
<p>When you want to adopt one or more of our Corporate Banking APIs into use in production, go to <a class="opux-inline-link" title="https://valtuutus.op.fi/corporate-api-admin/authorize/#/" href="https://valtuutus.op.fi/corporate-api-admin/authorize/#/" target="_blank" rel="noopener noreferrer">OP API Admin</a>, where you can create and confirm service agreements.</p>
<p>We’re working on expanding the Corporate Banking API product family even further this year. <a class="opux-inline-link" title="/newsletter" href="/newsletter">Subscribe to our newsletter</a> and you’ll be the first to know about our new releases!</p>

Find transactions in real time from your company’s account data

Kickstart the new decade by streamlining your company's financial routines! Our two new APIs mark the beginning of the new OP Corporate Banking API product family that will expand to cover a wide variety of corporate customer needs.

OP Corporate Banking APIs launched in production

<p>OP Corporate Banking APIs help you improve your company's financial administration: you can get real-time account data and automate payment processes. The APIs support the most common types of corporate euro accounts. They are designed for machine-to-machine interaction with no human intervention required.</p>
<p><a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">OP Corporate Account Data API</a> allows you to:</p>
<ul class="opux-bullet-list">
<li>get a list of the company’s accounts and balances</li>
<li>get more detailed information on a single account</li>
<li>get transactions on a single account</li>
</ul>
<p>With <a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">OP Corporate Payment API</a>, you can</p>
<ul class="opux-bullet-list">
<li>initiate SEPA payments from the company’s own accounts</li>
</ul>
<p>Learn more about <a class="opux-inline-link" title="https://www.op.fi/corporate-customers/payment-transfers-and-cash-management/corporate-banking-api" href="https://www.op.fi/corporate-customers/payment-transfers-and-cash-management/corporate-banking-api" target="_blank" rel="noopener noreferrer">OP Corporate Banking APIs and their use cases on op.fi</a>.</p>
<p>The APIs have been available for testing in our sandbox since June 2019. At the same time, we have been actively piloting with selected partners in production. One of our pilot partners has been the Finnish company SuoraTyö whose goal is to automate and speed up salary payments by using OP Corporate Banking APIs. Read more about <a class="opux-inline-link" title="https://op.media/yrityselama/yrittajyys/suoratyon-tarina-osuu-suoraan-tyon-murrokseen%3A-api-rajapintojen-kautta-keikkatyolainen-saa-palkan-heti-tililleen-5a2448991685441aa1ef67e645d56510" href="https://op.media/yrityselama/yrittajyys/suoratyon-tarina-osuu-suoraan-tyon-murrokseen%3A-api-rajapintojen-kautta-keikkatyolainen-saa-palkan-heti-tililleen-5a2448991685441aa1ef67e645d56510" target="_blank" rel="noopener noreferrer">SuoraTyö and their collaboration with OP on op.media (in Finnish)</a>.</p>
<h3>Easy access to account data and payments</h3>
<p>Integration interfaces are nothing new in corporate banking, as the so-called Web Services channel has connected banks and companies for a long time. So why did we embark on creating the APIs?</p>
<p>APIs are simply a better fit for the modern world than the bank connection solutions of old. For example, payment processing doesn’t need to wait for the next batch run anymore: with a modern API solution, every payment can be made from an account right away. In addition, retrieving up-to-date information on transactions and account balances becomes much easier.</p>
<p>APIs create a better developer experience. It’s easier and faster to develop services on top of RESTful APIs. RESTful APIs are widely known and used, which makes it easier for a company to find experts to work with them.</p>
<p>But not only are things easier for the developer – making service agreements becomes smoother with APIs, as we now provide a completely digital onboarding. No more printing, signing and scanning papers; you can do everything by yourself in a few minutes – it’s simple and efficient!</p>
<h3>Fully digital onboarding with OP API Admin</h3>
<p>The best way to get started is to try out the APIs in our sandbox environment. Testing is free of charge to any interested developer. Send us an email at <a class="opux-inline-link" title="mailto:corp-payment-APIs@op.fi" href="mailto:corp-payment-APIs@op.fi" rel="noreferrer">corp-payment-APIs@op.fi</a> and we’ll take you from there.</p>
<p>When you’re done with testing in sandbox and want to start developing for real, go to <a class="opux-inline-link" title="https://valtuutus.op.fi/corporate-api-admin/" href="https://valtuutus.op.fi/corporate-api-admin/" target="_blank" rel="noopener noreferrer">OP API Admin</a>, our self-service portal for production onboarding to our Corporate Banking APIs. OP API Admin can be accessed by anyone authorized to sign on behalf of a company.</p>
<p>OP API Admin asks you to select which Corporate Banking APIs and which bank accounts you want to access in your application. Then, you will create and confirm a service agreement.</p>
<p>Once the agreement has been signed, OP API Admin allows you to generate the API keys and certificates that you need to start production use. At this point, you’re ready – it’s time to start streamlining your company’s finance routines!</p>
<h3>SEPA Instant Credit Transfers and other new features coming soon</h3>
<p>This is only the beginning of the OP Corporate Banking API family. We are working hard to bring you the best possible Corporate Banking APIs, and the next batch of updates is already in sight.</p>
<p>One of the upcoming improvements is the extension of OP Corporate Payment API with a new endpoint: SEPA Instant Payment. As payments begin to flow in real time, banking services must evolve accordingly. The new endpoint will allow initiating <a class="opux-inline-link" title="https://www.op.fi/corporate-customers/payments-and-cash-management/invoicing-and-incoming-payments/incoming-payments" href="https://www.op.fi/corporate-customers/payments-and-cash-management/invoicing-and-incoming-payments/incoming-payments" target="_blank" rel="noopener noreferrer">SEPA Instant Credit Transfers</a>, transferring funds from one account to another in a matter of seconds – any time of the day, any day of the year. The endpoint is available in sandbox now – try it out and let us know what you think!</p>
<p>But we’re not stopping there. <a class="opux-inline-link" title="/newsletter" href="/newsletter">Subscribe to the OP Developer newsletter</a> to stay updated on our latest releases and new features!</p>

