{"type":"doc","content":[{"type":"layoutSection","marks":[{"type":"breakout","attrs":{"mode":"full-width"}}],"content":[{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"bodiedExtension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"excerpt","parameters":{"macroParams":{"atlassian-macro-output-type":{"value":"INLINE"}},"macroMetadata":{"macroId":{"value":"f21e294c-b071-435a-ae80-f0030fa38588"},"schemaVersion":{"value":"1"},"title":"Excerpt"}}},"content":[{"type":"paragraph","content":[{"text":"Version: 1.1","type":"text"},{"type":"hardBreak"},{"text":"24-11-2020","type":"text"}]}]}]},{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"expand","attrs":{"title":"PDF export"},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Push the icon with three dots to the upper right","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Choose \"Export to PDF\"","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Wait until the PDF Export is done","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Push Download to download the PDF","type":"text"}]}]}]}]}]},{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"paragraph","content":[{"text":"EN / ","type":"text"},{"text":"NL","type":"text","marks":[{"type":"link","attrs":{"href":"https://betaalvereniging.atlassian.net/wiki/spaces/IIDIFMD/pages/588579051"}}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Terms and conditions","type":"text"}]},{"type":"paragraph","content":[{"text":"Terms and conditions for provision of the iDIN Merchant Implementation Guidelines:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Currence Services BV (also referred to as ‘Currence’) provides these iDIN Merchant Implementation Guidelines to Merchant Banks that distribute it to (potential) Merchants and Digital Identity Service Providers (DISPs) to enable them to implement iDIN;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Currence reserves the right to deny access to the iDIN Merchant Implementation Guidelines to (potential) Merchants and DISPs on reasonable grounds, in consultation with the Merchant Bank with which the Merchant/DISP has a contract;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"These Implementation Guidelines are explicitly and exclusively provided for the purpose mentioned above, and no other use is permitted. No rights can be derived from the information provided in this document or the accompanying notes. Currence is in no way liable for the consequences of later changes to the iDIN Standards or the iDIN Merchant Implementation Guidelines. If banks or other interested parties take decisions and/or make investments on the basis of the information that they obtain via the iDIN Merchant Implementation Guidelines, Currence accepts no liability for this in any way;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"These implementation Guidelines are based on the information in the iDIN Standards documents. In the event of any discrepancy between the iDIN Merchant Implementation Guidelines and the iDIN Standards documents, the text in the iDIN Standards documents prevails.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"For any questions concerning this document or requests for further information, please contact your Bank or DISP. ","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Contents","type":"text"}]},{"type":"expand","attrs":{"title":"..."},"content":[{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"maxLevel":{"value":"1"},"style":{"value":"none"}},"macroMetadata":{"macroId":{"value":"d02b52ee-7150-45dc-8fa0-4967ef71290d"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}}}}]},{"type":"rule"},{"type":"heading","attrs":{"level":1},"content":[{"text":"1. General Introduction ","type":"text"}]},{"type":"paragraph"},{"type":"expand","attrs":{"title":"..."},"content":[{"type":"heading","attrs":{"level":2},"content":[{"text":"1.1 Target audience","type":"text"}]},{"type":"paragraph","content":[{"text":"This document is intended for Merchants that want to connect to iDIN via their Acquirer. It provides a detailed description of all messages that are exchanged between the Merchant and the Routing Service of his Acquirer. The messages that are exchanged between the Routing Service of the Merchant’s Acquirer and the Validation Service of the Consumer’s Issuer are not of importance to the Merchant, and therefore will not be discussed in this document unless they have specific relevance.","type":"text"}]},{"type":"paragraph","content":[{"text":"This document is not Acquirer specific, which means that only generic specifications are mentioned in this guide. Information concerning Acquirer specific connections that are not standard and assistance that is provided by Acquirers to connect to iDIN are not part of this guide. Please contact your Acquirer for any information or support on an Acquirer specific connection or implementation.","type":"text"}]},{"type":"paragraph","content":[{"text":"To further support Merchants, Digital Identity Service Provider (DISPs) and Signing Service Providers (SSPs), software libraries have been developed in .NET, PHP and Java. Software libraries can be found on ","type":"text","marks":[{"type":"underline"}]},{"text":"github.com","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"http://github.com"}}]},{"text":" (via ","type":"text","marks":[{"type":"underline"}]},{"text":"https://www.idin.nl/softwarelibraries/","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"https://www.idin.nl/softwarelibraries/"}}]},{"text":") or you can contact your Acquirer about this for more information To receive updates on the software libraries please subscribe on ","type":"text","marks":[{"type":"underline"}]},{"text":"github.com","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"http://github.com"}}]},{"text":".","type":"text","marks":[{"type":"underline"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"1.2 Document structure","type":"text"}]},{"type":"paragraph","content":[{"text":"The document has the following structure:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 2: Introduction to iDIN and all parties involved in the process;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 3: Introduction to the various messages exchanged within the scope of iDIN and the overall structure of the exchanged messages;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 4: Overall message formats;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 5: Data dictionary: All parameters that are relevant to the Merchant within the iDIN environment;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 6: Directory protocol: Providing a list of participating Issuer banks;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 7: Transaction protocol: Requesting consumer authentication/attributes;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 8: Status protocol: Receiving consumer authentication/attributes;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 9: Error handling;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 10: Security and certificates;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Chapter 11: Presentation of iDIN on the Merchant’s website.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"1.3 Other references","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Title","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"Version","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"Issued by","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"AES, FIPS 197/ SO/IEC 18033-3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"-","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"FIPS/ISO","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Base16, Base32, and Base64 Data Encodings","type":"text"},{"type":"hardBreak"},{"text":"https://tools.ietf.org/html/rfc4648","type":"text","marks":[{"type":"link","attrs":{"href":"https://tools.ietf.org/html/rfc4648"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"Oct 2016","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"Network Working Group","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Base64 Content-Transfer-Encoding","type":"text"},{"type":"hardBreak"},{"text":"http://tools.ietf.org/html/rfc2045iDxsection-6.8","type":"text","marks":[{"type":"link","attrs":{"href":"http://tools.ietf.org/html/rfc2045#section-6.8"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"November 1996","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"Network Working Group","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"GUIDELINES ON ALGORITHMS USAGE AND KEY MANAGEMENT","type":"text"},{"type":"hardBreak"},{"text":"https://www.europeanpaymentscouncil.eu/document-library/guidance-documents/guidelines-cryptographic-algorithms-usage-and-key-management-0","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.europeanpaymentscouncil.eu/document-library/guidance-documents/guidelines-cryptographic-algorithms-usage-and-key-management-0"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"Version 1.1 approved 23 February 2009","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"EPC","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"ISO 9362, 8901 Standard","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"2014","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"ISO","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Multilingual European Subset 2 (MES-2) ","type":"text"},{"type":"hardBreak"},{"text":"Unicode.org","type":"text","marks":[{"type":"link","attrs":{"href":"http://Unicode.org"}}]},{"type":"hardBreak"},{"text":"http://www.utf8-chartable.de/unicode-utf8-table.pl","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.utf8-chartable.de/unicode-utf8-table.pl"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"15 April 2000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"CEN","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"NEN 1888_2002, NEN 5825_2002","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"2002","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"NEN","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Open SSL Library ","type":"text"},{"text":"http://www.openssl.org","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.openssl.org"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"March 2015","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"OpenSSL","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Security Assertion Markup Language (SAML) Core","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"2.0","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"OASIS","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"TLS Protocol version 1.1 ","type":"text"},{"type":"hardBreak"},{"text":"http://www.ietf.org/rfc/rfc4346.txt","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.ietf.org/rfc/rfc4346.txt"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"1.1, April 2006","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"IETF","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"TLS Protocol version 1.2 ","type":"text"},{"type":"hardBreak"},{"text":"http://www.ietf.org/rfc/rfc5246.txt","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.ietf.org/rfc/rfc5246.txt"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"1.2, August 2008","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"IETF","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"XML Signature Syntax and Processing","type":"text"},{"type":"hardBreak"},{"text":"https://www.w3.org/TR/xmldsig-core/","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.w3.org/TR/xmldsig-core/"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"Version 1.1, W3C Recommendation 11 April 2013","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"World Wide Web Consortium (W3C)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"XML Encryption Syntax and Processing, W3C Recommendation ","type":"text"},{"text":"https://www.w3.org/TR/xmlenc-core/","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.w3.org/TR/xmlenc-core/"}}]},{"text":"Overview.html#sec-EncryptedData","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/Overview.html#sec-EncryptedData"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"10 December 2002","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"World Wide Web Consortium (W3C)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"EPC guidelines for country specific information on provision of the CreditorID which is the same legal identifier as the LegalID (","type":"text"},{"text":"https://www.europeanpaymentscouncil.eu/document-library/guidance-documents/creditor-identifier-overview","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.europeanpaymentscouncil.eu/document-library/guidance-documents/creditor-identifier-overview"}}]},{"text":")","type":"text"},{"text":".","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"latest version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281.0]},"content":[{"type":"paragraph","content":[{"text":"European Payments Council (EPC)","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 1: References","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"1.4 Notational conventions","type":"text"}]},{"type":"paragraph","content":[{"text":"Messages and redirects are printed like ","type":"text"},{"text":"this","type":"text","marks":[{"type":"em"}]},{"text":", and data elements are printed like ","type":"text"},{"text":"this","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"1.5 Definitions of Internet and online banking","type":"text"}]},{"type":"paragraph","content":[{"text":"In this document there are many references to Merchant and Issuer websites or online environments. To facilitate mobile use of iDIN, these references must be supplemented with ‘..... or mobile website / mobile app’ where appropriate. For every instance where Internet or online related-terminology is used, please interpret this as including the mobile channel. Where mobile use of iDIN leads to specific requirements for iDIN, this is indicated separately in the text.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"1.6 Revisions","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"Version","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"Release date","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.00","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"paragraph","content":[{"text":"Initial version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"11","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" of August 2015","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.04","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Addition of error handling when the Issuer cannot provide the minimal set of Consumer attributes","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Adding the possibility to seperately request the Consumer gender by the Merchant","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Clarification on the format of DateTimestamp","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Note: No other versions have been published between v1.00 and v1.04. This is due to levelling of the version numbering with other documentation","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"23","type":"text"},{"text":"rd","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" of October 2015","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.041","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added recommendations for Merchant screens","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Update of the standard Consumer error messages","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Corrected the format of TransactionID in the Data-dictionary. This ID has 16 digits.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added some minor clarifications","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"22","type":"text"},{"text":"nd","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" of January 2016","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.05","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Re-arrangement of the Requested- and DeliveredServiceID bits","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Included telephone and email attributes","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enhancements and update of the Issuer front end text","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Removed Appendix B which contained all possible valid values of RequestedServiceID","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Changed minimum TLS version to be used by Merchant to 1.2","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Minor corrections and clarifications","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"30","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" of September 2016","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.051","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added examples and clarifications to consumer attributes","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"27","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" of January 2017","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.053","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added clarifications and more examples in the consumer attributes in Table 13","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"17","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" of February 2017","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.06","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added Section 0 to describe how Digital Identity Service Providers should register their Merchants","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added Section 0 to describe the optional deselecting and/or changing of the telephone number and/or email address by Consumers in the Issuer environment.","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"March 2017","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.07","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"paragraph","content":[{"text":"Changes with respect to the use of LoA2:","type":"text","marks":[{"type":"strong"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The use of LoA2 for iDIN is ceased. Changes have been made to §3.2.2.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Changes with respect to the character set used for consumer attributes:","type":"text","marks":[{"type":"strong"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Changes have been made to §5.4 footnote 6. Consumer initials are allowed to have letter-based characters like ligatures and digraphs (e.g. á, ç, Æ)","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Corrections:","type":"text","marks":[{"type":"strong"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Out of scope is removed from §2.2.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use case is changed into product type throughout the document.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The definition of the level of assurance “substantial” is added to §2.2","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"March 2018","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.08","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"paragraph","content":[{"text":"Role of DISP/Ondertekendienst (Signing Service Provider (SSP)) is added","type":"text"}]},{"type":"paragraph","content":[{"text":"Product type iDIN signature is added","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"May 2018","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.09","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added reference to EPC guidelines in CreditorID which is the same legal identifier als the LegalID","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"2. ","type":"text"},{"text":"added possibility to execute a mobile transaction in Safari View Controler and Chrome Custom Tabs","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"September 2020","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[151.0]},"content":[{"type":"paragraph","content":[{"text":"1.1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[382.0]},"content":[{"type":"paragraph","content":[{"text":"Added description on display demands for issuer list for iDIN signing","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"November 2020","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 2: Revision table","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"1.7 Changes from previous version","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.00","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Addition of error handling when the Issuer cannot provide the minimal set of Consumer attributes: Addition of the elements DeliverdServiceID and the 2","type":"text"},{"text":"nd","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" SAML status code in the AcquirerStatusRes that are both used to communicate to the Merchant whether the attributes are delivered conform the minimal set (see Section 5.5). This error handling is described in Section 12.4; ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Adding the possibility to separately request the Consumer gender by the Merchant: Added the possibility to request the consumer gender separately (using the RequestedServiceID), instead of being part of the group name attributes. This has impact on the number of valid combinations that can be made with the RequestedServiceID;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Clarification of the use of DateTimestamp (for all fields where DateTimestamp is used, such as the createDateTimestamp): Merchants are allowed to use zero to three decimals after the seconds for DateTimestamp elements in the messages they send to their Routing Service. DateTimestamps in messages from the Routing Service will always contain three decimals behind the seconds. See Table 10 for more information.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.04","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added recommendations for Merchant screens: This is described in chapter 8; ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Update of the standard Consumer error messages: This is described in chapter 5;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Format of TransactionID: In the Data Dictionary the TransactionID contained an error which has been corrected in this version. This ID consists of 16 digits; the first four digits are made up of the AcquirerID. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added some minor clarifications:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the format description of DateTimestamp in Table 10, clarification is added ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"YYYY must be the calendar year","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"24-hour notation must be used;","type":"text"}]}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the description of displaying the last login in Section 0 showing the time is replaced by showing the date and time. The rationale for this requirement has been added;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In Appendix B a column ‘product type’ is added which indicates the product type that belongs to each ServiceID;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In Section 1 a recommendation on the use of TLS has been added: Merchants are advised to use TLS version 1.1 or up. Use of version 1.0 is not recommended because it has become out-dated. ","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.041","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The structure of the bits in the RequestedServiceID and DeliveredServiceID has been re-arranged (see Section 0) to include telephone and email and to make room for (possible) new attributes. The re-arrangement does not have an impact on the numerical values of ServiceIDs, hence it is backwards compatible;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The consumer.telephone and consumer.email attributes are added in Table 13;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Update of Issuer front-end texts that are shown to the Consumer depending on which attributes are requested by the Merchant (see Section 0);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Appendix B has been removed. This Appendix included all the possible RequestedServiceID integer values. With the inclusion of telephone and email address this table would have become too large. The Excel ‘160529A_ServiceID_Calculator’ provided along this Implementation Guidelines provides an easy method to calculate the ServiceID;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the future out-dated TLS versions are no longer supported by the Routing Service. Therefore, the Merchant must use a minimum version of TLS 1.2 (see Section 1); ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Minor corrections and clarifications:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In Section 0 : added that the X509SubjectName element may be included by the Validation Service in the Signature element inside the Assertion;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added description in Section 3 on the optional use of xsi type definitions inside the AttributeValue elements;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Included the x509 data element in Table 11. The description of this element was missing;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Removed error codes SE2000 and changed error code SE2100 to SE2700. Neither error codes are used in iDIN;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Changed the time of attribute @NotOnOrAfter to be 30 seconds after the time in attribute @IssueInstant (see Table 28). It incorrectly stated it was 40 seconds;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Updated the encryption examples and the unencrypted example messages with namespace declarations. The namespace declarations were not shown in one encryption example and in the unencrypted attributes of the example messages;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The display of the last login by the Merchant to the Consumer in Section 0 has been changed from mandatory to strongly recommended;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Updated the LegalIDs in the example messages with valid check digits.","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.05","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added examples and clarifications to consumer attributes","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.053","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Added Section 0 to describe how Digital Identity Service Providers should register their Merchants. To prevent the name of the DISP in the Issuer screens and to ensure BINs are different for each Merchant DISPs need to register their Merchants in a specific way. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Added Section 0 to describe the optional deselecting and/or changing of the telephone number and/or email ","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.06","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The use of LoA2 for iDIN is ceased as of May 1","type":"text"},{"text":"st","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" All references to LoA2 have been deleted.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumer initials are allowed to have letter-based characters like ligatures and digraphs (e.g. á, ç, Æ). This is added to the document.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.07","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Description of the role of DISP/ Ondertekendienst (Signing Service Provider (SSP)) is added.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Product type signature is added to the document","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.08","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added reference to EPC guidelines in CreditorID which is the same legal identifier als the LegalID","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"2. ","type":"text"},{"text":"added possibility to execute a mobile transaction in Safari View Controler and Chrome Custom Tabs","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Changes compared to version 1.09","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Added description on display demands for issuer list for iDIN signing.","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"2 Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"This chapter gives a description of the general elements of iDIN.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"2.1 The four-corner model","type":"text"}]},{"type":"paragraph","content":[{"text":"The iDIN system is based on the ‘four-corner’ model. Figure 1 shows the roles in this model, along with their mutual primary relationships in the context of iDIN. The roles are those of Consumer, Merchant, Acquirer, Issuer, Routing Service and Validation Service and the Digital Identity Service Provider (DISP)[1]:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Consumer is fulfilled by a natural person, holding credentials provided by the Issuer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Merchant must be fulfilled by a legal entity that wishes to identify its Consumers in an authentic manner;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Acquirer must be fulfilled by a legal entity, providing iDIN services to its Merchants;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Issuer must be fulfilled by a legal entity, providing digital identities and credentials to its Consumers;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Routing Service must be fulfilled by an Acquirer or by a third party endorsed and contracted by an Acquirer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Validation service must be fulfilled by an Issuer or by a third party endorsed and contracted by an Issuer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of Digital Identity Service Provider (DISP) must be fulfilled by a third party, which is endorsed and contracted by the Acquirer as well as the Merchant.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The role of DISP /Ondertekendienst: a DISP certified for iDIN Ondertekenen. Within the iDIN Scheme we refer to such a party \"DISP / Ondertekendienst\" because it is a special (sub-) form of a DISP. Signing Service Provider (SSP) is used in the external communication and in the remainder of this document.","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.1.1 The relations between these roles","type":"text"}]},{"type":"paragraph","content":[{"text":"Both contractual and technical relations exist between the roles. These are described below.","type":"text"}]},{"type":"layoutSection","marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"Contractual relations:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant - Acquirer","type":"text","marks":[{"type":"underline"}]},{"text":": The Merchant has a contract with an Acquirer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumer - Issuer","type":"text","marks":[{"type":"underline"}]},{"text":": The Consumer has a contract with the Issuer. The identity related to this contract is used for identification, authentication, signing and provisioning of attributes of the Consumer; ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumer - Merchant","type":"text","marks":[{"type":"underline"}]},{"text":": The Consumer may use iDIN services at the Merchant domain to access the service supplied by the Merchant;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Acquirer - Issuer: ","type":"text","marks":[{"type":"underline"}]},{"text":"Bound by a license agreement with the iDIN scheme.