Two new premium APIs available for corporate account data and payments

PSD2 - what’s all the fuss about? How can developers, FinTechs and other companies take advantage of the regulation? Read a quick recap about the hottest initialism in the financial industry.

OP's PSD2 APIs up and running in production

<h4>Promoting innovation in Europe</h4>
<p>September 14, 2019, is a date that’s been on the lips of many in the financial industry for a good while now. That’s when the so called PSD2 (the Second Payment Services Directive) regulation enters fully into force in EU and the transition period is over. But what exactly does PSD2 regulate?</p>
<p>At its core, PSD2 is about strengthening consumer rights and security: from September 14th, electronic payments (with a few exceptions) require strong customer authentication. Other noteworthy improvements include a ban on extra fees for using Visa or Mastercard and a decreased consumer liability for card abuse, from 150 to 50 euros in the case of minor or ordinary negligence.</p>
<p>Alongside consumer rights, PSD2 is aimed at promoting innovation and competition in the banking sector. All banks must provide Third-Party Providers (TPPs) a method for accessing transaction and account data, as well as for initiating payments on behalf of consumers.</p>
<p>These TPPs are called Account Information Service Providers (AISP) and Payment Initiation Service Providers (PISP). They will be able to offer completely new kinds of services to consumers, such as aggregating consumer’s account information from different banks into one single application. Naturally, a TPP always needs to acquire appropriate licenses and the customer’s consent before getting access to anyone’s data.</p>
<p>To meet the requirements of the regulation, OP provides three PSD2 API Products: <a class="opux-inline-link" title="/products/banking/docs/op-psd2-pis-api-v1" href="/products/banking/docs/op-psd2-pis-api-v1">Payment Initiation Service (PIS)</a>, <a class="opux-inline-link" title="/products/banking/docs/psd2-ais" href="/products/banking/docs/psd2-ais">Account Information Service (AIS)</a> and <a class="opux-inline-link" title="/products/banking/docs/psd2-cof" href="/products/banking/docs/psd2-cof">Confirmation of Funds service (CoF)</a>. The sandbox environment is available free of charge to all developers. Production access requires valid licenses as well as appropriate eIDAS certificates. You can read more about the requirements and instructions at the end of this article.</p>
<h4>PSD2 is shifting mindsets in banking</h4>
<p>Of all the changes brought about by PSD2, allowing access to transaction and payments is likely to impact the industry the most. Even if we don’t immediately see dozens of new banking applications, the regulation has ushered in a new way of thinking: the world of financial services is transforming into a platform economy at a new pace.</p>
<p>Traditionally, banking has had high barriers to entry, and a few giant corporates have dominated the industry. PSD2, together with other recent regulation and legislation, has forced banks to rethink their business models and assess how and with whom to collaborate to provide increased value to customers in a transforming market.</p>
<p>OP sees open banking as a great opportunity to boost our innovation by collaborating with third-party developers. This will result in a win-win-win situation. Firstly, consumers get new, innovative services. Second, our partners benefit from accessing our vast customer base and our diversified offering of API Products that open new business opportunities. Finally, we at OP will be able to secure our place in the digital ecosystems of the future, while providing better services for our customers.</p>
<p>For all of these reasons, our API offering goes beyond the scope of PSD2 regulation. You can browse all our API Products on our <a class="opux-inline-link" title="/docs" href="/docs">Docs page</a> – and the list keeps growing: we released our first premium API, <a class="opux-inline-link" title="/products/banking/docs/op-accounts-v3-0-api" href="/products/banking/docs/op-accounts-v3-0-api">Accounts V3.0</a>, in February 2019, and we followed up with sandbox releases for <a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">Corporate Accounts</a> and <a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">Corporate Payments</a> in June 2019.</p>