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Technical relations:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant - Routing Service:","type":"text","marks":[{"type":"underline"}]},{"text":" The Merchant has a technical relation with the Routing Service. The Routing Service offers the Merchant the possibility of sending iDIN requests to a Validation Service. They exchange messages to this end;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Routing Service – Validation Service","type":"text","marks":[{"type":"underline"}]},{"text":": The Routing Service and Validation Service have an iDIN solution relationship. They exchange messages in this context;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumer – Validation Service:","type":"text","marks":[{"type":"underline"}]},{"text":" The Validation Service offers the Consumer the possibility of using their iDIN towards Merchants, by using the credentials issued by the Issuer.","type":"text"}]}]}]}]},{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"mediaSingle","attrs":{"layout":"center","width":100.0},"content":[{"type":"media","attrs":{"width":439,"id":"88c9f5b7-4395-4e20-9df5-0ce0b1ffec81","collection":"contentId-588284049","type":"file","height":293}}]},{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Figure 1: Four-corner model","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.1.2 Exceptions for DISPs or SSPs","type":"text"}]},{"type":"paragraph","content":[{"text":"In a model where a Merchant outsources its iDIN activities to a SSP or DISP[1] the contractual relation between ","type":"text"},{"text":"Merchant - Acquirer","type":"text","marks":[{"type":"underline"}]},{"text":" is replaced by the following relations:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant – SSP or DISP: ","type":"text","marks":[{"type":"underline"}]},{"text":"The Merchant has a contract with a DISP;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SSP or DISP - Acquirer: ","type":"text","marks":[{"type":"underline"}]},{"text":"The SSP or DISP has a contract with an Acquirer.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The technical relation between ","type":"text"},{"text":"Merchant - Acquirer","type":"text","marks":[{"type":"underline"}]},{"text":" is replaced by the following relations:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant – SSP or DISP: ","type":"text","marks":[{"type":"underline"}]},{"text":"The Merchant has a technical relation with the SSP or DISP. The SSP or DISP offers the Merchant the possibility of sending iDIN requests to a Routing and Validation Service. They exchange messages to this end;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SSP or DISP - Routing Service: ","type":"text","marks":[{"type":"underline"}]},{"text":"The SSP or DISP has a technical relation with the Routing Service. The Routing Service offers the SSP or DISP the possibility of sending iDIN requests to a Validation Service. They exchange messages to this end.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"[1] For due diligence reasons, the SSP or DISP may be subject to extra audits","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"2.2 iDIN services","type":"text"}]},{"type":"paragraph","content":[{"text":"This paragraph introduces the iDIN services offered to both Merchants and Consumers.","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN facilitates the following services:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Identification of Consumers based on Issuer issued credentials","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Age verification of Consumers based on Issuer issued credentials","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login of Consumers using Issuer issued credentials","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Signing of documents by Consumers using Issuer issued credentials","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Note","type":"text","marks":[{"type":"strong"}]},{"text":": In this document the iDIN process of providing one of the above services is referred to as an iDIN transaction.","type":"text"}]},{"type":"paragraph","content":[{"text":"The services provided by iDIN can be used by the Merchant, amongst others, to:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set-up new user accounts for Consumers in the Merchant’s domain based on the identification and/or attributes provided by the Issuer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login of existing users that created their account with iDIN, or connected an existing account with iDIN;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Age verification.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Signing of documents","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The level of assurance for iDIN is “Substantial”. This has been determined in accordance with the iDIN Rules & Regulations and is based on the eIDAS EU Regulation 2015 / 1502. The EU Regulation sets requirements for, among other things, identifying the consumer, the authentication tools and the use thereof. These requirements have been included in the iDIN Rules & Regulations. This roughly corresponds to the older STORK assurance level LOA3, which is still used in this technical standard. The level of assurance doesn’t relate to interoperability or cross border acceptance of iDIN.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"2.3 iDIN process","type":"text"}]},{"type":"paragraph","content":[{"text":"At the Merchant website the Consumer initiates the process by selecting iDIN for authentication/provisioning of attributes and/or signing of documents, and subsequently selects an Issuer from the Issuer list. The Consumer will then be forwarded to his/her Issuer’s secure environment where he/she can continue with the Issuer’s authentication process (based on the credentials that were issued to the Consumer by the Issuer). After successfully authenticating at the Issuer, the Consumer can approve or cancel the iDIN transaction. The Consumer will then be redirected back to the Merchant website. The Merchant receives the requested authentication/attributes and or the consumers' signature if the Consumer has approved the transaction.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"2.4 iDIN transaction","type":"text"}]},{"type":"paragraph","content":[{"text":"The result of an iDIN transaction can be delegated authentication, provisioning of attributes (including age verification), signing of documents or a combination. ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.4.1 Delegated authentication","type":"text"}]},{"type":"paragraph","content":[{"text":"In an iDIN transaction, the Merchant can request a unique, Merchant-specific persistent identifier (BIN) of the Consumer. This allows the Merchant to link the Consumer session to an already existing user account at the Merchant’s system that contains the same BIN, or offer the option to create a new account for the Consumer when the BIN is not yet present in the Merchant’s system. By approving the transaction, the Consumer consents to logging in at the Merchant’s website.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.4.2 Providing consumer attributes","type":"text"}]},{"type":"paragraph","content":[{"text":"In an iDIN transaction, the Merchant can request attributes, possibly used in the context of signing a document, of the Consumer. To this end, at the Issuer website the Consumer explicitly consents to provide the requested attributes to the Merchant. Attributes cannot be requested (and provided) individually, but only as bundled in one of the three[3] attribute groups that are specified as: name, address and age related. See Section 5.3.1 and Section 5.4 for more details. Consent is always given for all requested attributes as a whole, not per data set or per attribute. However, the Merchant is free to ask the Consumer on its website/application, before initiating the transaction, which attribute groups the Consumer would like to give to the Merchant.","type":"text"}]},{"type":"paragraph","content":[{"text":"Note: Due to possible movement of Consumers it is advised to Merchant to always check the correctness of the address. Also, when dealing with a delivery, the Consumer might want to deliver to another address then his/her residential address.","type":"text"}]},{"type":"paragraph","content":[{"text":"Consumer attributes can be requested on a one-time basis, without linking the Consumer session to previous or future sessions, or to an existing user account. In that case, the Merchant will request and receive a transient identifier (transient meaning temporary), generated by the issuer for this session. In case attribute provisioning is combined with delegated authentication, the Merchant requests and receives the persistent BIN.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant can easily set up a new account for the Consumer in the Merchant’s domain based on the BIN and attributes provided by the Issuer. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Note that the consumer should always be aware when using iDIN to create a new Consumer account, in order to prevent the Consumer from connecting whilst already having another account at the Merchant. When connecting a Consumer to an existing account, simply matching consumer attributes with the entire database of the Merchant is an erroneous method, because certain Consumers can share the same attributes (e.g. first and last name). First letting the Consumer log in the Consumer to the existing account before connecting the account with iDIN, or connecting with additional unique Consumer information (not provided by Issuer e.g. email address), should counteract this Issue.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"2.5 Merchant registration","type":"text"}]},{"type":"paragraph","content":[{"text":"When registering for iDIN, the Acquirer issues a Merchant.MerchantID and a Merchant.LegalID to the Merchant that is associated with the Merchant.Name. If required, the Merchant also receives a Merchant.SubID to register one or more Merchant.TradeName. This is the case when a Merchant performs iDIN transactions under different trade names. Only the Merchant.MerchantID and Merchant.SubID are relevant to the Merchant, that is, the Merchant only has to use these to fulfil a successful iDIN process. The other identifiers are allocated by the Acquirer and used within the Acquirer-Issuer and Issuer-Consumer domain.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"expand","attrs":{"title":"2.5.1 Specific requirement Signing Service Provider (SSP) & Digital Identity Service Provider (DISP)"},"content":[{"type":"paragraph","content":[{"text":"A SSP/DISP must register their Merchants in a specific way. This method is required for four reasons:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To prevent the display of the name of the DISP on the Issuer screens;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To allow a SSP to choose if he is visible to the consumer on the Issuer screens;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To make sure the BIN is different for each Merchant. This is due to reasons of security and enhanced Consumer privacy.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To make sure the SSP is the only entity who can request the serviceID reserved for iDIN signature","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"To ensure above standing requirements SSP/DISP must register their Merchants at their Acquirer as follows:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The MerchantID is registered to the SSP/DISP;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Normally, the MerchantName and LegalID are registered to the MerchantID, but in case of a DISP or SSP, who are not visible to the consumer during the transaction process in the Issuer screens, these need to be registered to the SubID;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The SSP/DISP must register each Merchant with a new SubID. With the SubID they must be able to have their own MerchantName, LegalID and Tradename (optionally used by Merchants);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The MerchantName is registered to the MerchantID of the SSP which is visible to the consumer during the transaction process in the Issuer screens. The TradeName and LegalID are used by Merchants.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the DISP is a contracting DISP (i.e. it does not take care of the technical implementation), the Merchant uses its own iDx signing certificate. The contracting DISP must then also register the certificate of the Merchant for each SubID.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Registration examples are shown in the table below. For SubID 1 through 4 the MerchantID is registered to the ","type":"text"},{"text":"Contractual or Full ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"DISP, while the other parameters (LegalID, MerchantName and optional the TradeName) are registered to the SubID. For SubID 5 and 6 the MerchantID is registered to a SSP which is not visible during the transaction process to the consumer in the Issuer screens, the other parameters (LegalID, MerchantName and optional the TradeName) are registered to the SubID. For SubID 7 and 8 the MerchantID and MerchantName are registered to the SSP, which is visible during the transaction process to the consumer in the Issuer screens, only the TradeName and LegalID are registered to the SubID.","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"MerchantID","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"subID","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant Name","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"LegalID","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"Tradename","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0800123456","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Energy Inc.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL69ZZZ123456780000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"-","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0800123456","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Insurance GmbH","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL32ZZZ876543210000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"Life","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0800123456","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Insurance GmbH","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL32ZZZ876543210000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"Car","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0800123456","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"PhoneShop B.V.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL91ZZZ112233440000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"-","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0900654321","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Telco B.V.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL25ZZZ132465870000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0900654321","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"6","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"notarissen.com","type":"text","marks":[{"type":"link","attrs":{"href":"http://notarissen.com/"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL14ZZZ887766550000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0900654321","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"7","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Signing Service B.V.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL25ZZZ132465870000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"Telco B.V.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"0900654321","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[70.0]},"content":[{"type":"paragraph","content":[{"text":"8","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Signing Service B.V.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[228.0]},"content":[{"type":"paragraph","content":[{"text":"NL14ZZZ887766550000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[148.0]},"content":[{"type":"paragraph","content":[{"text":"notarissen.com","type":"text","marks":[{"type":"link","attrs":{"href":"http://notarissen.com/"}}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 3: Registration example for SSPs or DISPs","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"2.6 Dispute management","type":"text"}]},{"type":"paragraph","content":[{"text":"In case of a dispute, the Issuer must be able to provide the identity of the Consumer. During such a dispute the following steps must be executed:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Merchant must supply the original SAML iDIN message that holds the Consumer identity to the Merchant’s Acquirer. To ensure the Issuer can read the encrypted attributes, the Merchant must decrypt the AES keys with his private key. The AES keys have to be provided along with the original message;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Acquirer forwards this information to the Issuer, with contact information of the Merchant;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Issuer must use the certificate from the message to verify the electronic signature, thereby establishing the authenticity and integrity of the iDIN message. The Issuer must take into account the need for an application to be able to perform these checks;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"By using the AES keys provided by the Merchant, it can be easily verified whether these keys are in fact the correct keys;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In case a message is authentic, the Issuer must provide Consumer details to the Merchant and/or Consumer directly. This can only be done if the Consumer has given his/her consent;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Providing the details has to be done via telephone[4] where:","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Acquirer ","type":"text"},{"text":"must","type":"text","marks":[{"type":"underline"}]},{"text":" provide the telephone number of the Merchant to the Issuer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Issuer ","type":"text"},{"text":"must","type":"text","marks":[{"type":"underline"}]},{"text":" initiate the call to the Merchant/Consumer to prevent misuse.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"3 iDIN protocols","type":"text"}]},{"type":"paragraph","content":[{"text":"This chapter gives a general description of the iDx protocols, which are used as a messaging standard for iDIN. ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"3.1 Basic technical principles","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"All iDIN processes are initiated on the Merchant website by the Consumer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"iDIN uses the iDx standards as a messaging standard. It uses the generic information container in the iDx protocol to embed SAML 2.0 messages for iDIN specific elements;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumers will be persistently identified using a Bank Identification Number (BIN), see Section 0, which will be Issuer generated (so not shared among Issuers) and unique per Consumer-Merchant combination;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A Consumer has only one identity per Issuer, regardless of the number of credentials;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumer information in messages will be shielded from Acquirers (Routing Service) by means of end-to-end encryption.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"3.2 iDx protocols","type":"text"}]},{"type":"paragraph","content":[{"text":"The iDIN process (request-/response-XML messaging and browser redirects) consists of the following protocols:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Directory protocol: used to retrieve the most recent Issuer list from the Routing Service.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Transaction protocol: the iDIN-transaction process from beginning to end.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Status protocol: used to request the status of a transaction from the Validation Service (via the Routing Service). ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Error protocol: used to inform when errors have occurred.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"A specific name (letter) has been assigned to identify each message. The following table applies: ","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"Message","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"Message description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"A","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"DirectoryReq (Directory Request)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"A’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"DirectoryRes (Directory Response)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerTrxReq (Transaction Request)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"B’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerTrxRes (Transaction Response)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"F","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerStatusReq (Status Request)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerStatusRes (Status Response)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X),B’(X), F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerErrorRes (Error Response)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"Redirects:","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"D","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant redirects Consumer to Issuer ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"E","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[528.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer redirect Consumer to Merchant","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 4: Message names and description","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The sequence of the protocols is shown in Figure 2. In order to retrieve the services provided by iDIN both the Transaction and Status Protocol have to be completed. The Directory protocol is not indicated, because it follows a simple request and response from the Merchant to the Acquirer. ","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":50.0},"content":[{"type":"media","attrs":{"width":386,"id":"5317eae8-4cca-4a5f-a1fe-06eb0c760827","collection":"contentId-588284049","type":"file","height":321}}]},{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Figure 2: Transaction, Status and Error protocol","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"3.2.1 Directory protocol","type":"text"}]},{"type":"paragraph","content":[{"text":"By using the Directory protocol, the Merchant sends a DirectoryReq to the Routing Service. This is a request in XML format to obtain the list of participating Issuer Banks from the Routing Service. The Routing Service will provide this list to the Merchant by sending back the DirectoryRes. The Merchant will show the list of banks, which were sent in the DirectoryRes to the Merchant. The Consumer will choose his bank from this list at the beginning of the iDIN process. The Directory protocol is explained in more detail in Chapter 6.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"3.2.2 Transaction protocol","type":"text"}]},{"type":"paragraph","content":[{"text":"By using the Transaction protocol the Merchant sends an AcquirerTrxReq to the Routing Service, containing the ID of the Issuer Bank chosen by the Consumer, iDIN information (requesting consumer authentication, attributes or age verification) and other transaction details. This message also contains the merchantReturnURL. This URL is used by the Validation Service to redirect the Consumer back to the Merchant’s website when he has completed the iDIN transaction in the Issuer domain. After the Routing Service has received the message from the Merchant the message is send to the Validation Service of the Issuer that was selected by the Consumer (after adding some information which is beyond the scope of the Merchant). ","type":"text"}]},{"type":"paragraph","content":[{"text":"In return, the Validation Service responds with the IssuerTrxRes message that contains amongst others the issuerAuthenticationURL. The Routing Service forwards this issuerAuthenticationURL together with a unique Transaction.TransactionID back to the Merchant in an AcquirerTrxRes. ","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"3.2.2.1 Redirect","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant now redirects the Consumer to the issuerAuthenticationURL, which refers to the page of the online banking portal. This takes the Consumer to his internet-banking environment where he can continue the iDIN transaction (i.e. logging in and approve the transaction). ","type":"text"}]},{"type":"paragraph","content":[{"text":"The Issuer adds Consumer information (consumer authentication, attributes or age verification) to the iDIN transaction which can be later retrieved with the AcquirerStatusReq. The Consumer approves the iDIN request and receives a confirmation from the Issuer. The Consumer is then redirected back to the website of the Merchant via the merchantReturnURL. The entire Transaction protocol and the 2 redirects are described in more detail in Chapter 7.","type":"text"}]},{"type":"expand","attrs":{"title":"3.2.2.2. Specific requirement iDIN Mobile: Redirect to Issuer (no in-app browser)"},"content":[{"type":"paragraph","content":[{"text":"The Mobile transaction flow is almost identical to the transaction flow in a regular iDIN transaction. The only difference is the redirect to a ‘landing page’ (using the issuerAuthenticationURL) or the Issuers' mobile banking app where the Consumer, using a mobile device, can choose to be redirected to the Issuer’s (mobile) web page or to the Issuer’s mobile banking app (if available). The issuerAuthenticationURL must therefore always be presented to the mobile OS before execution or opened usin","type":"text"},{"text":"g ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#003366"}}]},{"text":"SafariViewController","type":"text","marks":[{"type":"textColor","attrs":{"color":"#003366"}},{"type":"link","attrs":{"href":"https://developer.apple.com/documentation/safariservices/sfsafariviewcontroller"}}]},{"text":" or ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#003366"}}]},{"text":"Chrome Custom Tabs","type":"text","marks":[{"type":"textColor","attrs":{"color":"#003366"}},{"type":"link","attrs":{"href":"https://developer.chrome.com/multidevice/android/customtabs"}}]},{"text":".","type":"text","marks":[{"type":"textColor","attrs":{"color":"#003366"}}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"3.2.3 Status protocol","type":"text"}]},{"type":"paragraph","content":[{"text":"Finally the Merchant initiates the Status protocol by sending an AcquirerStatusReq message to the Routing Service. The Routing Service will request the transaction status from the appropriate Issuer and returns the status to the Merchant in the AcquirerStatusRes. If all steps in the transaction are successful this status message contains the iDIN consumer authentication, attributes and/or age verification. Chapter 8 contains more detailed information on the Status protocol.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"3.2.4 Error protocol","type":"text"}]},{"type":"paragraph","content":[{"text":"Instead of a regular response to the messages mentioned above, it is also possible that an AcquirerErrorRes is returned. This can be the case if a request (DirectoryReq, AcquirerTrxReq or AcquirerStatusReq) contains an error, or if an error occurs during the processing of the request. The AcquirerErrorRes messages are discussed in Chapter 9.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"3.3 SAML V2.0","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN uses the iDx standards as a messaging standard. However, it uses the generic information container in the iDx protocol to embed SAML 2.0 messages for iDIN specific elements. This container is ","type":"text"},{"text":"only used","type":"text","marks":[{"type":"strong"}]},{"text":" in the AcquirerTrxReq, AcquirerStatusRes and sometimes in AcquirerErrorRes. For the other messages the container is left empty.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"4 iDIN Message format ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"4.1 General","type":"text"}]},{"type":"paragraph","content":[{"text":"This chapter contains a description of the general message structure for the Directory, Transaction, Status, and Error protocol. The subsequent sections will describe the specific fields within the XML messages for each protocol in more detail. A list of the data elements and their format can be found in the data dictionary in Chapter 5. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The following conventions are used to indicate whether a message element is ","type":"text"},{"text":"mandatory","type":"text","marks":[{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Yes The element must occur exactly once;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Yes (1..∞) The element must occur one or more (unlimited) times;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"No The element may be left out or may occur exactly once;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"No (0..∞) The element may be left out or may occur more (unlimited) times.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"4.2 Character set","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In all iDIN messages the Unicode character set must be used. Only the MES-2 subset must be supported;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Encoding must be used as indicated in the HTTP and XML headers UTF-8 (Unicode Transformation Format);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The use of characters that are not part of the Unicode character set will not lead to a refusal of a post, but the character may be changed to a space, question mark or asterisk in transit;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Byte Order Mark (BOM) must not be used. The UTF-8 representation of the BOM is the byte sequence 0xEF,0xBB,0xBF. ","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"4.3 HTTP","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"All messages must comply with the HTTP 1.1 standard, as defined in RFC 2616 of W3C. For more information: ","type":"text"},{"text":"http://www.w3.org/Protocols/rfc2616/rfc2616.html","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/Protocols/rfc2616/rfc2616.html"}}]},{"text":";","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Each XML request message must be sent as the body of a HTTP POST message;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Each XML response message must be sent as the body of a HTTP 200 OK message.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The following HTTP header must be used for all messages:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[160.0]},"content":[{"type":"paragraph","content":[{"text":"Data element","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[171.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[429.0]},"content":[{"type":"paragraph","content":[{"text":"Explanation","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[160.0]},"content":[{"type":"paragraph","content":[{"text":"content-type","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[171.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[429.0]},"content":[{"type":"paragraph","content":[{"text":"Defines how the remainder of the content is to be interpreted. ","type":"text"},{"type":"hardBreak"},{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" text/xml; charset=”utf-8”","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 5: HTTP header","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"4.4 XML header","type":"text"}]},{"type":"paragraph","content":[{"text":"The following XML header must be used for all messages:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[239.0]},"content":[{"type":"paragraph","content":[{"text":"Data element","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[198.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"Explanation","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[239.0]},"content":[{"type":"paragraph","content":[{"text":"version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[198.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[239.0]},"content":[{"type":"paragraph","content":[{"text":"encoding","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[198.