<h4>Enough talk – How can I get started?</h4>
<p>Want to get your hands on our PSD2 APIs and try them for yourself? Follow these step-by-step instructions to access the sandbox environment:</p>
<ul class="opux-bullet-list">
<li><a class="opux-inline-link" title="/developers/login" href="/developers/login">Sign up</a> at OP Developer and <a class="opux-inline-link" title="/developers/apps/create" href="/developers/apps/create">create a new sandbox application</a> with the PSD2 APIs of your choice.</li>
<li>Get certificates. In case you don’t have valid eIDAS certificates yet at this point, you can <a class="opux-inline-link" title="/p/psd2-tpp-setup#certificates" href="/p/psd2-tpp-setup#certificates">use our TPP certificate generation API</a>, which is enough in our sandbox environment.</li>
<li>Finally, <a class="opux-inline-link" title="/p/psd2-tpp-setup#tpp-registration" href="/p/psd2-tpp-setup#tpp-registration">register as a TPP</a> and you’re good to go.</li>
</ul>
<p>Once you’re done with testing, you may want to move on to production. You don’t need to create a new developer application, as when testing the APIs in sandbox.</p>
<ul class="opux-bullet-list">
<li>First, <a class="opux-inline-link" title="/p/psd2-info#how-can-my-company-register-as-an-aisp-andor-pisp" href="/p/psd2-info#how-can-my-company-register-as-an-aisp-andor-pisp">apply for an AISP/PISP license</a> at your national financial authority (e.g. <a class="opux-inline-link" title="https://www.finanssivalvonta.fi/en/regulation/regulatory-framework/psd2/" href="https://www.finanssivalvonta.fi/en/regulation/regulatory-framework/psd2/" target="_blank" rel="noopener noreferrer">FIN-FSA</a> in Finland).</li>
<li>Get QWAC and QSEAL certificates from a <a class="opux-inline-link" title="https://webgate.ec.europa.eu/tl-browser/#/" href="https://webgate.ec.europa.eu/tl-browser/#/" target="_blank" rel="noopener noreferrer">trust service provider</a>.</li>
<li>When you have the necessary licenses and certificates, send us an email at <a class="opux-inline-link" title="mailto:tpp-support@op.fi" href="mailto:tpp-support@op.fi" rel="noreferrer">tpp-support@op.fi</a>, and we will take you from there.</li>
</ul>
<p>To make your work easier, we have created tons of resources for you. Firstly, we offer detailed workflows for each of the three PSD2 APIs: <a class="opux-inline-link" title="/p/paymentauthorizationflow" href="/p/paymentauthorizationflow">Payment Initiation Service</a>, <a class="opux-inline-link" title="/p/accountauthorizationflow" href="/p/accountauthorizationflow">Account Initiation Service</a> and <a class="opux-inline-link" title="/p/cofauthorizationflow" href="/p/cofauthorizationflow">Confirmation of Funds service</a>. We also provide a <a class="opux-inline-link" title="https://example.successful-personal-finances.business/accounts" href="https://example.successful-personal-finances.business/accounts" target="_blank" rel="noopener noreferrer">TPP Demo App</a> that guides you through the deployment of the PSD2 APIs. The source code is available on <a class="opux-inline-link" title="https://github.com/op-developer" href="https://github.com/op-developer" target="_blank" rel="noopener noreferrer">GitHub</a>. And finally, there’s a <a class="opux-inline-link" title="https://github.com/op-developer/psd2-registration-example" href="https://github.com/op-developer/psd2-registration-example" target="_blank" rel="noopener noreferrer">command line app</a> for TPP registration which we highly recommend using, as it will help you with your app integration.</p>
<p>In case you need any support, don’t hesitate to contact us at <a class="opux-inline-link" title="mailto:tpp-support@op.fi" href="mailto:tpp-support@op.fi" rel="noreferrer">tpp-support@op.fi</a>. Happy developing!</p>