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“UTF-8”","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 6: XML header","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"4.5 XML namespaces","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN uses the iDx standards as a messaging standard. It uses the generic information container (an XML element) in the iDx protocol to embed SAML 2.0 messages for iDIN specific elements. In addition to the namespaces of the iDx messages, several namespaces are declared in the SAML message. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The namespaces for all messages described in this document is as follows:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespaces","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace declaration in example messages","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace for the iDIN iDx messages between the Merchant and Acquirer.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “","type":"text"},{"text":"http://www.betaalvereniging.nl/iDx/messages/Merchant-Acquirer/1.0.0","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.betaalvereniging.nl/iDx/messages/Merchant-Acquirer/1.0.0"}}]},{"text":"”","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"xmlns","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace for the XML signature syntax.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “","type":"text"},{"text":"http://www.w3.org/2000/09/xmldsig#","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2000/09/xmldsig"}}]},{"text":"”","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"xmlns:ds","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace for schema related mark-up.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “","type":"text"},{"text":"http://www.w3.org/2001/XMLSchema-instance","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/XMLSchema-instance"}}]},{"text":"”","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"xmlns:xsi","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace for the SAML 2.0 Assertion which is embedded in the container element of the iDx message. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “urn:oasis:names:tc:SAML:2.0:assertion”","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"xmlns:saml","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace for the SAML 2.0 Protocol which is embedded in the container element of the iDx message. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “urn:oasis:names:tc:SAML:2.0:protocol”","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"xmlns:samlp","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[452.0]},"content":[{"type":"paragraph","content":[{"text":"Namespace for the XML encryption syntax. This namespace is declared in the container element of the iDx message in, only in the AcquirerStatusReq message for the encrypted XML elements, see 10.3.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “","type":"text"},{"text":"http://www.w3.org/2001/04/xmlenc#","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/04/xmlenc"}}]},{"text":"”","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.0]},"content":[{"type":"paragraph","content":[{"text":"xmlns:xenc","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 7: iDx namespaces","type":"text"}]},{"type":"paragraph","content":[{"text":"Namespace declaration can be done in any way allowed by the XML standards (default namespace declaration or namespace qualification/prefixes) with only a few exceptions as discussed in Section 10.3 where all namespace declaration must be present inside the encrypted parts of the message.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"4.6 XML Schemas","type":"text"}]},{"type":"paragraph","content":[{"text":"All messages must be validated against the iDIN, SAML 2.0 and W3C Schemas. The schemas names and locations are shown in the following table:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[285.0]},"content":[{"type":"paragraph","content":[{"text":"XML schema","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[475.0]},"content":[{"type":"paragraph","content":[{"text":"Explanation","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[285.0]},"content":[{"type":"paragraph","content":[{"text":"idx.merchant-acquirer.1.0.xsd","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[475.0]},"content":[{"type":"paragraph","content":[{"text":"Schema for the iDIN iDx messages between the Merchant and Acquirer.","type":"text"}]},{"type":"paragraph","content":[{"text":"Provided by Acquirer to the Merchant after registration. Also available in chapter 14","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[285.0]},"content":[{"type":"paragraph","content":[{"text":"xmldsig-core-schema.xsd","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[475.0]},"content":[{"type":"paragraph","content":[{"text":"Schema for XML signatures.","type":"text"}]},{"type":"paragraph","content":[{"text":"Available at:","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd#","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[285.0]},"content":[{"type":"paragraph","content":[{"text":"saml-schema-assertion-2.0.xsd","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[475.0]},"content":[{"type":"paragraph","content":[{"text":"Schema for the SAML 2.0 assertion which is embedded in the container element of the iDx message. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Available at:","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"http://docs.oasis-open.org/security/saml/v2.0/saml-schema-protocol-2.0.xsd","type":"text","marks":[{"type":"link","attrs":{"href":"http://docs.oasis-open.org/security/saml/v2.0/saml-schema-protocol-2.0.xsd"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[285.0]},"content":[{"type":"paragraph","content":[{"text":"saml-schema-protocol-2.0.xsd","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[475.0]},"content":[{"type":"paragraph","content":[{"text":"Schema for the SAML 2.0 protocol which is embedded in the container element of the iDx message. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Available at:","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"http://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd","type":"text","marks":[{"type":"link","attrs":{"href":"http://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[285.0]},"content":[{"type":"paragraph","content":[{"text":"xenc-schema.xsd","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[475.0]},"content":[{"type":"paragraph","content":[{"text":"Schema for the XML encryption syntax. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Available at:","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/xenc-schema.xsd","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/xenc-schema.xsd"}}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 8: XML schemas","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"5 iDIN data dictionary ","type":"text"}]},{"type":"paragraph","content":[{"text":"This chapter describes the data elements and ID’s that are used in iDIN. First, two attributes for all iDx messages are described in Section 5.1. All iDx data elements are described in Section 5.2. Subsequently, in Section 5.3 the iDIN specific data elements are described, which are either located in the SAML message, or differ from the normal iDx formatting. Section 5.4 provides a list of all consumer attributes. ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"5.1 iDx attributes","type":"text"}]},{"type":"paragraph","content":[{"text":"The following two attributes are given to the root of each message to ensure proper identification of the correct service and version:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[138.0]},"content":[{"type":"paragraph","content":[{"text":"Attribute","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[241.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph","content":[{"text":"Messages","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.0]},"content":[{"type":"paragraph","content":[{"text":"Formatting rules","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[138.0]},"content":[{"type":"paragraph","content":[{"text":"version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[241.0]},"content":[{"type":"paragraph","content":[{"text":"Indicate the version of the iDIN Service","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph","content":[{"text":"ALL","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[138.0]},"content":[{"type":"paragraph","content":[{"text":"productID","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[241.0]},"content":[{"type":"paragraph","content":[{"text":"Indicates the service used with the iDx format","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph","content":[{"text":"ALL","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: \"","type":"text","marks":[{"type":"strong"}]},{"text":"NL:BVN:BankID:1.0”","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 9: iDx attributes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"5.2 iDx data elements","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN relies on the identifiers described in Table 10. If the element must be generated as an input in one of the three request messages (DirectoryReq, AcquirerTrxReq, AcquirerStatusReq) it is indicated in the description in ","type":"text"},{"text":"bold","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"Messages","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Formatting rules","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Acquirer.AcquirerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Unique four-digit identifier of the Acquirer within an iDx based product, assigned by the product owner when registering the Acquirer.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’, B’, F’,","type":"text"}]},{"type":"paragraph","content":[{"text":"F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"4 digit-number","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Country.countryNames","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the countryNames in the official languages of the country. Used in presentation of the Merchant to the Consumer on the website, see Section 6.4. In official languages of the country, separated by a ‘/’ symbol (e.g. ‘België/Belgique’)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 128 alphanumeric","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"createDateTimeStamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"The time of creation of a particular request or response. Can also have the form directoryDateTimestamp, statusDateTimestamp and transactionCreateDateTime-stamp but follows the same formatting rules. It is indicated in the messages in Chapter 6-9 which particular time is meant","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant in Requests messages","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"ALL","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"ISO 8601 ","type":"text"}]},{"type":"paragraph","content":[{"text":"UTC time format (no daylight saving) in format YYYY-MM- DDThh:mm:ss.sssZ e.g. 2015-10-13T14:41:12.123Z","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchants are allowed to use zero to three decimals behind the seconds. DateTimestamp in messages from the Routing Service will always have three decimals after the seconds","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"YYYY is the calendar year","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"hh is 24-hour notation. 12-hour notation must not be used","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Error.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"consumerMessage","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"An Acquirer can use this field to include a (standardized) message that the Merchant should show to the Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"See Appendix A: Error codes and cases","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"link","attrs":{"href":"https://betaalvereniging.atlassian.net/wiki/spaces/IIDIFMD/pages/464191565/iDIN+Merchant+Implemention+Guide+EN#iDINMerchantImplementionGuide(EN)-15AppendixA:Errorcodesandcases"}}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Error.errorCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Unique identification of an error occurring within the iDx transaction ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"See Appendix A: Error codes and cases","type":"text","marks":[{"type":"link","attrs":{"href":"https://betaalvereniging.atlassian.net/wiki/spaces/IIDIFMD/pages/464191565/iDIN+Merchant+Implemention+Guide+EN#iDINMerchantImplementionGuide(EN)-15AppendixA:Errorcodesandcases"}}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Error.errorMessage","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Descriptive text accompanying Error.errorCode","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 128 alphanumeric","type":"text"}]},{"type":"paragraph","content":[{"text":"See Appendix A: Error codes and cases","type":"text","marks":[{"type":"link","attrs":{"href":"https://betaalvereniging.atlassian.net/wiki/spaces/IIDIFMD/pages/464191565/iDIN+Merchant+Implemention+Guide+EN#iDINMerchantImplementionGuide(EN)-15AppendixA:Errorcodesandcases"}}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Error.errorDetail","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Details of the error. The message-generating party is free to determine this information","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 256 alphanumeric","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Error.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"suggestedAction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Suggestions aimed at resolving the problem. The message-generating party is free to determine this information","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 512 alphanumeric","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"issuerAuthenticationURL","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the issuer authentication URL to which the consumer is sent","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"B’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 512 characters","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer.IssuerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Unique identifier of the Issuer that consists of the international Bank Identifier Code (BIC). ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’, B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"ISO 9362","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer.Name","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Only given in pairs together with the Issuer.IssuerID used in presentation of the Merchant to the Consumer on the website, see Section 9.4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 35 alphanumeric","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"language","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"This field enables the Issuer’s website or mobile app to select the Consumer’s preferred language (e.g. the language that was selected on the Merchant’s website or mobile app), if the Issuer's website or mobile app supports this.","type":"text"}]},{"type":"paragraph","content":[{"text":"In case of error, this field enables the Acquirer to select the Error.consumerMessage in the Consumer’s preferred language (see Section 15.2).","type":"text"}]},{"type":"paragraph","content":[{"text":"If a non-supported or non-existing language is entered, the standard language of the Issuer is used. ","type":"text"}]},{"type":"paragraph","content":[{"text":"e.g. ‘en’ for English, ‘nl’ for Dutch is used","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"ISO 639-1","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.MerchantID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"This is the contract number for iDIN.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant obtains this ID after registration for iDIN. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A,B,F","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"10 numeric","type":"text"}]},{"type":"paragraph","content":[{"text":"Made up of ","type":"text"},{"text":"Acquirer.AcquirerID","type":"text","marks":[{"type":"code"}]},{"text":" (first four positions) and a unique number of exactly six positions ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.subID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"The subID that uniquely defines the name and address of the Merchant to be used for the iDIN. The Merchant obtains the subID from its Acquirer after registration for iDIN.","type":"text"}]},{"type":"paragraph","content":[{"text":"A Merchant can request permission from the Acquirer to use one or more subIDs. Unless agreed otherwise with the Acquirer, the Merchant has to use 0 (zero) as subID by default (if no subIDs are used).","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"A,B,F","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 6 numeric","type":"text"}]},{"type":"paragraph","content":[{"text":"Number from 0 to and including 999999 in which each value is related to a separate instance registered with the Acquirer. The default value is ‘0’","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"merchantReturnURL","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"URL to which the Consumer must be redirected after authentication and/or authorization of the transaction at the Issuer. The URL does not necessarily begins with http:// or https://, it can also start with an app handler e.g. companyname-nl-service://. The protocol part must always be included.","type":"text"}]},{"type":"paragraph","content":[{"text":"The resource indicated by the URL must be the website or mobile app of the Merchant or a part thereof.","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 512 characters","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.X509","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Certificate of the Merchant. Used in the request to express the Merchant’s certificate needed for encryption by the Issuer (excluding the private key)","type":"text"}]},{"type":"paragraph","content":[{"text":"Never included in the response and placed in the extension element of a SAML AuthnRequest","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Base64 encoding","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Transaction.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"entranceCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"An ‘authentication identifier’ created by the Merchant to facilitate continuation of the session between a Merchant and a Consumer, even if the existing session has been lost (e.g. because the cookie expired). It enables the Merchant to recognize the Consumer associated with a (completed) transaction. The entranceCode is sent to the Merchant in the Redirect to Merchant. See Section 10.6 for more information on its use. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Max 40 alphanumeric","type":"text"}]},{"type":"paragraph","content":[{"text":"A minimum variation of 1 million is required","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Transaction.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"TransactionID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Unique 16-digit number within an iDx based product, assigned by an Acquirer. Received in the AcquirerTrxRes. Used to couple a AcquirerStatusReq to a particular response","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"B’, F, F’","type":"text"}]},{"type":"paragraph","content":[{"text":"F’(X)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"16 numeric","type":"text"}]},{"type":"paragraph","content":[{"text":"The first four digits of the TransactionID are made up of the AcquirerID","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Transaction.status","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[754.0]},"content":[{"type":"paragraph","content":[{"text":"Status of the transaction: related to whether the transaction has been authenticated/authorized by the Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[237.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[492.0]},"content":[{"type":"paragraph","content":[{"text":"Contains always one of the following values:","type":"text"}]},{"type":"paragraph","content":[{"text":"Open","type":"text","marks":[{"type":"strong"}]},{"text":": Final status not yet known. This is the initial status value for all parties for all transactions.","type":"text"}]},{"type":"paragraph","content":[{"text":"Success","type":"text","marks":[{"type":"strong"}]},{"text":": the Consumer approved the transaction and the Issuer has confirmed this approval.","type":"text"}]},{"type":"paragraph","content":[{"text":"Cancelled","type":"text","marks":[{"type":"strong"}]},{"text":": the transaction has not been approved; cancelled by the Consumer. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Expired","type":"text","marks":[{"type":"strong"}]},{"text":": the transaction has not been approved within the BankID.expirationPeriod set by the Merchant  or the default BankID.expirationPeriod. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Failure","type":"text","marks":[{"type":"strong"}]},{"text":": the transaction has not been approved; unknown reason","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 10: iDx data elements","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"5.3 iDIN data elements","type":"text"}]},{"type":"paragraph","content":[{"text":"These elements are the iDIN specific data elements that are either located in the SAML 2.0 message, or, differ from the normal iDx standard. If the element must be generated as an input in one of the three request messages (DirectoryReq, AcquirerTrxReq, AcquirerStatusReq) it is indicated in the description in ","type":"text"},{"text":"bold","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"Messages","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Formatting rules","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"BankID.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"MerchantReference","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"Unique transaction reference generated by and only for the Merchant (e.g. administration)","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"B, F’, F’(X)","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Max 35 text and must","type":"text"}]},{"type":"paragraph","content":[{"text":"start with a letter (either lower- or upper-case)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"BankID.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"expirationPeriod","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"The time in which the consumer has to approve the transaction. Otherwise the status will be set to ‘Expired’.","type":"text"}]},{"type":"paragraph","content":[{"text":"Minimum is 60 seconds and maximum and default value is 300 seconds.","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"ISO 8601 e.g. PT300S or PT5M","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"BankID.LOA","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"For a request: the minimum level of assurance required","type":"text"}]},{"type":"paragraph","content":[{"text":"For a response","type":"text"},{"text":":","type":"text","marks":[{"type":"strong"}]},{"text":" the actual level of assurance provided","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"B, F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: \"","type":"text","marks":[{"type":"strong"}]},{"text":"nl:bvn:bankid:1.0:loa3”","type":"text"}]},{"type":"paragraph","content":[{"text":"Note:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"“","type":"text","marks":[{"type":"strong"}]},{"text":"nl:bvn:bankid:1.0:loa2” has been deprecated as of 01-05-2018. ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"BankID.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"RequestedServiceID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"The number that is used to ask for a particular set of consumer attributes, see Section 0 for more information.","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"B","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Integer as specified in Section 0. ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"BankID.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"DeliveredServiceID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"Same structure as RequestedServiceID. Returned to the Merchant in the Response to indicate which requested attributes are delivered conform the minimal set (see Section 15.4).","type":"text"}]},{"type":"paragraph","content":[{"text":"If the Issuer is unable to determine the DeliveredServiceID a value of ‘0’ must be used.","type":"text"}]},{"type":"paragraph","content":[{"text":"The DeliveredServiceID is included as unencrypted Attribute in the Assertion","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Integer as specified in Section 0. ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.bin","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"BIN is short for Bank identifying Number. It identifies the Consumer. BINs are bank specific and are unique for every Consumer-Merchant-Issuer combination","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"BIN consists of two parts:","type":"text"}]},{"type":"paragraph","content":[{"text":"1) Prefix: Two-letter country code of the Issuer (ISO 3166-1) followed by four-letter (alphabetic) bank identifier (ISO 9362)","type":"text"}]},{"type":"paragraph","content":[{"text":"2) Bank specific identifier. Must be transportable as a string of max 1020 chars","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.transientid","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"Can be asked instead of the Consumer.BIN. Indicates that the content of the element is an identifier with transient semantics and ","type":"text"},{"text":"SHOULD","type":"text","marks":[{"type":"strong"}]},{"text":" be treated as an opaque and temporary value by the Merchant","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Max 256 characters and is prefixed with ‘TRANS‘.","type":"text","marks":[{"type":"em"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer.X509","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"Used in the SAML Response in the Signature element (see Section 13.6) such that the Merchant can verify the Issuer’s Signature","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"Base64 encoding","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[353.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.LegalID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[810.0]},"content":[{"type":"paragraph","content":[{"text":"The Merchant.LegalID is the CreditorID of the Merchant. In the Netherlands this is based on the number of the Chamber of Commerce. See the EPC guidelines for country specific information on provision of the CreditorID which is the same legal identifier as the LegalID (","type":"text"},{"text":"https://www.europeanpaymentscouncil.eu/document-library/guidance-documents/creditor-identifier-overview","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.europeanpaymentscouncil.eu/document-library/guidance-documents/creditor-identifier-overview"}}]},{"text":")","type":"text"},{"text":". ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"It is returned in the Status Response due to SAML compliance but has no particular use for the Merchant in completing an iDIN transaction flow","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"F’","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[359.0]},"content":[{"type":"paragraph","content":[{"text":"- ","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"expand","attrs":{"title":"Addition for Signing Service Providers (SSPs): table 3"},"content":[{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[241.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[120.0]},"content":[{"type":"paragraph","content":[{"text":"Messages","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[198.0]},"content":[{"type":"paragraph","content":[{"text":"Formatting rules","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.DocumentID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[241.0]},"content":[{"type":"paragraph","content":[{"text":"A SHA256 hash of the (set of) documents on which an electronic signature will be placed. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Generated by Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[120.0]},"content":[{"type":"paragraph","content":[{"text":"B, F'","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[198.0]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 256 characters","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"This data element can only be processed by Issuers who have implemented the product type iDIN Signature. See 5.3.1. for more information.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"Table 11: iDIN data elements in SAML message","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"5.3.1 iDIN Requested- and DeliveredServiceID","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN provides services that can be requested by the Merchant. Each transaction request can only supply one set of data, based on a single RequestedServiceID. The returned consumer attributes can differ per Issuer and request, therefore some of these elements that are part of a group are optional e.g. some consumers do not have a last name prefix. The DeliveredServiceID is used to indicate which attributes are delivered conform the minimal set as defined in Section 8.5. In most cases the RequestedServiceID shall be equal to the DeliveredServiceID. If the Issuer cannot provide all attributes conform the minimal set the DeliveredServiceID is not equal to the RequestedServiceID. This is discussed in more detail in Section 15.4. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The Excel ‘1711289A_ServiceID_Calculator’ provided along this Implementation Guidelines provides an easy method to calculate the ServiceID.","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"The Requested- and DeliveredServiceID are short integers translated from a binary format. The binary numbers are separated into groups. These groups represent the categories of attributes the Merchant may request. Please be aware that this is a bit pattern instead of a number, and that the first bit is on the left not on the right.","type":"text"}]},{"type":"paragraph","content":[{"text":"Table 12 provides an overview of which attributes are included and what value it should represent on binary level in order to receive the correct attributes, as defined in Section 8.2.","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"Bit number","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"Values","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Reserved (R)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Reserved for reasons of backwards compatibility","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 (must be zero)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"3, 5, 7, 11, 16","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Reserved (R)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Not assigned; reserved space for future attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 (must be zero)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 1: ConsumerID","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Indicates what ConsumerID is required. See Section ","type":"text"},{"text":"8.2","type":"text","marks":[{"type":"strong"}]},{"text":" for all ConsumerIDs","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 Consumer.TransientID","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Consumer.BIN","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 2: Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"All name related attributes of the Consumer ","type":"text"},{"text":"excluding","type":"text","marks":[{"type":"underline"}]},{"text":" gender. See Section ","type":"text"},{"text":"8.2","type":"text","marks":[{"type":"strong"}]},{"text":" for all attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 No Name attributes","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Provide Name attributes","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"6","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 3: Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"All address attributes of the Consumer See Section ","type":"text"},{"text":"8.2","type":"text","marks":[{"type":"strong"}]},{"text":" for all address attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 No Address attributes","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Provide Address Attributes","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"8..10","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 4: Age related","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Provides Merchant with the requested age verification or date of birth. See Section ","type":"text"},{"text":"8.2","type":"text","marks":[{"type":"strong"}]},{"text":" for all age related attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"000 No age related attribute","type":"text"}]},{"type":"paragraph","content":[{"text":"001 18orOlder","type":"text"}]},{"type":"paragraph","content":[{"text":"010 Reserved","type":"text"}]},{"type":"paragraph","content":[{"text":"011 Reserved","type":"text"}]},{"type":"paragraph","content":[{"text":"100 Reserved","type":"text"}]},{"type":"paragraph","content":[{"text":"101 Reserved","type":"text"}]},{"type":"paragraph","content":[{"text":"110 Reserved","type":"text"}]},{"type":"paragraph","content":[{"text":"111 Date of Birth","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"12","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 5: Gender","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Provides the Merchant with requested gender","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 No gender attribute","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Provide gender attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"14","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 7: Telephone","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Provides the Merchant with requested telephone number","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 No telephone attribute","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Provide telephone attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"15","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[343.0]},"content":[{"type":"paragraph","content":[{"text":"Category 8: Email","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[895.0]},"content":[{"type":"paragraph","content":[{"text":"Provides the Merchant with requested email address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[352.0]},"content":[{"type":"paragraph","content":[{"text":"0 No email attribute","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Provide email attribute","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"expand","attrs":{"title":"Addition for Signing Service Providers (SSPs): table 12 "},"content":[{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[171.0]},"content":[{"type":"paragraph","content":[{"text":"Bit Number","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[170.0]},"content":[{"type":"paragraph","content":[{"text":"Category","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[209.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Values","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[171.0]},"content":[{"type":"paragraph","content":[{"text":"13","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[170.0]},"content":[{"type":"paragraph","content":[{"text":"Category 6: Electronic signature","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[209.0]},"content":[{"type":"paragraph","content":[{"text":"Indicates that the product type for iDIN signature is used.","type":"text"}]},{"type":"paragraph","content":[{"text":"Only to be used by a Signing Service Provider.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"0 Product type for iDIN signature is not used","type":"text"}]},{"type":"paragraph","content":[{"text":"1 Product type signature is used","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"The ServiceID containing the Bit Number 13 for the product type Signature can only be requested from an Issuer who has implemented the product type Signature. ","type":"text"},{"text":"The Signing Service Provider (SSP) must only send requests containing a ServiceID for placing electronic signatures which minimally contain the data attribute for BIN (bit number 2) and name (bit number 4) to ensure compliancy with regulation (EU) No 910/2014 (eIDAS).","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"paragraph","content":[{"text":"Table 12: Overview of Requested- and DeliveredServiceID","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The service IDs are included in the SAML request message to specify part of the Merchant’s request. For example, if the Merchant wishes to do an authentication (by requesting the BIN), only the second bit should be equal to one, which leads to an integer value of 16384.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"5.4 Consumer attributes","type":"text"}]},{"type":"paragraph","content":[{"text":"The consumer attributes are located in the SAML 2.0 message as a result of the requested service with the BankID.RequestedServiceID. The consumer.bin and consumer.transientid ","type":"text"},{"text":"are not ","type":"text","marks":[{"type":"strong"}]},{"text":"defined as consumer attributes and are located at a different place in the SAML 2.0 message. iDIN can provide the following attributes about a Consumer in a SAML Response message AttributeStatement. Where possible, the consumer attributes have formatting rules in line with the NEN-ISO 8601 standard. All attributes use the UTF-8 character set.","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"Nr.","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"Consumer attribute","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Group[5]","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Formatting rules[6]","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Examples","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"1. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.deprecatedbin","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"-","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Same as BIN but is used to sustain continuous usage of consumer BIN. This element can occur for instance when two Merchants fuse, or, for some particular reason the consumer.bin has been reset. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"See consumer.bin","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"See consumer.bin","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"2. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.gender","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Can be requested individually","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Gender of Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"0 (= unknown)","type":"text"}]},{"type":"paragraph","content":[{"text":"1 (= male)","type":"text"}]},{"type":"paragraph","content":[{"text":"2 (= female)","type":"text"}]},{"type":"paragraph","content":[{"text":"9 (= not specified)","type":"text"}]},{"type":"paragraph","content":[{"text":"Matches formatting rules of NEN 1888_2002, section 5.4.9 and NEN-ISO 528.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Allowed values: “0”, “1”, “2” and “9”.","type":"text"}]},{"type":"paragraph","content":[{"text":"Not allowed: Any other value than the above","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"3. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.legallastname","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Legal last name of Consumer without prefixes ","type":"text"},{"type":"hardBreak"},{"text":"(from: NEN 1888_2002, section 3.1, “significant deel van de achternaam”)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 200 characters without numbers.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must not include the prefix of the ","type":"text"},{"text":"first ","type":"text","marks":[{"type":"em"}]},{"text":"last name. Prefixes of later sections of the last name must be included.","type":"text"}]},{"type":"paragraph","content":[{"text":"If the last name consists of multiple sections that are separated by a -, the - must not be lead and followed by a space.","type":"text"}]},{"type":"paragraph","content":[{"text":"Leading and trailing spaces are not allowed","type":"text"}]},{"type":"paragraph","content":[{"text":"Matches formatting rules of NEN 1888_2002, section 5.1.1.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"For the name “Luana van Oranje-Nassau van Amsberg” the value would be “Oranje-Nassau van Amsberg”.","type":"text"}]},{"type":"paragraph","content":[{"text":"For the name “Jacques d’Ancona” the value would be “d’Ancona”.","type":"text"}]},{"type":"paragraph","content":[{"text":"For the name “Jacques d’ Ancona” the value would be “Ancona”.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"4.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.preferredlastname","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Last name of Consumer as preferred by Consumer.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastname","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Separation of last name from given name and prefix is analogous to legallastname.","type":"text"}]},{"type":"paragraph","content":[{"text":"Preferred last name can include the partner’s last name","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"5.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.partnerlastname","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Last name of Consumer’s registered partner","type":"text"},{"type":"hardBreak"},{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastname","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastname","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"6.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.legallastnameprefix","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Last name prefix of Consumer’s legal last name","type":"text"}]},{"type":"paragraph","content":[{"text":"(from: NEN 1888_2002, section 3.1, “voorvoegsel”)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 10 characters without numbers","type":"text"}]},{"type":"paragraph","content":[{"text":"A prefix is only a prefix if it was separated from the last name by a space","type":"text"}]},{"type":"paragraph","content":[{"text":"Only the prefix of the first section of the last name should be included","type":"text"}]},{"type":"paragraph","content":[{"text":"Leading and trailing spaces are not allowed","type":"text"}]},{"type":"paragraph","content":[{"text":"Matches formatting rules of NEN 1888_2002, section 5.1.4","type":"text"},{"type":"hardBreak"},{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"For the name “Luana van Oranje-Nassau van Amsberg” the value would be “van”.","type":"text"}]},{"type":"paragraph","content":[{"text":"For the name “Jacques d’Ancona” there is no prefix.","type":"text"}]},{"type":"paragraph","content":[{"text":"For the name “Jacques d’ Ancona” the value would be “d’”.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"7.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.preferredlastnameprefix","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Last name prefix of Consumer’s preferred last name.","type":"text"}]},{"type":"paragraph","content":[{"text":"(analogous to ","type":"text"},{"text":"legallastnameprefix","type":"text","marks":[{"type":"code"}]},{"text":")","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastnameprefix","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastnameprefix","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"8.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.partnerlastnameprefix","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Last name prefix of Consumer’s partner last name","type":"text"},{"type":"hardBreak"},{"text":"(analogous to ","type":"text"},{"text":"legallastnameprefix","type":"text","marks":[{"type":"code"}]},{"text":")","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastnameprefix","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Analogous to legallastnameprefix","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"9.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.initials","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"The initials of the Consumer, defined as the first letter of each of the Consumer’s first names. ","type":"text"}]},{"type":"paragraph","content":[{"text":"(from: NEN 1888_2002, section 5.1.7, “voorletters-1”)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 24 capitalized letters","type":"text"}]},{"type":"paragraph","content":[{"text":"Only the first letter of each first name is used which must be capitalized and returned without spaces or dots.","type":"text"}]},{"type":"paragraph","content":[{"text":"Matches formatting rules of NEN 1888_2002, section 5.1.7 but with an increased character limit.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"For the name “Jan-Jaap Christaan Jozefszoon” or “jan-jaap christaan jozefszoon” the value must be “JC”.","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"10.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.dateofbirth","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Can be requested individually","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Date of birth of Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Basis format (CCYYMMDD) from NEN-ISO 8601","type":"text"}]},{"type":"paragraph","content":[{"text":"If the month or day of the date of birth is unknown ‘00’ shall be returned e.g. 19870400","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"For the birthdate May 14","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" 1990 the value would be “19900514”.","type":"text"}]},{"type":"paragraph","content":[{"text":"For the year of birth 1990 with an unknown month and unknown day the value would be “19900000”.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"11.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.18orolder","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Can be requested individually","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Specifies whether the Consumer is 18 or older of age.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Boolean (true/false)","type":"text"}]},{"type":"paragraph","content":[{"text":"Age verification when the date of birth has an unknown day or month shall be based on the latest day of the month or latest month of the year respectively.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Allowed values are “true” and “false”.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"12.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.street","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Street name of the Consumer’s residential address","type":"text"},{"type":"hardBreak"},{"text":"(from: NEN 5825_2002, section 3.3, “straatnaam”)","type":"text"}]},{"type":"paragraph","content":[{"text":"Used for NL addresses only","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 43 characters","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"“Prins Willem Alexanderlaan”","type":"text"}]},{"type":"paragraph","content":[{"text":"“Mr. J.F. Vietorstraat”","type":"text"}]},{"type":"paragraph","content":[{"text":"“Steenstr”","type":"text"}]},{"type":"paragraph","content":[{"text":"“Leidsepln”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"13. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.houseno","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"House number of the Consumer’s residential address","type":"text"},{"type":"hardBreak"},{"text":"(from: NEN 5825_2002, section 3.3, “huisnummer”)","type":"text"}]},{"type":"paragraph","content":[{"text":"Used for NL addresses only","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 5 numbers","type":"text"},{"type":"hardBreak"},{"text":"Matches formatting rules of NEN 5825_2002, section 5.3.4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"“1”","type":"text"}]},{"type":"paragraph","content":[{"text":"“12345”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"14. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.housenosuf","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"House number suffix ","type":"text"},{"type":"hardBreak"},{"text":"(from: NEN 5825_2002, section 3.3, “huisnummertoevoeging”)","type":"text"}]},{"type":"paragraph","content":[{"text":"Used for NL addresses only","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 6 characters","type":"text"},{"type":"hardBreak"},{"text":"Matches formatting rules of NEN 5825_2002, section 5.3.5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"“A”, “a”, “Bis A”, “huis”, “A02”, “-2”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"15.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.addressextra","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Additional address details of Consumer’s residential address","type":"text"},{"type":"hardBreak"},{"text":"(from: NEN 5825_2002, section 3.3, “locatieomschrijving”)","type":"text"}]},{"type":"paragraph","content":[{"text":"Used for NL addresses only","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 70 characters","type":"text"},{"type":"hardBreak"},{"text":"Matches formatting rules of NEN 5825_2002, section 5.3.1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"“Woonboot tegenover de kerk”","type":"text"}]},{"type":"paragraph","content":[{"text":"“Derde verdieping”","type":"text"}]},{"type":"paragraph","content":[{"text":"“Groene deur”","type":"text"}]},{"type":"paragraph","content":[{"text":"“Ingang aan de Kerklaan”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"16.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.postalcode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Postal code of the Consumer’s residential address","type":"text"},{"type":"hardBreak"},{"text":"(from: NEN 5825_2002, section 3.3, “postcode”)","type":"text"}]},{"type":"paragraph","content":[{"text":"Used for NL addresses only","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Numerical part: 4 numbers","type":"text"},{"type":"hardBreak"},{"text":"Alphabetic part: 2 letters","type":"text"},{"type":"hardBreak"},{"text":"Matches formatting rules of NEN 5825_2002, section 5.3.11-12","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"“1234AB”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"17.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.city","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"City of the Consumer’s residential address","type":"text"}]},{"type":"paragraph","content":[{"text":"Used for NL addresses only","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 24 characters","type":"text"},{"type":"hardBreak"},{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"18.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.intaddressline1","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Used for non-NL addresses only.","type":"text"},{"type":"hardBreak"},{"text":"The diversity of international address formats, is captured in 3 freetext strings.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 70 characters","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"19.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.intaddressline2","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Used for non-NL addresses only","type":"text"},{"type":"hardBreak"},{"text":"(analogous to ","type":"text"},{"text":"consumer.intaddressline1","type":"text","marks":[{"type":"code"}]},{"text":")","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 70 characters","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"20.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.intaddressline3","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Used for non-NL addresses only","type":"text"},{"type":"hardBreak"},{"text":"(analogous to ","type":"text"},{"text":"consumer.","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"intaddressline1","type":"text","marks":[{"type":"code"}]},{"text":")","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 70 characters","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"21.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.country","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Address","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Country code of country where Consumer currently resides","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"2 letter code from ISO 3166-1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"For the Netherlands, this has the value “NL”. For Belgium, this has the value “BE”. For Germany, this has the value “DE”.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"22.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.telephone","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Telephone","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Telephone number (mobile or landline) of the consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Issuers aspire to return all telephone numbers according to the soft format requirements.","type":"text"}]},{"type":"paragraph","content":[{"text":"Soft format:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Max 20 in length, using only digits and beginning with a plus sign. The following sequence must be used:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"‘+’","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Country-code","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"National number ","type":"text"},{"text":"excluding","type":"text","marks":[{"type":"underline"}]},{"text":" leading zero","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Telephone numbers will always abide to the following hard format requirements.","type":"text"}]},{"type":"paragraph","content":[{"text":"Hard format:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Max 20 in length with the following allowed characters:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"digit ‘0-9’","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"space ‘ ‘","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"bracket ‘()’","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"plus ‘+’","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"minus ‘-‘","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"Soft format examples:","type":"text"}]},{"type":"paragraph","content":[{"text":"‘+31612345678’ (Dutch mobile)","type":"text"}]},{"type":"paragraph","content":[{"text":"‘+31203051900’ (Dutch landline)","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"Hard format examples:","type":"text"}]},{"type":"paragraph","content":[{"text":"’06-12345678’","type":"text"}]},{"type":"paragraph","content":[{"text":"‘(020) 3051900’","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[60.45]},"content":[{"type":"paragraph","content":[{"text":"23.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.14]},"content":[{"type":"paragraph","content":[{"text":"consumer.email","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[96.82]},"content":[{"type":"paragraph","content":[{"text":"Email","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[217.88]},"content":[{"type":"paragraph","content":[{"text":"Email address of the consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[308.79]},"content":[{"type":"paragraph","content":[{"text":"Maximum of 255 characters","type":"text"}]},{"type":"paragraph","content":[{"text":"Must contain:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"One @-symbol","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"At least one character before the @-symbol","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A dot somewhere after the @-symbol","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"At least one character after the @, before the dot","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"At least one character after the @ and after the dot.","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.79]},"content":[{"type":"paragraph","content":[{"text":"X@Y.Z","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 13: Consumer attributes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"Notes","type":"text","marks":[{"type":"strong"}]},{"text":": ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Consumer attributes are located in the SAML Attribute element. In the @Name attribute the Name indicated above is prefixed with the following “nl:bvn:bankid:1.0:attribute:”. This results in attribute names containing only small-caps letters e.g. “nl:bvn:bankid:1.0:attribute:consumer.city”;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If one of the attributes is longer than the NEN-prescribed maximum length, then the name is truncated and the last character is replaced by a dash “-” (NEN 1888_2002, p14);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Some of the name or address related attributes might not be available at all Issuers, e.g., Consumer’s partner last name. In that case the Issuer shall not include the attribute in the attribute statement provided. Example of SAML Attribute:","type":"text"}]}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n 19850101\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"5.5 Guaranteed minimal set of requested attributes","type":"text"}]},{"type":"paragraph","content":[{"text":"Table 14 shows the minimal set of attributes that must be provided by the Issuer for the name and address attributes when these are requested by the Merchant. The other categories (Consumer IDs, age related and gender) are requested and provided individually, and therefore must always be delivered to the Merchant upon request conform the specified format (i.e. when the Merchant requests a date of birth the Issuer must provide this, and not some other form of age verification).","type":"text"}]},{"type":"paragraph","content":[{"text":"If the Issuer is unable to provide the attribute groups conform this minimal set, or cannot provide one or more of the individually requested ID, gender and/or an age related attributes, it fails to respond with a complete success. When this occurs the Issuer returns all attributes and/or an ID it can deliver (which are part of the categories requested by the Merchant), but indicates with a status code that the request could not be performed with a complete success, see Section 15.4 for more detail. For this scenario the DeliveredServiceID is not equal to the RequestedServiceID.","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"Group","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"Minimal set of attributes","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"One of the three options listed below:","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.legallastname","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.preferredlastname","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.partnerlastname","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"Address ","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"One of the five options listed below:","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.postalcode AND consumer.houseno","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.streetname AND consumer.houseno AND consumer.city","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.postalcode AND consumer.addressextra","type":"text"}]},{"type":"paragraph","content":[{"text":"(for addresses that don’t have a house number e.g. a ‘woonboot’)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.streetname AND consumer.addressextra AND consumer.city","type":"text"}]},{"type":"paragraph","content":[{"text":"(for addresses that don’t have a house number e.g. a ‘woonboot’)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183.0]},"content":[{"type":"paragraph","content":[{"text":"5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[577.0]},"content":[{"type":"paragraph","content":[{"text":"consumer.intaddressline1 AND consumer.country","type":"text"}]},{"type":"paragraph","content":[{"text":"(for international addresses)","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 14: Minimal set of attributes provided by Issuer per requested attribute group","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"5.5.1 Optional deselecting/changing of telephone nr. or email address by the Consumer","type":"text"}]},{"type":"paragraph","content":[{"text":"Consumers are given the option to deselect and optionally change their email address and/or telephone number when they are approving the transaction at the Issuer. ","type":"text"},{"text":"This is only possible for the telephone number and or email","type":"text","marks":[{"type":"underline"}]},{"text":" and of course only if these attributes are requested by the Merchant. ","type":"text"}]},{"type":"paragraph","content":[{"text":"If the Consumer deselects his/her telephone number and/or email address this is indicated to the Merchant in the DeliveredServiceID and the 2","type":"text"},{"text":"nd","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" SAML StatusCode, see Section 15.4 for more detail. ","type":"text"}]},{"type":"paragraph","content":[{"text":"If the Consumer changes his/her telephone number and/or email address this is ","type":"text"},{"text":"not","type":"text","marks":[{"type":"underline"}]},{"text":" indicated to the Merchant. However, if Consumers change their telephone number and/or email address the attributes do abide to the formatting requirements as described in Table 13.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"6 iDIN Directory protocol ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"6.1 General","type":"text"}]},{"type":"paragraph","content":[{"text":"The Directory protocol allows a Merchant to retrieve an up to date list of participating Consumer Banks (Issuers) from his Routing Service, which can be presented to the Consumer. In case of changes in the list of Issuers, the Directory protocol will supply the Merchant with the update of this list. ","type":"text"}]},{"type":"paragraph","content":[{"text":"It is ","type":"text"},{"text":"not allowed to perform the Directory protocol for each transaction","type":"text","marks":[{"type":"strong"}]},{"text":". Since the list of Issuers only changes occasionally, it is sufficient to execute the Directory protocol on a weekly basis and check if the list has changed based on the directoryDateTimestamp. If the Issuer list has changed, the latest version has to be saved and used for any subsequent transaction. Routing Services will normally also inform all Merchants (e.g. by email) about changes in their Issuer list. The Directory protocol should at least be executed once a week.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Directory protocol (like the Transaction protocol and the Status protocol) consists of a HTTP POST request from the Merchant to the Routing Service, followed by a HTTP response. The DirectoryReq is sent to the URL that is provided to the Merchant by the Routing Service for this specific purpose. This URL can be different from the one that is used for the ","type":"text"},{"text":"AcquirerTrxReq","type":"text","marks":[{"type":"em"}]},{"text":" and the ","type":"text"},{"text":"AcquirerStatusReq","type":"text","marks":[{"type":"em"}]},{"text":", but it can also be the same URL.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Routing Service validates the authenticity of the message sent by the Merchant by verifying the signature in the message. To do this, the Routing Service needs the public part of the Merchant’s Certificate, including the public key. The way in which the Merchant’s certificate is communicated with the Routing Service varies per bank.","type":"text"}]},{"type":"paragraph","content":[{"text":"Please refer to Chapter 10 for more information on authentication and security. APPENDIX B shows an example of a DirectoryReq and DirectoryRes.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"6.2 Directory Request (DirectoryReq)","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"DirectoryReq","type":"text","marks":[{"type":"em"}]},{"text":" consists of an XML message that is sent to the Routing Service with HTTP POST. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Table 15 shows all elements and attributes of the ","type":"text"},{"text":"DirectoryReq","type":"text","marks":[{"type":"em"}]},{"text":":","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"DirectoryReq","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"+createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this directory request message was created.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"+ Merchant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Merchant sub-elements.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"++ MerchantID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Merchant.MerchantID as supplied to the Merchant by the Acquirer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"++ subID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Merchant.subID as supplied to the Merchant by the Acquirer ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[246.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[136.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[378.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 15: Elements/attributes of the DirectoryReq","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"6.3 Directory Response (DirectoryRes)","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant will receive the ","type":"text"},{"text":"DirectoryRes","type":"text","marks":[{"type":"em"}]},{"text":" as a reply to the ","type":"text"},{"text":"DirectoryReq","type":"text","marks":[{"type":"em"}]},{"text":". This XML message contains a list of pairwise ","type":"text"},{"text":"Issuer.Name","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"Issuer.IssuerID","type":"text","marks":[{"type":"code"}]},{"text":". Issuers are grouped by country. The Issuers in the Consumer’s country of choice may be presented at the top in the Issuer selection list, the rest is sorted alphabetically, first by country, then by name. Table 16 shows all elements and attributes that appear in the ","type":"text"},{"text":"DirectoryRes","type":"text","marks":[{"type":"em"}]},{"text":" message.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"DirectoryRes","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"+createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this directory response message was created.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"+ Acquirer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Acquirer sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"++ AcquirerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Acquirer.AcquirerID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"+ Directory","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all Directory sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"++directoryDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which the list of Issuers was last updated by the Acquirer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"++ Country","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes (1..∞)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains al Country sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"+++ countryNames","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes (1..∞)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all ","type":"text"},{"text":"Country.countryNames","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"+++ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes (1..∞)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains pairwise issuerID and issuerName sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"++++ issuerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Issuer.IssuerID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"++++ issuerName","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Issuer.Name","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[321.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[159.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 16: Elements/attributes of the DirectoryRes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"6.4 Presentation of the Issuer Bank selection list","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant bears primary responsibility for initiating the iDIN process and for the communication to the Consumer regarding the status of this process. Merchants who offer iDIN to their customers must include iDIN in their lists of authentication methods, methods to log on, age verifications methods and/or methods for signing of documents (if any). iDIN must be presented in the list of methods in such a way that it receives at least the same amount of attention as all other competitors. It must be clear for the Consumer that he is about to authenticate with iDIN. The Merchant must clearly indicate to the Consumer what iDIN service he is about to initiate for the Consumer.","type":"text"}]},{"type":"paragraph","content":[{"text":"To ensure that the Consumer experience of an iDIN transaction is consistent and recognisable through all Merchant websites; all Merchants have to comply with certain presentation standards. ","type":"text"}]},{"type":"layoutSection","marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"All Issuers in the DirectoryRes have to be shown in a “dropdown list box”. The first element in this list is “Kies uw bank…” (","type":"text"},{"text":"Eng. “Choose your bank…”","type":"text","marks":[{"type":"em"}]},{"text":"), and is selected by default. Subsequently the name of the Consumer’s country of choice is shown (either the Merchant’s own country or the country where the Consumer is expected to be from). The names of all Issuers that belong to the Merchant’s country of choice are presented next in separate elements, in the same (alphabetical) order as they are presented in the DirectoryRes. Following this the names of other available countries are presented alphabetically. Within each country the banks from that country are sorted alphabetically, in the same order as presented in the DirectoryRes. The Merchant should generate an error message whenever one of the elements “Kies uw bank…” and countryNames elements is selected by the Consumer.","type":"text"}]},{"type":"paragraph","content":[{"text":"It is recommended to configure the HTML “value” field of the items in the list box to be the Issuer.IssuerID (BIC) of the corresponding Issuer, because this value is necessary for subsequent messages. An example of the Issuer selection list is shown in the Figure below.","type":"text"}]}]},{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph"},{"type":"mediaSingle","attrs":{"layout":"center","width":50.0},"content":[{"type":"media","attrs":{"width":183,"id":"15c25bb0-9b63-4fcb-8a47-92a27f267b51","collection":"contentId-588284049","type":"file","height":336}}]},{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Figure 3: Example of (open) dropdown list box showing the Issuer list","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]}]}]},{"type":"paragraph","content":[{"text":"Merchants are ","type":"text"},{"text":"not allowed","type":"text","marks":[{"type":"strong"}]},{"text":" to remove Issuers temporarily from the Issuer selection list or to grey them out. An exception is made for the presentation of the Issuer list in case of iDIN Signing. The SSP may only present to the Consumer Issuers who offer iDIN Signing. A list of Issuers who have implemented the product type Signature can be requested at iDIN B.V. (idin@","type":"text"},{"text":"betaalvereniging.nl","type":"text","marks":[{"type":"link","attrs":{"href":"http://betaalvereniging.nl"}}]},{"text":"). ","type":"text"}]},{"type":"paragraph","content":[{"text":"If a Merchants learns via the iDIN Notification System (Central Reporting tool for iDIN Validation Services and Routing Services to state system non-availability) or via error messages received from the Acquiring bank that a particular Validation Service is currently not available, the Merchant may display a message on its website informing Consumers that the particular bank is currently not available. In other words, it is permissible to display a message conveying such information but it is not permissible to temporarily remove or grey out the Issuer concerned from the Issuer selection list.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"7 iDIN Transaction protocol ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.1 General","type":"text"}]},{"type":"paragraph","content":[{"text":"The Transaction protocol initiates the exchange of messages of the actual iDIN process. After the Consumer has chosen iDIN as an identification method and has selected his bank, the Merchant sends a Transaction Request to the Routing Service. Within the iDIN standards this message is referred to as the AcquirerTrxReq. The Routing Service replies to the AcquirerTrxReq with a Transaction Response (AcquirerTrxRes). This AcquirerTrxRes will also (among other fields) contain the issuerAuthenticationURL. This URL will redirect the browser of the Consumer to the Issuer in order to let him authorise the iDIN transaction.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Transaction protocol consists of a HTTP POST request from the Merchant to the Routing Service, followed by a HTTP response. The AcquirerTrxReq is sent to the URL that is provided to the Merchant by the Routing Service for this specific purpose. This URL can be different from the one that is used for the DirectoryReq and the AcquirerStatusReq, but it can also be the same URL.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Routing Service validates the authenticity of the message sent by the Merchant by verifying the signature in the message. To do this, the Routing Service needs the public part of the Merchant’s Certificate, including the public key. The way in which the Merchant’s certificate is communicated with the Routing Service varies per bank.","type":"text"}]},{"type":"paragraph","content":[{"text":"Please refer to Chapter 13 for more information on authentication and security. APPENDIX B shows an example of an AcquirerTrxReq and AcquirerTrxRes.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.2 Transaction Request (AcquirerTrxReq)","type":"text"}]},{"type":"paragraph","content":[{"text":"The XML message sent by the Merchant to the Routing Service to initiate the transaction contains the elements and attributes shown in Table 17. The iDIN product specific information (SAML 2.0 message) is put inside the container element in the AcquirerTrxRes in the form of an AuthnRequest, as shown in Table 18.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerTrxReq","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Transaction Request message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"+ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Issuer sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ IssuerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Issuer.IssuerID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"+ Merchant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all Merchant sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ merchantID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.MerchantID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ subID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.subID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ merchantReturnURL","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.returnURL","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"+ Transaction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all Transaction sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ expirationPeriod","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"expirationPeriod","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ language","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains language of Consumer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ entranceCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains","type":"text"},{"text":" entranceCode","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"++ container","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the SAML 2.0 AuthnRequest message, see Table 18","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[318.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[468.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 19: Elements/attributes of AcquirerTrxReq","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"As explained, the SAML 2.0 AuthnRequest message is embedded in the container element. The AuthnRequest message is a standardised message, so it contains elements that are not used in iDIN. This elements and attributes inside the container are shown in Table 18. ","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes (inside container element)","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"AuthnRequest","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message (inside container element)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@ID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"BankID.MerchantReference","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@Version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“2.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@IssueInstant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Transaction Request message was created. This must be the same value as in ","type":"text"},{"text":"createDateTimestamp","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@Destination","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@Consent","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"May be present. Shall be ignored. No matter what consent has been provided to the Merchant, the Issuer is always responsible for obtaining the Consumer’s consent","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@ForceAuthn","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"May be present. ","type":"text"},{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “true” if present. Explicit authentication shall be enforced for every iDIN service","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@IsPassive","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"May be present. ","type":"text"},{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “false” if present. Since explicit authentication is enforced the Issuer cannot be passive","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@ProtocolBinding","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “nl:bvn:bankid:1.0:protocol:iDx”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@AssertionConsumerServiceIndex","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@AssertionConsumerServiceURL","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.merchantReturnURL","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@AttributeConsumingServiceIndex","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"BankID.RequestedServiceID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"@ProviderName","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"+ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.MerchantID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"+ @NameQualifier","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"+ @SPNameQualifier","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"+ @Format","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"+ @SPProviderID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[320.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[175.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[465.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present. Relevant signing is done at iDx level. (signature element in table 17)","type":"text"}]}]}]}]},{"type":"expand","attrs":{"title":"Addition for Signing Service Providers (SSPs): table 18"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"+Extensions","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[559.0]},"content":[{"type":"paragraph","content":[{"text":"Must be present when the serviceID indicates this transaction is used to place an electronic signature. May not be present in other cases","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"++ Attribute","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[559.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Attribute sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"++ @Name","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[559.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: “urn:nl:bvn:bankid:1.0:merchant.documentID”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[278.0]},"content":[{"type":"paragraph","content":[{"text":"+++ AttributeValue","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[559.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Merchant.DocumentID","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"This element/attribute can only be processed by Issuers who have implemented the product type Signature. See 5.3.1. for more information.","type":"text"}]}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"+ Subject","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"+ NameIDPolicy","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"+ Conditions","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"May be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"+ RequestedAuthnContext","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"Contains RequestedAuthnContext sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"+ @Comparison","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “minimum”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"++ AuthnContextClassRef","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"Contains BankID.LOA","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"++ AuthnContextDecIRef","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"Shall not be present","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"+ Scoping","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[455.0]},"content":[{"type":"paragraph","content":[{"text":"May be present","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 18: Elements/attributes inside the container of the AcquirerTrxReq","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.3 ","type":"text"},{"text":"Transaction Response (AcquirerTrxRes)","type":"text","marks":[{"type":"em"}]}]},{"type":"paragraph","content":[{"text":"If everything goes well the Routing Service will reply to the AcquirerTrxReq with the AcquirerTrxRes. Table 19 shows all fields of the AcquirerTrxRes message. The AcquirerTrxRes has no container, so there is no SAML 2.0 message in this response (this is different in case of an Error Response, see Chapter 9 on error handling). ","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerTrxRes","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"+ createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Transaction Response message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"+ Acquirer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Acquirer sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"++ AcquirerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Acquirer.AcquirerID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"+ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Issuer sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"++ IssuerAuthenticationURL","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"issuerAuthenticationURL","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"+ Transaction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Transaction sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"++ transactionID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"++ transactionCreateDateTimeStamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which the transaction was first registered by the Routing Service. This time can be used by Merchant, Routing Service and Validation Service for reporting on the transaction.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[315.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[463.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 19: Elements/attributes of AcquirerTrxRes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.4 Errors when executing Transaction Protocol","type":"text"}]},{"type":"paragraph","content":[{"text":"A number of errors may occur when executing the iDIN Transaction Protocol. These may be related to unavailability or an error within your own web environment (Merchant), the Routing Service environment or the Validation Service environment. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The following situations may occur:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You receive an error response (message B’(X) ) from your Routing Service within the set time-out period;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You do not receive any response within the set time-out period.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"In all of the above cases, the Transaction protocol cannot be successfully executed. This means it is not possible for the iDIN transaction to take place at that time. Error handling is explained in more detail in Chapter 12.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.5 Redirect to the online banking environment","type":"text"}]},{"type":"paragraph","content":[{"text":"After receiving the ","type":"text"},{"text":"AcquirerTrxRes","type":"text","marks":[{"type":"em"}]},{"text":" the Merchant has to redirect the Consumer to the issuerAuthenticationURL of the selected Issuer, as stated in the ","type":"text"},{"text":"AcquirerTrxRes","type":"text","marks":[{"type":"em"}]},{"text":" message. If the Merchant’s page contains HTML frames, these will be removed by the Issuer (‘frame busting’). If and when the Consumer returns to the Merchant’s website (with the merchantReturnURL), the Merchant will have to completely rebuild its own page to show confirmation of iDIN reception.","type":"text"}]},{"type":"expand","attrs":{"title":"7.5.1 Specific requirement iDIN Mobile: Redirect to Issuer (no in-app browser)"},"content":[{"type":"paragraph","content":[{"text":"The Merchant needs to redirect the Consumer to the selected Issuer from the browser window or Merchant app. If it is not possible to keep the Consumer in the same browser window then this should be communicated to the Consumer (e.g.: ","type":"text"},{"text":"“You will now be redirected to the app or (mobile) website of your bank” or in Dutch “U wordt nu doorverwezen naar de app of (mobiele) website van uw bank”). ","type":"text","marks":[{"type":"em"}]}]},{"type":"paragraph","content":[{"text":"In case of a transaction initiated in the mobile Merchant app, it is ","type":"text"},{"text":"not allowed","type":"text","marks":[{"type":"strong"}]},{"text":" to present the Issuer approval screens in a web view component within the Merchant’s own app (in-app browser). The complete transaction flow, up to the redirect back to the Merchant’s app, must take place in an app that is trusted by the Consumer, either the Consumer’s chosen browser or the Issuer’s mobile app. Thus, the issuerAuthenticationURL must, for execution, be offered to the mobile operating system at all times or executed using ","type":"text"},{"text":"SafarViewController","type":"text","marks":[{"type":"textColor","attrs":{"color":"#ff0000"}},{"type":"link","attrs":{"href":"https://developer.apple.com/documentation/safariservices/sfsafariviewcontroller"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#ff0000"}}]},{"text":"or ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#003366"}}]},{"text":"Chrome Custom Tabs","type":"text","marks":[{"type":"textColor","attrs":{"color":"#ff0000"}},{"type":"link","attrs":{"href":"https://developer.chrome.com/multidevice/android/customtabs"}}]},{"text":". During the transaction flow it should not be possible for the Consumer to initiate another transaction through the Merchant’s original app.","type":"text"}]},{"type":"paragraph","content":[{"text":"Relevant details about the redirect from the Merchant to the Issuer’s mobile channel:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Issuer decides which Consumers to redirect to which channel. For example, some Issuers may treat users of tablet devices the same as mobile users, while others will treat them like PC users;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Merchant should not intervene with the redirect. The issuerAuthenticationURL has also to be used for mobile iDIN transactions. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the Issuer has integrated iDIN mobile in its mobile banking app, the Consumer is offered the option, on a ‘landing page’, to open the app or approve the iDIN transaction via the (mobile) web page. On this ‘landing page’ the Consumer might be offered the option to download the latest version of the mobile banking app, if it is not yet installed on the Consumer’s device.","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.6 Redirect to the Merchant environment","type":"text"}]},{"type":"paragraph","content":[{"text":"After the Consumer has performed the necessary steps at the Issuer he/she will be presented with a ‘Continue’ button that must redirect him back to the website of the Merchant with the merchantReturnURL as supplied in the ","type":"text"},{"text":"AcquirerTrxReq","type":"text","marks":[{"type":"em"}]},{"text":". ","type":"text"}]},{"type":"paragraph","content":[{"text":"Two GET parameters are appended to this URL: the entranceCode (see Table 10) with ‘ec’ as GET parameter name, and the ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":" (see Table 10) with ‘trxid’ as GET parameter name. It is also possible for a Merchant to add additional parameters. For example, if the Merchant defines the merchantReturnURL as follows:","type":"text"}]},{"type":"paragraph","content":[{"text":"http://www.webshop.nl/processtransaction?producttype=electronics","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"http://www.webshop.nl/processtransaction?producttype=electronics"}}]}]},{"type":"paragraph","content":[{"text":"The final URL will look something like:","type":"text"}]},{"type":"paragraph","content":[{"text":"http://www.webshop.nl/processtransaction?producttype=electronics&trxid=0010123456789012&ec=4hd7TD9wRn76w6gGwGFDgdL7jEtb","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"http://www.webshop.nl/processtransaction?producttype=electronics&trxid=0010123456789012&ec=4hd7TD9wRn76w6gGwGFDgdL7jEtb"}}]},{"text":" ","type":"text","marks":[{"type":"underline"}]}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"entranceCode","type":"text","marks":[{"type":"code"}]},{"text":" field should contain a unique value, with the object of preventing message ‘sniffing’. Use of the same ","type":"text"},{"text":"entranceCode","type":"text","marks":[{"type":"code"}]},{"text":" each time would allow malevolent individuals to intercept the data from the ","type":"text"},{"text":"merchantReturnURL","type":"text","marks":[{"type":"code"}]},{"text":" and make fraudulent use of this information. This is why using unique values for the ","type":"text"},{"text":"entranceCode","type":"text","marks":[{"type":"code"}]},{"text":" is extremely important.","type":"text"}]},{"type":"paragraph","content":[{"text":"Note that a Consumer may not always use the redirect back to the Merchant environment that is offered by the Issuer. Also note that in exceptional cases the Issuer may be unable to match the ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":" in its system or another error occurs, which makes it impossible to redirect the Consumer back to the Merchant. In all other cases the Consumer is redirected with the parameters defined above, regardless of the final status of the transaction (success, cancelled, failed). The Merchant must then use the Status protocol (see Chapter 11) to determine the status of the transaction.","type":"text"}]},{"type":"expand","attrs":{"title":"7.6.1 Specific requirement iDIN Mobile: Redirect to the Merchant environment"},"content":[{"type":"paragraph","content":[{"text":"After the Consumer has been authenticated in either the mobile or regular channel and has approved the transaction, he is redirected back to the Merchant as normal (using the merchantReturnURL). The merchantReturnURL usually starts with ‘https’, redirecting the Consumer back to a page on the mobile device’s browser. If the Consumer has initiated the transaction from the Merchant’s mobile app, the merchantReturnURL can be an app handler, which will redirect the Consumer directly to the Merchant app. An app handler is a call that can be used to start an app and request it to initiate a specific action. For example a Merchant’s app handler can start with ‘nl.companyname.idin://’ and this will open the Merchant’s app.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"The merchantReturnURL should always direct to a web page or app of the Merchant (or party acting on behalf of the Merchant).","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The following errors may occur during execution of the redirect to the online banking environment (Issuer), the execution of the iDIN transaction at the Issuer and/or the redirect back to your (Merchant) environment:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The bank page is unavailable, resulting in the Consumer being unable to approve the iDIN request, and thus the Consumer cannot be properly redirected to your confirmation page;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The bank page is available but the Consumer cannot (after approving the iDIN request or otherwise) be properly redirected to your confirmation page.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"In both situations the Consumer cannot (as the result of a disturbance) return to your confirmation page in the normal way. In that case the Consumer can return to your website by using the ‘back’ button or entering the URL, for example. Considering the short validity of the Assertion the Merchant would be unable to retrieve the status of the transaction. More precisely, the Merchant is only allowed to request the status when the Consumer is successfully returned to the Merchant’s website using the return URL, see Section 11.5. Therefore, the Merchant has to make a new transaction when something has gone wrong in the redirections.","type":"text"}]},{"type":"expand","attrs":{"title":"7.8 Specific requirement iDIN Mobile: Four different scenarios for completion of iDIN Mobile transaction"},"content":[{"type":"paragraph","content":[{"text":"To give an overview of all the possible process steps and important notes when dealing with iDIN Mobile transactions, we have specified four different scenarios. There are four different scenarios because either the Issuer or the Merchant or both can use a (mobile) web page or a mobile app.","type":"text"}]},{"type":"paragraph","content":[{"text":"Because these scenarios (could) differ from the regular (non-mobile) iDIN transactions they will be illustrated in the following paragraphs.","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[139.0]},"content":[{"type":"paragraph","content":[{"text":"Section","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"Issuing Bank","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[139.0]},"content":[{"type":"paragraph","content":[{"text":"7.8.1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"(Mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"(Mobile) web page","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[139.0]},"content":[{"type":"paragraph","content":[{"text":"7.8.2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"(Mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"Mobile banking app","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[139.0]},"content":[{"type":"paragraph","content":[{"text":"7.8.3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"Mobile app","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"(Mobile) web page","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[139.0]},"content":[{"type":"paragraph","content":[{"text":"7.8.3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"Mobile app","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"Mobile banking app","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 20: Different scenarios for the completion of an iDIN mobile transaction","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.8.1 Consumer is redirected from the Merchant’s (mobile) web page to the Issuer’s (mobile) web page.","type":"text"}]},{"type":"paragraph","content":[{"text":"This is currently the most common iDIN mobile scenario, as it is identical to the regular desktop iDIN transaction flow. As such there are no specific notes for use in a mobile setting, but this scenario has been added for reasons of completeness. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The Consumer starts the transaction on the Merchant’s mobile page and follows these steps: ","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"Step","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Important note","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects iDIN to provide identification or consumer attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects his Issuer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer of his choice","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"It is mandatory for the Merchant to have the Operating System (OS) of the mobile device handle the issuerAuthenticationURL or use the secure in-app browsing techniques SafariViewController and Chrome Custom Tabs. See section 7.5 for more information.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Issuer presents the Issuer’s ‘landing page’ to the Consumer or redirects the Consumer to it's mobile banking app, which offers the option to complete the iDIN transaction in the Issuer’s mobile banking app or in the Issuer’s (mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects the (mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"6","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer’s (mobile) web page where he can log in and authorize the iDIN transaction. After completion of the transaction the Issuer shows the complete iDIN identification/authentication to the Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"7","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected back by the Issuer, to the Merchant’s (mobile) web page using the merchantReturnURL, which was received from the Merchant","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"The merchantReturnURL usually starts with https:// and contains two parameters (","type":"text"},{"text":"entranceCode","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":") that can be used to correctly identify the Consumer upon his return","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"8","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[319.0]},"content":[{"type":"paragraph","content":[{"text":"The Merchant shows the Consumer the result of the iDIN transaction","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"paragraph","content":[{"text":" Table 21: Scenario: Redirect from Merchant (mobile) web page to the Issuers (mobile) web page","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.8.2 Consumer is redirected from the Merchant’s (mobile) web page to the Issuer’s mobile banking app","type":"text"}]},{"type":"paragraph","content":[{"text":"The Consumer starts his customer journey on the Merchants (mobile) web page and follows the following steps:","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"Step","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"text":"Important note","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects iDIN to provide identification or consumer attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects his Issuing Bank","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer of his choice","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Issuer presents the Issuer’s ‘landing page’ to the Consumer, which offers the option to complete the iDIN transaction in the Issuer’s mobile banking app or in the Issuer’s (mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects the mobile banking app","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"6","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer’s banking app where he can log in and authorize the iDIN transaction. After completion of the transaction the Issuer shows the complete iDIN identification/authentication to the Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"7","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected back by the Issuer, to the Merchant’s (mobile) web page using the merchantReturnURL, which was received from the Merchant","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"text":"Because the transaction takes place in the bank’s app, outside of the web-browser setting, the browser session may be lost. This means the Merchant may not be able to recognize the Consumer using the browser session.","type":"text"}]},{"type":"paragraph","content":[{"text":"Next to this, when redirecting the Consumer back to the Merchant from the bank-app, the merchantReturnURL is handled by the Operating System of the mobile device. The OS uses the native (default) browser to handle this URL. This discontinues the original browser session if the transaction was initiated in a non-native browser. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The merchantReturnURL starts with https:// and contains two parameters (","type":"text"},{"text":"entranceCode","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":") that can be used to correctly identify the Consumer upon his return","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[122.0]},"content":[{"type":"paragraph","content":[{"text":"8","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[326.0]},"content":[{"type":"paragraph","content":[{"text":"The Merchant shows the Consumer the result of the iDIN transaction.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 22: Scenario: Redirect form Merchant (mobile) web page to the Issuers mobile banking app","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.8.3 Consumer is redirected from the Merchant’s mobile app to the Issuer’s (mobile) web page","type":"text"}]},{"type":"paragraph","content":[{"text":"The Consumer starts his customer journey on the Merchants mobile app and follows the following steps:","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Step","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"text":"Important note","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects iDIN to provide identification or consumer attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects his Issuer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer of his choice","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"text":"It is mandatory for the Merchant to let the Operating System, which is installed on the Consumer’s mobile device, handle the issuerAuthenticationURL. See Section 8.5.1 for more information","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Issuer presents the Issuer’s ‘landing page’ to the Consumer, which offers the option to complete the iDIN transaction in the Issuer’s mobile banking app or in the Issuer’s (mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects the (mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"6","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer’s (mobile) web page where he can log in and authorize the iDIN transaction. After completion of the transaction the Issuer shows the complete iDIN identification/authentication to the Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"7","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected back by the Issuer, to the Merchant’s app using the merchantReturnURL, which was received from the Merchant","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"text":"The merchantReturnURL contains an app handler and two parameters (","type":"text"},{"text":"merchantReturnURL","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":") that can be used to correctly identify the Consumer upon his return. See Section 8.6 for more information","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"8","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[323.0]},"content":[{"type":"paragraph","content":[{"text":"The Merchant shows the Consumer the result of the iDIN transaction","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[310.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 23: Scenario: Redirect from the Merchants mobile app to the Issuers (mobile) web page","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.8.4 Consumer is redirected from the Merchant’s mobile app to the Issuer’s mobile banking app","type":"text"}]},{"type":"paragraph","content":[{"text":"The Consumer starts his customer journey on the Merchants mobile app and follows the following steps:","type":"text"}]},{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"Step","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"Important note","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects iDIN to provide identification or consumer attributes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"2","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects his Issuer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"3","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer of his choice","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"It is mandatory for the Merchant to let the Operating System, which is installed on the Consumer’s mobile device, handle the issuerAuthenticationURL. See Section 8.5.1 for more information","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"4","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Issuer presents the Issuer’s ‘landing page’ to the Consumer, which offers the option to complete the iDIN transaction in the Issuer’s mobile banking app or in the Issuer’s (mobile) web page","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"5","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer selects the mobile banking app","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"6","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected to the Issuer’s banking app where he can log in and authorize the iDIN transaction. After completion of the transaction the Issuer shows the complete iDIN identification/authentication to the Consumer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"7","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Consumer is redirected back by the Issuer, to the Merchant’s app using the merchantReturnURL, which was received from the Merchant","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"The merchantReturnURL contains an app handler and two parameters (","type":"text"},{"text":"entranceCode","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":") that can be used to correctly identify the Consumer upon his return. See Section 8.6 for more information","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[123.0]},"content":[{"type":"paragraph","content":[{"text":"8","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"The Merchant shows the Consumer the result of the iDIN transaction","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 24: Scenario: Redirect from the Merchants mobile app to the Issuers mobile banking app","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"7.9 Performance and time-out of transaction message","type":"text"}]},{"type":"paragraph","content":[{"text":"The performance of the Issuer and Routing Service systems has a direct influence on the Consumer’s user experience. Therefore, iDIN sets a target time and time-out for the Transaction Response message. For a Merchant the relevant target time and time-out concerning the communication with its iDIN Routing Service is: ","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[327.0]},"content":[{"type":"paragraph","content":[{"text":"Communication","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[226.0]},"content":[{"type":"paragraph","content":[{"text":"Target time (in seconds)","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Time-out (in seconds)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[327.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerTrxReq - AcquirerTrxRes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[226.0]},"content":[{"type":"paragraph","content":[{"text":"2.0","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"7.6","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 25: Performance requirements (for the 95th percentile","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":"[7]","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}},{"type":"strong"}]},{"text":")","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The target time is the time (in seconds) in which the Merchant should receive a AcquirerTrxRes message after sending a AcquirerTrxReq. The time-out is the length of time after which the Merchant should no longer expect a response (most likely an error has occurred) and should act accordingly (for example by displaying an appropriate error message to the Consumer).","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"8 iDIN Status protocol","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"8.1 General","type":"text"}]},{"type":"paragraph","content":[{"text":"To verify whether an iDIN transaction was successful the Merchant will start the Status protocol by sending a Status Request to the Routing Service. Within the iDIN standards this message is referred to as the AcquirerStatusReq. ","type":"text"}]},{"type":"paragraph","content":[{"text":"To avoid unnecessary system load status requests should not be made unnecessarily, see Section 11.5 for more details on what is allowed. The AcquirerStatusReq message can be sent after the return of the Consumer to the Merchant’s website (after the redirect from the Issuer).","type":"text"}]},{"type":"paragraph","content":[{"text":"Status protocol consists of a HTTP POST request from the Merchant to the Routing Service, followed by a HTTP response. The AcquirerStatusReq is sent to the URL that is provided to the Merchant by the Routing Service for this specific purpose. This URL can be different from the one that is used for the DirectoryReq and the AcquirerTrxReq, but it can also be the same URL.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Routing Service validates the authenticity of the message sent by the Merchant by verifying the signature in the message. To do this, the Routing Service needs the public part of the Merchant’s Certificate, including the public key. The way in which the Merchant’s certificate is communicated with the Routing Service varies per bank.","type":"text"}]},{"type":"paragraph","content":[{"text":"Please refer to Chapter 13 for more information on authentication and security. Appendix B shows an example of an AcquirerStatusReq and AcquirerStatusRes.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"8.2 Status Request (AcquirerStatusReq)","type":"text"}]},{"type":"paragraph","content":[{"text":"Table 26 contains all fields that are part of the AcquirerStatusReq XML message. The Merchant sends this message to the Routing Service. The AcquirerStatusReq does not contain a container with a SAML 2.0 message. ","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerStatusReq","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Status Request message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+ Merchant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Merchant sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++ merchantID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.MerchantID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++ subID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.subID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+ Transaction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Transaction sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++ transactionID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[493.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 26: Elements/attributes of AcquirerStatusReq","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"8.3 Status Response (AcquirerStatusRes)","type":"text"}]},{"type":"paragraph","content":[{"text":"The reply to the AcquirerStatusReq is the AcquirerStatusRes. This message and the SAML Response inside the container are created by the Validation Service and sent to the Merchant via the Routing Service. The AcquirerStatusRes contains the elements and attributes as listed in Table 27. This message communicates the status of the transaction (related to the Transaction.TransactionID which was sent in the AcquirerStatusReq) to the Merchant. If the status equals “Success”, the container element is included in the response. Inside the container element is the SAML 2.0 message containing the consumer data elements. The elements and attributes in the optional container are shown in Table 28.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerStatusRes","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"+ createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Status Response message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"+ Acquirer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Acquirer sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"++ acquirerID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Acquirer.AcquirerID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"+ Transaction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Transaction sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"++ transactionID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"++ status","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Transaction.status","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"++ statusDateTimeStamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Present only If:","type":"text","marks":[{"type":"strong"}]},{"text":" Transaction.status = “Success”, “Cancelled”, “Expired” or “Failure” (not present when Transaction.status = “Open” or “Pending”). Contains DateTime at which the Issuer established the Transaction.status for this transaction and recorded it as part of the transaction details","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"++ container","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Present only if:","type":"text","marks":[{"type":"strong"}]},{"text":" Transaction.status = “Success”","type":"text"}]},{"type":"paragraph","content":[{"text":"Contains the SAML 2.0 Response message, see Table 28","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[300.0]},"content":[{"type":"paragraph","content":[{"text":"+ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[174.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[486.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 27: Elements/attributes of AcquirerStatusRes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"As explained, the SAML 2.0 Response message is embedded in the container element. The Response message is a standardised message, and therefore it contains elements that are not used in iDIN. However, because it is up the Validation Service to omit these values it is not indicated in Table 28. The elements and attributes inside the container are shown in Table 28.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"Response","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Root of this message inside the container element","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"@ID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Transaction.TransactionID","type":"text","marks":[{"type":"code"}]},{"text":" prefixed with ‘RES-‘","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"@InResponseTo","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Merchant.MerchantReference","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “2.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"@IssueInstant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this SAML Response message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Acquirer.AcquirerID","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"NB: ","type":"text","marks":[{"type":"strong"}]},{"text":"Issuer in this context is reserved SAML terminology and not related to the iDIN Issuer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+ Status","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the status of SAML Response in attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ StatusCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains StatusCode sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+++@Value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “urn:oasis:names:tc:SAML:2.0:status:Success”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+++ StatusCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"StatusCode one level deeper","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++ @Value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Has one of the two values:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"“urn:nl:bvn:bankid:1.0:status:Success”","type":"text"}]},{"type":"paragraph","content":[{"text":"or, if some attributes are not delivered conform the minimal set:","type":"text"}]},{"type":"paragraph","content":[{"text":"“urn:nl:bvn:bankid:1.0:status:IncompleteAttributeSet”","type":"text"}]},{"type":"paragraph","content":[{"text":"The use of this status code is explained in more detail in Section 15.4","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+ Assertion","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Assertion sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+ @Version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “2.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+ @ID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains unique identifier created by the Validation Service","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+ @IssueInstant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Assertion element was created. Different from the DateTime at which this Status Response message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Issuer.IssuerID","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the Signature sub-elements for the SAML signature created by the Validation Service.","type":"text"}]},{"type":"paragraph","content":[{"text":"See Chapter 13 for more information about signing and Section 13.6 for all the elements. Section 10.2.1. deals with the signing of the SAML Assertion in particular.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ Subject","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Subject sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+++ EncryptedID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the encrypted element NameID which in turn contains the consumer.bin or consumer.transientid. See Section 13.3","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ Conditions","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Conditions sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ @NotBefore","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which the transaction request was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ @NotOnOrAfter","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime 30 seconds after the Assertion@IssueInstant","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+++ AudienceRestriction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains AudienceRestriction sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++ Audience","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the ","type":"text"},{"text":"Merchant.LegalID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++ OneTimeUse","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Is present but is left empty","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ AuthnStatement","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains AuthnStatement sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++ @AuthnInstant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which the authentication took place","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+++ AuthnContext","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains AuthnContext sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++AuthnContextClassRef","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"BankID.LOA","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++AuthenticationAuthority","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Issuer.IssuerID","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++AttributeStatement","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Contains AttributeStatement sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"+++Attribute","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph"}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++@Name","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “urn:nl:bvn:bankid:1.0:bankid.deliveredserviceid”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"++++AttributeValue","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[173.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[484.0]},"content":[{"type":"paragraph"}]}]}]},{"type":"expand","attrs":{"title":"Addition for Signing Service Providers (SSPs): table 28"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[306.0]},"content":[{"type":"paragraph","content":[{"text":"+++","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[531.0]},"content":[{"type":"paragraph","content":[{"text":"Must be present when the serviceID indicates the product type for signing is used. Only to be used by a Signing Service Provider","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[306.0]},"content":[{"type":"paragraph","content":[{"text":"++++@Name","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[531.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: “urn:nl:bvn:bankid:1.0:merchant.documentID”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[306.0]},"content":[{"type":"paragraph","content":[{"text":"++++","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[531.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Merchant.DocumentID","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"This element/attribute can only be processed by Issuers who have implemented the product type Signature. See 5.3.1. for more information.","type":"text"}]}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"+++ EncryptedAttribute","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[169.0]},"content":[{"type":"paragraph","content":[{"text":"No (0..∞)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[482.0]},"content":[{"type":"paragraph","content":[{"text":"Contains encrypted consumer attributes. One for each consumer attribute. See Section 13.3","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 28: Elements/attributes inside the container of AcquirerStatusRes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"8.4 Errors during execution of Status Protocol","type":"text"}]},{"type":"paragraph","content":[{"text":"When using the Status Protocol to request an iDIN transaction status, errors can occur which can lead to the Merchant not obtaining the status of the transaction at that moment. It is therefore not possible to show the Consumer the final status of the transaction at that moment. Recommended messages to show to Consumers are defined further on in this document. ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"8.5 Restrictions on AcquirerStatusReq","type":"text"}]},{"type":"paragraph","content":[{"text":"A Merchant may only initiate an AcquirerStatusReq in the following case:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"It is triggered by a Redirect to Merchant (E) as part of the Transaction protocol.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The SAML Assertion issued by the Validation Service is only valid for 30 seconds. From the moment the Consumer has been successfully redirected to the Merchant up to the time the Assertion is expired, the Merchant can make status requests. However, the Merchant should only perform more than one status request if it has received a timeout from the Routing Service. The Merchant is not allowed to perform any more status requests once it received notification from the Validation Service that the Assertion is expired, see Chapter 12 for the details.","type":"text"}]},{"type":"paragraph","content":[{"text":"Merchants will be perceived as committing undesirable actions if they use the Status Request more than the above described limitation, as doing so places unnecessarily heavy demands on the Acquirer’s and Issuer’s system.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"8.6 Performance and time-out of status messages","type":"text"}]},{"type":"paragraph","content":[{"text":"The performance of the Issuer/Validation Service and Routing Service systems has a direct influence on the Consumer’s user experience. Therefore iDIN sets a target time and time-out for the status response message. For a Merchant the relevant target time and time-out concern the communication with its iDIN Routing Service is:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[430.0]},"content":[{"type":"paragraph","content":[{"text":"Communication","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Target time (in seconds)","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[158.0]},"content":[{"type":"paragraph","content":[{"text":"Time-out (in seconds)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[430.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerStatusReq ","type":"text","marks":[{"type":"em"}]},{"text":"- A","type":"text"},{"text":"cquirerStatusRes","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"2.0","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[158.0]},"content":[{"type":"paragraph","content":[{"text":"7.6","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 29: Performance requirements (for the 95th percentile","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":"[8]","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}},{"type":"strong"}]},{"text":")","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The target time is the time (in seconds) in which the Merchant should receive a ","type":"text"},{"text":"AcquirerStatusRes","type":"text","marks":[{"type":"em"}]},{"text":" after sending a ","type":"text"},{"text":"AcquirerStatusReq","type":"text","marks":[{"type":"em"}]},{"text":". The time-out is the length of time after which the Merchant should no longer expect a response (most likely an error has occurred) and should act accordingly (for example by displaying an appropriate error message to the Consumer).","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"9 Error handling","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"9.1 General","type":"text"}]},{"type":"paragraph","content":[{"text":"If an error occurs while processing a ","type":"text"},{"text":"DirectoryReq","type":"text","marks":[{"type":"em"}]},{"text":", ","type":"text"},{"text":"AcquirerTrxReq","type":"text","marks":[{"type":"em"}]},{"text":" or ","type":"text"},{"text":"AcquirerStatusReq","type":"text","marks":[{"type":"em"}]},{"text":", for example because a request contains an invalid value, an ","type":"text"},{"text":"AcquirerErrorRes","type":"text","marks":[{"type":"em"}]},{"text":" will be returned instead of the regular response. Also, for certain special cases an error is returned to the Merchant e.g. when the Assertion is expired. This is discussed in more detail in Appendix A.","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"AcquirerErrorRes","type":"text","marks":[{"type":"em"}]},{"text":" has the same main structure as indicated in Table 30 for all three types of requests. The container is only present when receiving an error after an ","type":"text"},{"text":"AcquirerStatusReq","type":"text","marks":[{"type":"em"}]},{"text":". Appendix B shows an example of an ","type":"text"},{"text":"AcquirerErrorRes","type":"text","marks":[{"type":"em"}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"9.2 Error Response (AcquirerErrorRes)","type":"text"}]},{"type":"paragraph","content":[{"text":"Instead of the regular response (","type":"text"},{"text":"DirectoryRes","type":"text","marks":[{"type":"em"}]},{"text":",","type":"text"},{"text":" AcquirerTrxRes","type":"text","marks":[{"type":"em"}]},{"text":" or ","type":"text"},{"text":"AcquirerStatusRes","type":"text","marks":[{"type":"em"}]},{"text":") the Routing Service will return an","type":"text"},{"text":" AcquirerErrorRes","type":"text","marks":[{"type":"em"}]},{"text":" if an error occurs during the reception or processing of the request, or if the request contains values that are not allowed or do not comply with the required format. Table 30 lists the fields that appear in the AcquirerErrorRes and Table 31 lists the elements and attributes that appear inside the container. ","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"AcquirerErrorRes","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"@version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“1.0.