PSD2: Innovation and improved consumer rights in account and payment services

New legislation, new complicated acronyms, new services supplanting the old. eIDAS, together with Finnish national legislation is about to bring an end to TUPAS. Why is this happening, and what will be the future of strong electronic identification?

More security and less bureaucracy in user authentication

<p>For a long time, TUPAS has been the standard solution for strong digital identification in Finland. Developed and maintained by Finance Finland, its time is coming to an end. TUPAS will cease to function at the end of September 2019, forcing all application providers hoping to use strong customer identification to update and move on to a new ID broker.</p>
<p>So what’s the future for digital identification in Finland? Is this just an annoying technical update, or do companies and private citizens stand to gain something in the trade?</p>
<h4>From TUPAS to Finnish Trust Network</h4>
<p>The reasons for abandoning TUPAS can be summarized with one word: security. Data is the new oil, and in the recent years, companies, the public sector and private citizens alike have woken up to the value and possibilities of data. Data security and privacy have been in the center of lively debate, inspiring and inspired by regulation on the allowed uses of the wealth of data available to companies today. GDPR in the EU is a prime example of steps taken to provide standards and legal frameworks for the fair use of data.</p>
<p>eIDAS (<strong>e</strong>lectronic <strong>Id</strong>entification, <strong>A</strong>uthentication and Trust <strong>S</strong>ervices) is another such step. It aims to regulate the standards for electronic identification and trust services across the entirety of the EU, while also laying out heightened technical requirements for such services. On top of this, Finnish laws on strong digital identification were recently updated to meet the needs of modern digital markets.</p>
<p>The new set of requirements is above and beyond the scope of TUPAS, which lacks many security features we now consider crucial. As an example, the social security number of TUPAS users is passed through without encryption. To fix these shortcomings, a new national framework was established: the Finnish Trust Network.</p>
<p>The Finnish Trust Network has two types of operators: the so-called Identification Device Providers and Identification Brokers. Identification Device Providers' role stays largely unchanged, as they continue to issue identification devices. In Finland, this group currently consists of banks (bank credentials), teleoperators (Mobile ID), and the Population Register Centre (Citizen Certificates).</p>
<p>On the other hand, Identification Brokers connect applications to Identification Device Providers. This new role acts as an aggregator of identification credentials. Brokers can be banks – such as OP – or any other companies that get approval from Traficom (Finnish Transport and Communications Agency).</p>
<h4>Cutting bureaucracy, simplifying solutions</h4>
<p>As new legislation pushes the security of services forward, it also enables better services. For service providers, integrating strong digital authentication becomes less cumbersome. While the change may cause some extra hassle in the short term, in the long run the Finnish Trust Network will significantly decrease the amount of bureaucracy.</p>
<p>Instead of having to deal with multiple different identification device providers, an application provider can now simply choose one identification broker and get all the same features as before with one single integration and one contract. As Finnish Trust Network obliges all brokers to offer same identification devices, brokers will compete for market share with different pricing strategies, developer support, service reliability, and ease of integration.</p>
<p>If you’re an application provider with needs for strong customer authentication and you haven’t begun to transfer authentication yet, it’s time to act. For an easy way to get started you can contact your own OP branch office.</p>
<p><a class="opux-inline-link" title="/products/identity" href="/products/identity">OP Identity Service Broker</a> uses OIDC (Open ID Connect), similarly to our PSD2 APIs. OIDC is an industry standard protocol for identifying and authenticating users. OP Identity Service Broker API is easy to set up, and we offer extensive documentation to support the integration work.</p>
<h4>What about end users?</h4>
<p>For a typical consumer, the change is not big. End users who are used to authenticating themselves online using e.g. their bank credentials can keep on doing so. For many users, the shift may even go unnoticed.</p>
<p>With time, an additional benefit will materialize. eIDAS enables cross-border identification services with notified national identification methods when accessing public services in EU member states, enhancing mobility within the EU. However, at the moment <a class="opux-inline-link" title="https://ec.europa.eu/cefdigital/wiki/display/EIDCOMMUNITY/Overview+of+pre-notified+and+notified+eID+schemes+under+eIDAS" href="https://ec.europa.eu/cefdigital/wiki/display/EIDCOMMUNITY/Overview+of+pre-notified+and+notified+eID+schemes+under+eIDAS" target="_blank" rel="noopener noreferrer">few EU states offer notified identification methods</a>, and as the notification process takes some time, end users will see these benefits later on.</p>
<h4>Service providers assuming new roles</h4>
<p>Many Identification Device Providers, including OP, offer also brokering services, assuming double roles as both Device Providers and Service Brokers. Finance Finland has reported that <a class="opux-inline-link" title="http://www.finanssiala.fi/uutismajakka/Sivut/Luottamusverkosto,-TUPAS-ja-tunnistamisen-muutokset.aspx" href="http://www.finanssiala.fi/uutismajakka/Sivut/Luottamusverkosto,-TUPAS-ja-tunnistamisen-muutokset.aspx" target="_blank" rel="noopener noreferrer">no new applications have arrived for the role of Identification Device Provider</a>, which means that bank credentials are likely to remain the most popular method of identification.</p>
<p>But while identification devices are issued by familiar faces, new players have stepped up in brokering. As the field of electronic identification shifts, the role that banks and other service providers take on remains to be seen.</p>
<p>But whatever changes are coming in the network of identification service providers, one thing is certain: consumers win. On top of the data security and privacy features, end users get the convenience of using their preferred identification method in the future, too – at no additional cost.</p>

eIDas and Finnish Trust Network bring an end to TUPAS – is your company all set for the change?

OP is developing a set of new APIs to meet the requirements and needs of businesses. The first Corporate Banking APIs are now available for testing in our sandbox.

Corporate Banking APIs in sandbox

<p>Finnish businesses have been making use of electronic banking services via ERPs and finance systems for well over a decade. As such, they have much experience with financial integration interfaces.</p>
<p>Now, we are about to enter a new era in bank connectivity. We have just launched the first set of RESTful APIs for corporate banking. The two new API products are:</p>
<ul class="opux-bullet-list">
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-account-data-api" href="/products/banking/docs/op-corporate-account-data-api">Corporate Accounts</a></li>
<li><a class="opux-inline-link" title="/products/banking/docs/op-corporate-payment-api" href="/products/banking/docs/op-corporate-payment-api">Corporate Payments</a></li>
</ul>
<p>Starting with these APIs, we will gradually release a wide-ranging set of Corporate Banking API products for corporations, software vendors and authorized third-party service providers.</p>
<h4>What changes from already existing transaction integration interfaces?</h4>
<p>In transaction banking, integration interfaces have long been business-as-usual. So what exactly will change with the release of our new Corporate Banking APIs?</p>
<p>Firstly, the new APIs are a step up in technology. Our Corporate Banking APIs are built using well-known, battle-tested technologies such as JSON, REST, OAuth 2.0, and PKI/MTLS - just to mention a few.</p>
<p>Second, we now welcome a broader range of partners to use the APIs. Until recently, transaction banking services have only been available to client corporations or their financial service providers. But from now on, third-party partners are welcome to develop first-class services for corporate clients.</p>
<p>Our new APIs are designed for helping create new ways of using corporate account and payment data. With services built on top of them, corporate customers will be able to manage and run their operations and financials better than before. As an example, clients will have better and faster access to data, tracking and notifications in addition to the obvious payments and account reporting.</p>
<p>Even as we move forward with new services, you don’t need to worry about your old integration solutions. The current Web Services channel will remain up and running for a long time. However, from now on all new transaction banking services will be developed as API services.</p>
<h4>Financial administration streamlined</h4>
<p>RESTful APIs are a modern and simple way for accessing bank systems and services. By using APIs, developers get to hold the driver's seat in building new exciting services for end users.</p>
<p>The possibilities of OP’s APIs are many, and with them, you can create services that automate finance routines to the maximum. For example: you could fetch the details of an account transaction using the Corporate Accounts API. The transaction data at your disposal, you can trigger a payment creation and initiate the instant payment with the Corporate Payments API.</p>
<p>And how about missing details on an account transaction that can cause extra hassle in financial administration? Now it’s possible to develop an application, where an instant retrieval of account transactions triggers a notification of the missing details.</p>
<p>Solutions like these increase the level of automation and speed up time-to-market, allowing you to reap the benefits of a real-time economy. Eventually, both customers and employees will feel the difference.</p>
<h4>Developed for machine-to-machine interaction</h4>
<p>With the corporate user in mind, the new Corporate Banking APIs are designed for machine-to-machine interaction. Following frequent requests, we've implemented authentication and authorization measures that – unlike PSD2 APIs – require no human intervention.</p>
<p>Corporate Banking APIs differ from PSD2 APIs in other ways as well: for example, they do not require PSD2-type registration. But most importantly, the service range is considerably wider and it keeps on expanding! The two APIs currently available in the sandbox are only a start.</p>
<p>Remember to subscribe to our <a class="opux-inline-link" title="/newsletter" href="/newsletter">newsletter</a> to stay updated on our latest releases!</p>
<h4>Continuous collaboration with developers</h4>
<p>For us, it’s always important to develop our APIs in close collaboration with their users. We want to hear your feedback early on, so that we can ensure high developer experience in our products. We also want to encourage developers to adopt and test our APIs. To this end, we offer pilot partnership opportunities to companies with interesting business cases.</p>
<p>The discussion on our Corporate Banking APIs has been encouraging, and we've already agreed on a pilot partnership with one external partner in the summer.</p>
<p>What kind of Corporate Banking APIs would you like to use? Maybe you have a great business idea to pitch? Send us an email at <a class="opux-inline-link" title="mailto:api@op.fi" href="mailto:api@op.fi" rel="noreferrer">api@op.fi</a> – we are always interested in hearing feedback and discussing piloting opportunities!</p>

OP Corporate Banking APIs begin a new era in corporate banking services

As the end of TUPAS draws closer, OP offers a simple solution: an API that implements Strong Digital Identification with any Finnish digital ID. OP Identity Service Broker is now available in sandbox.

OP Identity Service Broker replaces TUPAS in 2019

<h2>OP Identity Service Broker replaces TUPAS in 2019</h2>
<p>Identifying end users is a necessity to any serious digital service. Until now, the go-to solution in Finland has been TUPAS. But with recent technological advances and legislative development, it no longer fulfils the criteria set for strong customer authentication.</p>
<p>Because of this, TUPAS' journey is coming to an end: in September 2019, the service will no longer be maintained. This means that all online services using it must update their authentication solution.</p>
<p>Read more about this change on <a class="opux-inline-link" title="http://www.finanssiala.fi/uutismajakka/Sivut/Sahkoista-tunnistamista-kaytt%C3%A4vien-uudistettava-ennen-lokakuuta.aspx" href="http://www.finanssiala.fi/uutismajakka/Sivut/Sahkoista-tunnistamista-kaytt%C3%A4vien-uudistettava-ennen-lokakuuta.aspx" target="_blank" rel="noopener noreferrer">Finance Finland's (FFI) article</a> (only in Finnish).</p>
<h3>Modern, secure and simple solution to digital identification</h3>
<p>OP Identity Service Broker is OP's response to the change. It is a modern, secure and simple solution to digital identification. With ISB, your customers can identify using either Mobile ID or bank credentials from almost any Finnish bank.</p>
<p>Even better, since we offer the entire network of credential providers, you don't need to manage contracts with each individual identity provider - we take care of everything.</p>
<p>The service includes almost all Finnish identity providers, and the list is growing. See our <a class="opux-inline-link" title="https://www.op.fi/corporate-customers/payments-and-cash-management/merchant-services/op-identity-service-broker" href="https://www.op.fi/corporate-customers/payments-and-cash-management/merchant-services/op-identity-service-broker" target="_blank" rel="noopener noreferrer">product page</a> for a list of authentication credentials currently available.</p>
<h3>In production in June 2019</h3>
<p>OP Identity Service Broker is currently available in sandbox, and with our <a class="opux-inline-link" title="https://github.com/op-developer/Identity-Service-Broker-API" href="https://github.com/op-developer/Identity-Service-Broker-API" target="_blank" rel="noopener noreferrer">technical documentation</a> you can start preparing your application right now. Adding to this, we've created an <a class="opux-inline-link" title="https://github.com/op-developer/Identity-Service-Broker-integration-example" href="https://github.com/op-developer/Identity-Service-Broker-integration-example" target="_blank" rel="noopener noreferrer">integration example</a> which will help you get started.</p>
<p>OP Identity Service Provider will enter production in June 2019. Be ahead of the curve and start developing now!</p>

All Finnish SCA credentials available via one API - OP Identity Service Broker now in sandbox

PSD2 APIs allow third-party software developers to provide banking services to OP's customers. The sandbox is open to all developers - with or without a PSD2 license.

PSD2 sandbox launched

<h2>PSD2 sandbox launched</h2>
<p>As of March 14 2019, PSD2 requires all banks to open their testing environments for PSD2 APIs. OP offers the following three API products:</p>
<ul class="opux-bullet-list">
<li>PSD2 Payment Initiation Service</li>
<li>PSD2 Account Information Service</li>
<li>PSD2 Confirmation of Funds Service</li>
</ul>
<p>The PSD2 APIs will become available in production to all licensed developers in September 2019 - at no additional cost.</p>
<p>Read more about this change in the financial industry on our <a class="opux-inline-link" title="/psd2" href="/psd2" rel="noreferrer">PSD2 page</a>.</p>
<h3>Quality, reliability, and guidance</h3>
<p>OP Developer invites you all to test our PSD2 APIs and integration in our sandbox!</p>
<p>We provide entry paths for both licensed and unlicensed developers, with or without the legally required PSD2 certificates. Although real data is not available in the sandbox yet, authentiation and authorization work just like in production.</p>
<p>We want to reach the same level of reliability with our PSD2 APIs as with OP’s other main services. And as with everything we do, developer experience is a top priority for us. This means offering high-quality documentation - just like with other OP's APIs.</p>
<p>To supplement our extensive documentation, our <a class="opux-inline-link" title="https://example.successful-personal-finances.business/" href="https://example.successful-personal-finances.business/" target="_blank" rel="noopener noreferrer">TPP Demo App</a> guides you through the deployment of the PSD2 APIs. The TPP Demo App is available on <a class="opux-inline-link" title="https://github.com/op-developer" href="https://github.com/op-developer" target="_blank" rel="noopener noreferrer">GitHub</a>, where you can find the source code for it. In addition, we've created a <a class="opux-inline-link" title="https://github.com/op-developer/psd2-registration-example" href="https://github.com/op-developer/psd2-registration-example" target="_blank" rel="noopener noreferrer">command line app</a> to help you with your app integration. We highly recommend using it.</p>
<h3>What do you think? Let’s work together!</h3>
<p>We want to develop our APIs with you. Our goal is to enter production on a limited scale in the summer 2019, and we want to make sure our APIs work as smoothly as possible by that time.</p>
<p>Therefore, we hope to receive a lot of feedback from you, as we are able to react and make changes now more easily than when the APIs are in production.</p>
<p>In addition, we are looking for a partner with whom to pilot the PSD2 APIs in production. Could it be you? Contact us at <a class="opux-inline-link" title="mailto:api@op.fi" href="mailto:api@op.fi" rel="noreferrer">api@op.fi</a> and let's discuss piloting opportunities!</p>
<h3>Beyond PSD2</h3>
<p>Alongside PSD2 APIs, we offer premium APIs for our partners. Premium APIs are developed in cooperation with our partners to cater to their specific needs, helping them offer cool and innovative services to their customers.</p>
<p>Be sure to check out our first premium API <a class="opux-inline-link" title="/products/banking/docs/op-accounts-v3-0-api" href="/products/banking/docs/op-accounts-v3-0-api" rel="noreferrer">Accounts V3.0</a> - and stay tuned for more!</p>

OP Developer invites all developers to test PSD2 APIs in our sandbox

Latest OP Developer news, API updates and business opportunities.

Articles