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"@productID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“NL:BVN:BankID:1.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+createDateTimestamp","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Error Response message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+Error","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Error sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++errorCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Error.errorCode","type":"text","marks":[{"type":"code"}]},{"text":" see Appendix A","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++errorMessage","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Error.errorMessage","type":"text","marks":[{"type":"code"}]},{"text":" see Appendix A","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++errorDetail","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Error.errorDetail","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++suggestedAction","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains ","type":"text"},{"text":"Error.suggestedAction","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++consumerMessage","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains","type":"text"},{"text":" Error.consumerMessage","type":"text","marks":[{"type":"code"}]},{"text":" see Appendix A","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"++container","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the SAML 2.0 Response message, see Table 32","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[262.0]},"content":[{"type":"paragraph","content":[{"text":"+Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Contains all signature sub-elements. See Chapter 13 for more information about signing and Section 13.6 for all the elements","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 30: Elements/attributes of the AcquirerErrorRes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"Response","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Root of the message inside the container","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"@ID","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Transaction.TransactionID prefixed with ‘RES-‘","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"@InResponseTo","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains BankID.MerchantReference","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"@Version","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “2.0”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"@IssueInstant","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains DateTime at which this Error Response message was created","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"+ Issuer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Acquirer.AcquirerID","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"+ Status","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Status sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"++ StatusCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains StatusCode sub-elements.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"++ @Value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains a first level SAML status code equal to:","type":"text"}]},{"type":"paragraph","content":[{"text":"“urn:oasis:names:tc:SAML:2.0:status:Requester” which means the request could not be performed due to an error on the part of the requester","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"+++ StatusCode","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains StatusCode sub-elements.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"+++ @Value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the second level status code. See Appendix A for which status code is returned when","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[264.0]},"content":[{"type":"paragraph","content":[{"text":"++ StatusMessage","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[524.0]},"content":[{"type":"paragraph","content":[{"text":"Provides a human readable hint to which field caused the error","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 31: Elements/attributes inside the container of ","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":"AcquirerErrorRes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}},{"type":"em"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"9.3 Non-availability","type":"text"}]},{"type":"paragraph","content":[{"text":"It might be possible that one of the Issuers is temporarily unavailable. In this case, transactions that have to be processed by this Issuer will generate an AcquirerErrorRes. When the Routing Service has determined unavailability of an Issuer it will communicate this to the Issuer immediately. This means that Merchant will never have to contact the Issuer directly.","type":"text"}]},{"type":"paragraph","content":[{"text":"It might also be possible that the Routing Service itself is temporarily unavailable. In this case, unless the Merchant has more than one Routing Service, no iDIN transactions can be processed and the Routing Service will generate an AcquirerErrorRes or time-out.","type":"text"}]},{"type":"paragraph","content":[{"text":"Lastly, the Merchant return-webpage might not be working properly.","type":"text"}]},{"type":"paragraph","content":[{"text":"For all three cases we recommend displaying a clear error message to the Consumer. ","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"10 Security and certificates ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"10.1 General principles of certificates","type":"text"}]},{"type":"paragraph","content":[{"text":"For asymmetric encryption two keys are used: one public key and one private key. The public key is linked to the certificate and can be shared with anyone. The owner of the certificate must keep the private ","type":"text"},{"text":"key confidential at all times","type":"text","marks":[{"type":"underline"}]},{"text":". The specific characteristics of the private and public part of the certificates will allow the encryption of a message with the public part while the result can be decrypted with the private part, and vice versa. The certificates should have RSA keys of 2048 bit long. It is not possible to decrypt a text with the same key that was used to encrypt it. ","type":"text"}]},{"type":"paragraph","content":[{"text":"These specific characteristics enable two applications of a certificate: ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Encryption of a message. By encrypting a message with the public key of the receiving party the information can only be read by the recipient (who has sole knowledge of the private key);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Creating an electronic signature of a message. By encrypting the (hash) message with the private key, the recipient can determine the authenticity of the (sender of the) message by verifying the signature with the public part of the certificate. The recipient will also verify the integrity of the message to make sure the contents of the message was not changed by a third party.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The TLS connection that is used within iDIN between the Merchant and the Routing Service is based on the first application. The TLS connection uses at least 128-bit encryption based on a server side certificate of the Routing Service. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Merchant MUST use a minimum TLS version of 1.2. Earlier versions have become out-dated.","type":"text","marks":[{"type":"underline"}]}]},{"type":"paragraph","content":[{"text":"Since iDIN does not put any constraints on the communication between the Consumer and the Merchant, this can be either with or without a TLS connection. Merchants are however strongly advised to always use TLS on the transaction pages of their website. The iDIN standard also uses electronic signatures to ensure the authenticity, integrity and non- repudiation of all messages with the exception of redirects. The electronic signature of the Routing Service in the AcquirerStatusRes message, for example, enables the Merchant to verify the authenticity of the transaction confirmation. ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"10.2 Signing iDIN messages","type":"text"}]},{"type":"paragraph","content":[{"text":"All messages that are sent by the Merchant to the Routing Service (DirectoryReq, AcquirerTrxReq and AcquirerStatusReq) have to be signed by the Merchant. Messages are signed in accordance with the \"XML Signature Syntax and Processing”, with the following settings and restrictions applied: ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The entire XML message[10] must be signed;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"For the purpose of generating the digest, the exclusive[11] canonicalization algorithm must be used;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"For the purpose of generating the signature value, the exclusive[12] canonicalization algorithm must be used;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The syntax for an enveloped[13] signature must be used. The signature itself must be removed from the XML message using the default transformation prescribed for this purpose;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"For hashing purposes the SHA-256[14] algorithm must be used;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"For signature purposes the RSAWithSHA256[15] algorithm must be used. RSA keys must be 2,048 bits long;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The public key must be referenced using a fingerprint of an X.509 certificate. The fingerprint must be calculated according to the following formula HEX(SHA-1(DER certificate)) [16].","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Note","type":"text"}]},{"type":"paragraph","content":[{"text":"According to Base64 specifications line breaks are allowed to be inserted after each 76 characters using a CR/LF","type":"text","marks":[{"type":"link","attrs":{"href":"http://tools.ietf.org/html/rfc2045#section-6.8"}}]},{"text":" ","type":"text"},{"text":"http://tools.ietf.org/html/rfc2045#section-6.8","type":"text","marks":[{"type":"link","attrs":{"href":"http://tools.ietf.org/html/rfc2045#section-6.8"}}]},{"text":".","type":"text"}]}]},{"type":"paragraph","content":[{"text":"In general Merchants don’t need to have extensive knowledge of RSA since most programming languages have libraries with functionalities that implements XML Digital Signature processing. It is ","type":"text"},{"text":"strongly recommended to use these standard libraries","type":"text","marks":[{"type":"underline"}]},{"text":". ","type":"text"}]},{"type":"paragraph","content":[{"text":"Standard functionality for creation and verification of RSAWithSHA256 digital signatures is available in commonly used software platforms, from the following versions ","type":"text"},{"text":"and higher:","type":"text","marks":[{"type":"underline"}]},{"text":" ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHP 5.5;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Microsoft .NET 4,5;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java SE 7.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"This functionality may also be available in earlier versions of these platforms and in other platforms (e.g. Python, Ruby). ","type":"text"}]},{"type":"paragraph","content":[{"text":"To further support Merchants, software libraries have been developed for iDIN in .NET, PHP and Java. Please contact your bank about this for more information.","type":"text","marks":[{"type":"underline"}]}]},{"type":"paragraph","content":[{"text":"For information about creating the public and private key pair please refer to paragraph 13.5. ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"10.2.1 Signing of the SAML 2.0 Assertion","type":"text"}]},{"type":"paragraph","content":[{"text":"Next to the regular signing of the entire XML message in the iDx protocol, the Validation Service signs the SAML Assertion separately. This Assertion is passed along the Merchant via the Routing Service in the AcquirerStatusRes (only for the Transaction.status ‘Success’). This signing in the SAML Assertion follows the same requirements that apply to signing as discussed before except for the following:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Instead of referring to the certificate of the Issuer to be used for verifying the signature by fingerprint, the ","type":"text"},{"text":"entire certificate is included","type":"text","marks":[{"type":"strong"}]},{"text":". The KeyName element is replaced by an X509Data element containing an X509Certificate element containing the entire X509 certificate of the Validation Service, See Table 33. The X509SubjectName element may be included inside the X509Data element. Other elements in KeyInfo shall not be used. This is done to guarantee availability of the certificate of the Validation Service for the Merchant in an easy manner, without synchronization with a scheme directory for example;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The attribute Reference@URI must contain the value of the of @ID attribute of Assertion to make the reference to the object being signed;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchants shall only trust and process SAML Assertions signed with a valid Validation Service certificate issued under the trusted root for iDIN Issuers.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"10.3 SAML EncryptedID and EncryptedAttribute","type":"text"}]},{"type":"paragraph","content":[{"text":"For privacy reasons the Routing Service is prevented to see the consumer attributes in readable form. Hence, all consumer data inside the SAML 2.0 assertion are encrypted. ","type":"text"},{"text":"Note that the Merchant is allowed to use a different certificate to sign the messages than it uses to decrypt the attributes.","type":"text","marks":[{"type":"underline"}]},{"text":" For the encryption of both the EncryptedID element and the EncryptedAttribute elements within the SAML Assertion the following requirements apply:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Encryption of the attributes will be based on a 256 bit AES key;","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Encryption of the attributes will be performed using the ","type":"text"},{"text":"http://www.w3.org/2001/04/xmlenc#aes256-cbc","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/04/xmlenc#aes256-cbc"}}]},{"text":" algorithm;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Standard XML padding is used[18];","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A Validation Service generates a new AES key for each EncryptedAttribute and EncryptedID elements;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The AES keys are encrypted with the public key of the Merchant, which the Validation Service received from the Routing Service. Encryption of the AES keys is done with RSA in combination with OAEP: ","type":"text"},{"text":"http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"}}]},{"text":";","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"XML contents in the encrypted element have all relevant namespace definitions;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"xsi:type definitions MAY be included in the AttributeValue element e.g. .","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The NameID element containing either the Consumer.BIN or Consumer.TransientID is entirely encrypted (for the corresponding namespaces see Table 7). The following element containing the Consumer.BIN is encrypted:","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"%Consumer.BIN%","type":"text"}]},{"type":"paragraph","content":[{"text":"Encrypting the NameID element yields an EncryptedID in the following fashion. The placeholders (between % signs) indicate where the encrypted AES key and where the encrypted NameID can be found. The EncryptedKey element is embedded inside the EncryptedData element.","type":"text"}]},{"type":"codeBlock","marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t%AESKey_Encrypted_With_Public_Key_Merchant%\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t%NameID_Encrypted_With_AESKey%\n\t\t\n\t\n","type":"text"}]},{"type":"paragraph","content":[{"text":"In a similar fashion the consumer attributes in the SAML Assertion are encrypted. An example below shows how the consumer.dateofbirth is encrypted. Depending on the request of the Merchant, zero or more EncryptedAttributes are returned in the SAML Assertion.","type":"text"}]},{"type":"codeBlock","marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\t19850101\n","type":"text"}]},{"type":"paragraph","content":[{"text":"The entire attribute is encrypted which yields the following:","type":"text"}]},{"type":"codeBlock","marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t%AESKey_Encrypted_With_Public_Key_Merchant%\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t%Attribute_Encrypted_With_AES_Key%\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"10.4 Authentication of iDIN messages","type":"text"}]},{"type":"paragraph","content":[{"text":"To ensure the status of a transaction, the Merchant has to verify the signature of the Routing Service in all Response messages. Furthermore it has to verify the signature of the Validation Service on the Assertion. To verify the signature in the SignatureValue field, it is recommended that Merchants use standard XML Digital Signature libraries, which are available in most (web) programming languages.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"10.5 Creating a key pair","type":"text"}]},{"type":"paragraph","content":[{"text":"If you want to use a so-called “self signed certificate” this paragraph will explain how to do so. It is also possible to purchase a certificate at a company specialized in this field (Certificate Authority), see paragraph 0. ","type":"text"}]},{"type":"paragraph","content":[{"text":"In order to create a public and a private key execute the following steps:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Download the “OpenSSL Library” from ","type":"text"},{"text":"http://www.openssl.org","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.openssl.org"}}]},{"text":". You can find more information on the “certificate generating utility” at: ","type":"text"},{"text":"http://www.openssl.org/docs/apps/req.html","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.openssl.org/docs/apps/req.html"}}]},{"text":". You may also generate the key pair using other software. If so please use the manual that comes with your software. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Generate an “RSA private key” using the following command","type":"text"},{"type":"hardBreak"},{"text":"(choose your own password for the field [privateKeyPass]): ","type":"text"},{"type":"hardBreak"},{"text":"openssl genrsa –aes128 –out priv.pem –passout pass:[privateKeyPass] 2048","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create a certificate based on the “RSA private key” ","type":"text"},{"type":"hardBreak"},{"text":"(use the same password as in the previous step for the field [privateKeyPass]): ","type":"text"},{"type":"hardBreak"},{"text":"openssl req –x509 –sha256 –new –key priv.pem –passin pass:[privateKeyPass]","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"-days 1825 –out cert.cer","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The previous OpenSSL command will generate a certificate in X.509 format, with a validity period of 5 years (1825 days), the maximum for iDIN signing certificates.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The file priv.pem contains the private key. The file cert.cer contains the certificate with the public key. The Merchant has to keep the priv.pem file private, which is used in the RSA encryption. The cert.cer file has to be communicated to the Routing Service. The method of communication will depend on the Routing Service.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"10.5.1 Buying a certificate from a Certificate Authority","type":"text"}]},{"type":"paragraph","content":[{"text":"When buying a certificate from a Certificate Authority (CA), rather than generating the certificate yourself, it is important to note the following: the CA signing certificate (and the rest of the certificate chain) must use hashing algorithms and key lengths that are at least as secure or better than those of the Merchant certificate. Therefore CA-certificates used to sign certificates for electronic signatures must use at least SHA-256 for hashing and 2,048 bits for RSA keys.","type":"text"}]},{"type":"paragraph","content":[{"text":"Signing certificates should also have a maximum validity period of 5 years.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"10.6 Signature data elements","type":"text"}]},{"type":"paragraph","content":[{"text":"All messages, including the error messages, with the exception of redirects, are signed using an electronic signature. The electronic signature guarantees the authenticity of the sender, non-repudiation and the integrity of the message. The digital signature is an XML Signature data element that is defined in the XML-Signature Syntax and Processing W3C Recommendation 12 February 2002. See Table 8 for the Schema location. All attributes and elements of the Signature element are listed in the Table 32. The elements and attributes relevant for creating the signature in all iDx messages and SAML Signature are described below; ","type":"text"},{"text":"other elements should not be used.","type":"text","marks":[{"type":"strong"}]}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Root","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+ SignedInfo","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Contains SignedInfo sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ CanonicalizationMethod","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must have one attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ @algorithm","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"The XML content that will be signed has to be canonicalized. Canonicalization (c14n) is a process for converting data that has more than one possible representation into a canonical form.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"“","type":"text"},{"text":"http://www.w3.org/2001/10/xml-exc-c14n#","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/10/xml-exc-c14n"}}]},{"text":"\"","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ SignatureMethod","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must have one attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ @algorithm","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"For all signing RSA with SHA256 must be used as signature algorithm.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"\"","type":"text"},{"text":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"}}]},{"text":"\"","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ Reference","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Reference sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ Reference@URI","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Attribute of Reference which must be empty.","type":"text"}]},{"type":"paragraph","content":[{"text":"This indicates that the entire XML document will be signed.","type":"text"}]},{"type":"paragraph","content":[{"text":"must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+++ Transforms","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Contains Transforms sub-elements. This is a list of Transform elements, each of which specifies a processing step before feeding the document to the digest algorithm. All messages use an enveloped signature: the signature is contained within the signed document. A transform is required to remove the signature from the signed data","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++++ Transform","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must have one attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++++ Transform@algorithm","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"“","type":"text","marks":[{"type":"strong"}]},{"text":"http://www.w3.org/2000/09/xmldsig#enveloped-signature","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2000/09/xmldsig#enveloped-signature"}}]},{"text":"”","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++++ Transform","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must have one attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++++ Transform@algorithm","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must be:","type":"text","marks":[{"type":"strong"}]},{"text":" “","type":"text"},{"text":"http://www.w3.org/2001/10/xml-exc-c14n#","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/10/xml-exc-c14n"}}]},{"text":"\"","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+++ DigestMethod","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Must have one attribute","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+++ @algorithm","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"This element specifies the hashing algorithm used (SHA256).","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be: ","type":"text","marks":[{"type":"strong"}]},{"text":"\"","type":"text"},{"text":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+++ DigestValue","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"The base64 value of the hash of the entire document","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+ SignatureValue","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"The value of the electronic signature of the Merchant","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"+ KeyInfo","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"Contains KeyInfo sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[277.0]},"content":[{"type":"paragraph","content":[{"text":"++ KeyName","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[193.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[490.0]},"content":[{"type":"paragraph","content":[{"text":"This value holds the fingerprint which indicates the certificate to be used for validating the signature.","type":"text"}]},{"type":"paragraph","content":[{"text":"The certificate must be referenced using a fingerprint of the X.509 certificate of the Merchant, Acquirer or Issuer alike. The fingerprint must be calculated according to the following formula HEX(SHA-1(DER certificate))","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 32: Elements/attributes of the Signature","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The signing of the SAML 2.0 Assertion is different that instead of the fingerprint of the X.509 certificate the entire certificate of the Issuer is added. Also the @URI attribute of the Reference element should reference to the @ID attribute of the Assertion. This yields to the following change with respect to the Signature, while all other elements and attributes are the same as in Table 32:","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"Element/attributes","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Contents","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"Signature","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Root","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"+ SignedInfo/Reference@URI","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Must reference to the Assertion element.","type":"text"}]},{"type":"paragraph","content":[{"text":"Must be","type":"text","marks":[{"type":"strong"}]},{"text":": The value of the @ID attribute of the Assertion.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"+ KeyInfo","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Contains KeyInfo sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"++ X509Data","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Contains X509Data sub-elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"+++ X509SubjectName","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Contains the name of the certificate holder","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[293.0]},"content":[{"type":"paragraph","content":[{"text":"+++ X509Certificate","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[179.0]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[488.0]},"content":[{"type":"paragraph","content":[{"text":"Contains entire X.509 certificate of the Validation Service.","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 34: Signature changes with respect to signing the SAML Assertion","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"11 Presentation of iDIN ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.1 General","type":"text"}]},{"type":"paragraph","content":[{"text":"There are some requirements regarding the presentation of iDIN on the Merchant’s website. The main purpose of these requirements is to create a uniform user experience for Consumers whenever they use iDIN, regardless of which Merchant’s website they use. The requirements are further explained in the following paragraphs.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant bears primary responsibility for initiating the iDIN process and for the communication to the Consumer regarding the status of this process. Merchants who offer iDIN to their customers must include iDIN in their lists of authentication methods (if any). iDIN must be presented in the list of methods in such a way that it receives at least the same amount of attention as all other competitors. ","type":"text"}]},{"type":"paragraph","content":[{"text":"In addition, an iDIN transaction (of any kind) must always be recognisable as such to the Consumer. This means that a Merchant must make sure in the design of their implementation of iDIN that iDIN and the start of an iDIN process are recognisable as such. The Merchant must also distinguish clearly between the processes (authentication, gather attributes or age verification) of different iDIN services. If a Merchant offers iDIN to Consumers to sign, the Merchant must indicate this clearly to the Consumer.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.2 Transaction flow","type":"text"}]},{"type":"paragraph","content":[{"text":"When the Consumer chooses to use iDIN, the Consumer should immediately be presented with the Issuer selection list without any intermediate screens being displayed by the Merchant (e.g. Consumer login and/or registration screens). And when the Consumer has selected the required Issuer, he or she should be immediately redirected to the online bank environment of the selected Issuer (based on the issuerAuthenticationURL the Merchant has received in the AcquirerTrxRes). ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.3 Redirect to Issuer","type":"text"}]},{"type":"paragraph","content":[{"text":"The Merchant needs to perform the redirect to the Issuer, from the browser window where the Consumer selected the Issuer. The complete page of the Merchant will be replaced by the complete page of the selected bank. Therefore it is not allowed to open the redirect to the Issuer in a new browser window. However, it is allowed to open a new window, ","type":"text"},{"text":"with visible address bar","type":"text","marks":[{"type":"underline"}]},{"text":", before the Consumer selects his bank from the Issuer list. ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.4 Frames","type":"text"}]},{"type":"paragraph","content":[{"text":"Frames used on the Merchant’s site are allowed. The page of the Issuer will remove these frames using a frame busting technique. This will allow the Consumer to verify whether the transaction is really taking place at the bank chosen from the Issuer list. After the redirect to the Merchant, the Merchant must completely rebuild the Merchant page to show the Merchant’s confirmation of reception of the iDIN Authentication/attributes. ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.5 New Window","type":"text"}]},{"type":"paragraph","content":[{"text":"The iDIN authentication may take place in a new browser window, as long as the Merchant makes this window appear at (or before) the moment the Consumer chooses the authentication method. A new window is only allowed if initiated by the Consumer (no pop-ups are allowed). The complete transaction flow must take place in this window, including the Merchant’s confirmation of receiving the iDIN authentication/attributes. The new window must also contain an address bar that allows the Consumer to check the Internet address URL and SSL-certificate of the Issuer. During the transaction flow it should not be possible for the Consumer to initiate another transaction through the Merchant’s original browser window.","type":"text"}]},{"type":"expand","attrs":{"title":"11.5.1 Specific requirement iDIN Mobile: New window or app"},"content":[{"type":"paragraph","content":[{"text":"The Mobile iDIN process may redirect the Consumer to a different mobile page or app as part of the transaction. The Merchant should strive to keep the Consumer on one browser page as much as possible but it is not allowed to make use of an in-app browser in the Merchant app (see Chapter 10 for more details). In those cases where changing to another app or window is necessary (such as the redirect to the Issuer) the Consumer should be informed beforehand in order to avoid confusion (e.g.: ","type":"text"},{"text":"“You are being redirected to the (mobile) website or the app of your bank” or in Dutch “U wordt doorverwezen naar de (mobiele) website of app van uw bank”","type":"text","marks":[{"type":"em"}]},{"text":").","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.6 Issuer list","type":"text"}]},{"type":"paragraph","content":[{"text":"The Issuer list has to be presented as described in Section 9.4.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.7 Banners and logo's","type":"text"}]},{"type":"paragraph","content":[{"text":"This information shall be made available on ","type":"text"},{"text":"idin.nl","type":"text","marks":[{"type":"link","attrs":{"href":"http://idin.nl"}}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.8 Requirements and recommendation for Merchant screens","type":"text"}]},{"type":"paragraph","content":[{"text":"This section describes requirements and recommendations for iDIN related texts on the Merchant website. Note that some information is only available in Dutch.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"11.8.1 Display last login","type":"text"}]},{"type":"paragraph","content":[{"text":"If a Consumer logs into the website of the Merchant using iDIN, the Merchant ","type":"text"},{"text":"is strongly recommended to","type":"text","marks":[{"type":"underline"}]},{"text":" show the date and time of the previous login (in general, so not specifically the last iDIN login), e.g. ‘Welcome, the last time you were logged in was on October 5 2015 at 15:41’. The Merchant may determine the exact text. This makes it possible for the Consumer to verify if this matches the moment of his/her last visit. ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"11.8.2 Explaining iDIN to Consumers","type":"text"}]},{"type":"paragraph","content":[{"text":"Merchants can use the following texts to explain iDIN to their users. These texts are only available in Dutch.","type":"text"}]},{"type":"paragraph","content":[{"text":"Explanation of iDIN to the Consumer","type":"text","marks":[{"type":"underline"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Short version:","type":"text","marks":[{"type":"strong"}]},{"text":" Makkelijk en veilig online identificeren met uw bank.","type":"text"},{"type":"hardBreak"},{"text":"Long version (preferred):","type":"text","marks":[{"type":"strong"}]},{"text":" Met iDIN kunt u zich online identificeren bij een bedrijf of instelling. Gemakkelijk, vertrouwd en veilig met de inlogmethode van uw bank.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Explanation of the advantages of iDIN","type":"text","marks":[{"type":"underline"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Makkelijk en veilig online identificeren.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Met de vertrouwde inlogmethode van uw bank.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Eén manier van inloggen bij bedrijven en instellingen.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Geen aparte gebruikersnamen en wachtwoorden meer onthouden.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Zelf invullen van persoonlijke gegevens is niet meer nodig.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"11.8.3 Recommended texts on Merchant website per RequestedServiceID","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN provides different types of services, which have been divided into the following three product types: ","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Gegevens verstrekken:","type":"text","marks":[{"type":"strong"}]},{"text":" The Consumer chooses iDIN to provide attributes and/or an ID to the Merchant, with or without the creation of a user account. The Merchant requests this service, either with or without the BIN. This also includes for example the provisioning of the date of birth or name/address attributes with/without BIN;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Inloggen:","type":"text","marks":[{"type":"strong"}]},{"text":" The Consumer uses iDIN to login. No attributes are provided to the Merchant, just the BIN;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Leeftijd bevestigen:","type":"text","marks":[{"type":"strong"}]},{"text":" Verification that the age is above 18 year (the attribute 18orOlder is requested, with or without the BIN). This can also be used for verification of the age below 18 years.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Ondertekenen:","type":"text","marks":[{"type":"strong"}]},{"text":" The Consumer chooses iDIN to sign documents using Issuer issued credentials. ","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Table 34 shows the recommended texts for the Merchant website. The referral page is the webpage where the Consumer chooses to use iDIN. The returnpage is the webpage to which the Consumer returns, after he has approved the iDIN transaction at his own bank.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"Product type","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"Recommended text for referral webpage Merchant","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[403.0]},"content":[{"type":"paragraph","content":[{"text":"Recommended text for returnpage Merchant","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"1 Gegevens verstrekken","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Maak uw account aan met iDIN","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Gegevens verstrekken/versturen met iDIN","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[403.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Uw gegevens zijn succesvol ontvangen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Wij hebben de volgende gegevens ontvangen: [overzicht gegevens]","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"2 Inloggen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Inloggen met iDIN","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[403.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"U bent ingelogd met iDIN","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Tonen laatste inlog (","type":"text"},{"text":"verplicht","type":"text","marks":[{"type":"strong"}]},{"text":")","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[225.0]},"content":[{"type":"paragraph","content":[{"text":"3 Leeftijd bevestigen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[332.0]},"content":[{"type":"paragraph","content":[{"text":"Leeftijd bevestigen met iDIN","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[403.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Bedankt voor het bevestigen van uw leeftijd","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Direct toegang tot de site","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"expand","attrs":{"title":"Addition for Signing Service Providers (SSPs): table 34"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[220.0]},"content":[{"type":"paragraph","content":[{"text":"4 Ondertekenen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[336.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Onderteken uw documenten met iDIN","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Gegevens verstrekken/versturen met iDIN","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[453.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Uw documenten zijn succesvol ondertekend","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Wij hebben de volgende gegevens ontvangen: [overzicht gegevens]","type":"text"}]}]}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 34: Recommendation Merchant texts per product type","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"11.9 Validation Service front-end","type":"text"}]},{"type":"paragraph","content":[{"text":"The following described process is outside the scope of the Merchant implementation. It is provided in this document to give insight in the Consumer’s experience of iDIN.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Issuer (Validation Service) bears primary responsibility for handling the iDIN process and for communicating with the Consumer regarding the status of the process of the iDIN transaction. The page sequence and layout (from redirect from Merchant to Issuer until redirect back to Merchant) are determined by the Validation Service. The following conditions must be met:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After selecting his Issuer at the Merchant website, the Consumer is redirected to the selected Issuer’s Validation Service website. In the active browser window, the complete page of the Merchant is replaced by the complete page of the selected Validation Service. Alternatively the Validation Service can choose, based on the header information received from the Consumer, to automatically redirect the Consumer to its mobile payment website or mobile payment app. Criteria for choosing which Consumers/devices are redirected to which channels are left to the Validation Service;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Optionally, the Validation Service may allow the Consumer to choose a different channel from the one chosen automatically, if the Validation Service offers multiple channels available to the Consumer. If this option is offered and used by the Consumer a second redirect takes place to the authentication website or application of choice;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"At all times during an iDIN process, it must be clear to the Consumer that he is about to start an iDIN transaction. Therefore, the Validation Service must display the iDIN logo on every Validation Service web/mobile application page shown in the iDIN process;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Validation Service will not display any information unrelated and irrelevant to the iDIN transaction, that could distract the Consumer from completing the process on the website or in the mobile application. Information that is considered relevant is:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A help function offered by the Validation Service, providing the Consumer with an explanation or additional information regarding the iDIN service(s);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the Issuer has a mobile application available then this may be offered for immediate download and activation during the iDIN process to Consumers that have been detected as using a mobile device but who have not yet downloaded the app. Note: downloading an application during the iDIN process may very well result in the process expiring if it exceeds the expiration period set by the Merchant;","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Validation Service facilitates all services of iDIN. The Validation Service must clearly indicate to the Consumer what iDIN service the Consumer is about to consent to;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Validation Service will guarantee that the integrity and layout of the Validation Service website/mobile application is not altered when displaying the contents of textual fields (e.g. due to possible malicious content of the transaction information provided by a malicious Merchant);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"All iDIN transaction related information (i.e. Transaction information, Consumer information and Merchant information, must be presented to the Consumer for approval;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"During the iDIN transaction process, the Consumer can either consent to the provision of all attributes (so not per attribute set or individual attribute) or reject the entire request, with the exception of the telephone and email attributes which may be deselected by the Consumer, see Section 0;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"During the iDIN transaction process, the Consumer is not allowed to change any of the information in the transaction details nor is he/she allowed to give partial consent, with the exception of the telephone and email attributes which may be deselected by the Consumer, see Section 0;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Validation Service indicates clearly how the Consumer can approve and give his/her consent for the iDIN transaction;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Consumer must be able to see all attributes and their values in order to give informed consent for providing the attributes to the Merchant. In order to retrieve this information, the Consumer must first be logged into Validation Service system. This enables the Validation Service to identify the Consumer and retrieve the right information;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Validation Service indicates clearly how the Consumer can cancel the iDIN process;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"As an option, the Validation Service iDIN application may show a message to the Consumer when he/she tries to cancel the iDIN transaction by using the browser close button or tries to navigate backwards or forwards by using the browser arrow buttons. The message may be shown because this can be considered undesired Consumer behaviour. In this message, the Consumer can be advised to cancel or complete the iDIN transaction in a proper way, using the cancel or confirmation facilities of the Validation Service iDIN application;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In case the Validation Service cannot suffice to the minimal requested attribute set, it may state to the Consumer what attributes are missing that are required to successfully complete the transaction and shorty explains which procedure must be followed to add in the missing information. The Validation Service is free, in choice and implementation, to provide instructions on how the Consumer can change his/her attributes;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After approval of the iDIN transaction, the Consumer must have the opportunity to instantaneously return to the Merchant where the iDIN transaction was initiated. This is achieved by incorporating a ‘Continue’ button. Clicking on this button takes the Consumer to the Merchant’s return URL provided during transaction initiation by the Merchant.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"11.9.1 Approval information","type":"text"}]},{"type":"paragraph","content":[{"text":"iDIN offers different services that can be requested by the Merchant with the RequestedServiceID. Each service is coupled to one of three product types. Depending on the requested service, the Issuer presents a different text to the Consumer. Table 35 shows these texts, with the following remarks:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Texts and elements that are always shown are indicated in ","type":"text"},{"text":"bold","type":"text","marks":[{"type":"strong"}]},{"text":". For illustrative purposes an example is given, however the exact formulation of the sentences can be different for each Issuer;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"‘Voor/","type":"text"},{"text":"Inzake","type":"text","marks":[{"type":"em"}]},{"text":" TradeName’ is only shown when the trade name is present;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The mandatory texts and elements are shown before and/or after the Consumer has logged into the Issuer domain;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Validation Service shows all Consumer attributes (for product type 1 and 3) that are requested by the Merchant. Subsequently, the Consumer can approve that the Issuer provides these attributes to the Merchant. The TransientID, Consumer.BIN and Consumer.DeprecatedBIN shall not be presented to the Consumer. All other Consumer attributes are always shown.","type":"text"}]}]}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[302.0]},"content":[{"type":"paragraph","content":[{"text":"Product type","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[336.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer terms that are always shown","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[322.0]},"content":[{"type":"paragraph","content":[{"text":"Example","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[302.0]},"content":[{"type":"paragraph","content":[{"text":"1 Gegevens verstrekken","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[336.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Gegevens verstrekken/versturen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant.Name (voor/inzake Merchant.TradeName)","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[322.0]},"content":[{"type":"paragraph","content":[{"text":"U gaat de volgende gegevens verstrekken aan Merchant.Name (inzake Merchant.TradeName):","type":"text"}]},{"type":"paragraph","content":[{"text":"[overzicht gegevens] bijvoorbeeld:","type":"text"}]},{"type":"paragraph","content":[{"text":"Naam: Pietje Puk","type":"text"}]},{"type":"paragraph","content":[{"text":"Adres: Dorpstraat 1 1234AB Ons dorp","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[302.0]},"content":[{"type":"paragraph","content":[{"text":"2 Inloggen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[336.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Inloggen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant.Name (voor/inzake Merchant.TradeName)","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[322.0]},"content":[{"type":"paragraph","content":[{"text":"U gaat inloggen bij Merchant.Name (inzake Merchant.TradeName)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[302.0]},"content":[{"type":"paragraph","content":[{"text":"3 Leeftijd bevestigen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[336.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Leeftijd bevestigen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant.Name (voor/inzake Merchant.TradeName)","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[322.0]},"content":[{"type":"paragraph","content":[{"text":"U bevestigt uw leeftijd aan Merchant.Name (inzake Merchant.TradeName)","type":"text"}]},{"type":"paragraph","content":[{"text":"[overzicht gegevens] bijvoorbeeld:","type":"text"}]},{"type":"paragraph","content":[{"text":"18 jaar of ouder: JA","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"expand","attrs":{"title":"Addition for Signing Service Providers (SSPs): table 35"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[303.0]},"content":[{"type":"paragraph","content":[{"text":"4 Ondertekenen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[337.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Gegevens verstrekken/versturen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Ondertekening/ondertekenen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Merchant.Name (voor/inzake Merchant.TradeName)","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[369.0]},"content":[{"type":"paragraph","content":[{"text":"U gaat de volgende gegevens verstrekken aan Merchant.Name (voor/inzake Merchant.TradeName) in het kader van ondertekening van een document:","type":"text"}]},{"type":"paragraph","content":[{"text":"[overview attributes] (for example):","type":"text"}]},{"type":"paragraph","content":[{"text":"Naam: Pietje Puk","type":"text"}]},{"type":"paragraph","content":[{"text":"Adres: Dorpstraat 1 1234AB Ons dorp","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 35: Mandatory texts on the Issuer screens per product type","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The following screenshot provides an example of the iDIN approval website or mobile application screen for authentication service plus providing attributes.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":75.0},"content":[{"type":"media","attrs":{"width":480,"id":"b55d1d27-d625-4729-86e6-64980f2f0a4d","collection":"contentId-588284049","type":"file","height":272}}]},{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Figure 4: Example of transaction approval or mobile app screen","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"12 Appendix A: Error codes and cases ","type":"text"}]},{"type":"paragraph","content":[{"text":"In case something goes wrong on iDx level an AcquirerErrorRes with the appropriate errorCode is returned to the Merchant. If there is an error within the SAML messages an iDx errorCode AP3000 is return and a container is present with an SAML (error) Response, as outlined in Section 12.2.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"12.1 iDx error codes","type":"text"}]},{"type":"paragraph","content":[{"text":"The Error.errorCode is composed of:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A category (two letters)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A number (four digits)","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The following categories are distinguished:","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[191.0]},"content":[{"type":"paragraph","content":[{"text":"Category","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[569.0]},"content":[{"type":"paragraph","content":[{"text":"Meaning","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[191.0]},"content":[{"type":"paragraph","content":[{"text":"IX","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[569.0]},"content":[{"type":"paragraph","content":[{"text":"Invalid XML and all related problems.","type":"text"},{"type":"hardBreak"},{"text":"Such as incorrect encoding, invalid version, otherwise unreadable.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[191.0]},"content":[{"type":"paragraph","content":[{"text":"SO","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[569.0]},"content":[{"type":"paragraph","content":[{"text":"System maintenance. ","type":"text"},{"type":"hardBreak"},{"text":"The errors that are communicated in the event of system maintenance or system failure. Also covers the situation where new requests are no longer being accepted but requests already submitted will be dealt with (until a certain time).","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[191.0]},"content":[{"type":"paragraph","content":[{"text":"SE","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[569.0]},"content":[{"type":"paragraph","content":[{"text":"Security and authentication errors. ","type":"text"},{"type":"hardBreak"},{"text":"Incorrect authentication methods and expired certificates.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[191.0]},"content":[{"type":"paragraph","content":[{"text":"BR","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[569.0]},"content":[{"type":"paragraph","content":[{"text":"Field errors. ","type":"text"},{"type":"hardBreak"},{"text":"Additional information on incorrect fields.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[191.0]},"content":[{"type":"paragraph","content":[{"text":"AP","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[569.0]},"content":[{"type":"paragraph","content":[{"text":"Application errors. ","type":"text"},{"type":"hardBreak"},{"text":"Errors relating to IDs, transaction, expiration period and iDIN specific errors","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 36: Error code categories","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The following iDx error codes exist:","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"errorCode","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"errorMessage","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"errorDetail","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"Occurs in","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"IX1100","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Received XML not valid","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X) ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"IX1200","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Encoding type not UTF-8","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"IX1300","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"XML version number invalid","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"IX1600","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory value missing","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"SO1000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Failure in system","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 2)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"SO1100","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer unavailable","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 3)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"SO1200","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"System busy. Try again later","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 2)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"SO1400","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Unavailable due to maintenance","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 2)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"SE2700","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Invalid electronic signature","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1200","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Version number invalid","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1205","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"ProductID invalid","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1210","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Value contains non-permitted character","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1220","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Value too long","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1230","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Value too short","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1270","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Invalid date/time ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"BR1280","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Invalid URL","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"B’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP1100","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.MerchantID unknown","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X) ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP1200","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Issuer.IssuerID unknown ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"B’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP1300","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.subID unknown ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP1500","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Merchant.MerchantID not active","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X) ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP2600","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Transaction does not exist","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"F’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP2920","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"Expiration period is not valid","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"B’(X)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[244.0]},"content":[{"type":"paragraph","content":[{"text":"AP3000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[371.0]},"content":[{"type":"paragraph","content":[{"text":"iDIN specific error","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"See 1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[205.0]},"content":[{"type":"paragraph","content":[{"text":"A’(X), B’(X), F’(X)","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 37: Error codes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The field errorDetail in the table above contains one of the values shown in the table below. The italic printed words will be replaced by actual values, as indicated.","type":"text"}]},{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[146.0]},"content":[{"type":"paragraph","content":[{"text":"Indication","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[614.0]},"content":[{"type":"paragraph","content":[{"text":"errorDetail","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[146.0]},"content":[{"type":"paragraph","content":[{"text":"1)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[614.0]},"content":[{"type":"paragraph","content":[{"text":"Field generating error: location-reference in XML message","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[146.0]},"content":[{"type":"paragraph","content":[{"text":"2)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[614.0]},"content":[{"type":"paragraph","content":[{"text":"System generating error: ","type":"text"},{"text":"Issuer/Acquirer","type":"text","marks":[{"type":"em"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[146.0]},"content":[{"type":"paragraph","content":[{"text":"3)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[614.0]},"content":[{"type":"paragraph","content":[{"text":"System generating error: ","type":"text"},{"text":"Name of Issuer","type":"text","marks":[{"type":"em"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 38: errorDetail","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"12.2 SAML error codes","type":"text"}]},{"type":"paragraph","content":[{"text":"To communicate to the Merchant that an error has occurred in the SAML message, the SAML Status element is used which has the following structure:","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":">\n\t\n\t\t\n\tText determined by Routing or Validation Service\n","type":"text"}]},{"type":"paragraph","content":[{"text":"AML defines two level of status codes. The first level status code can have the values as shown in the Table below.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[411.0]},"content":[{"type":"paragraph","content":[{"text":"StatusCode@Value","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[549.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[411.0]},"content":[{"type":"paragraph","content":[{"text":"urn:oasis:names:tc:SAML:2.0:status:Success","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[549.0]},"content":[{"type":"paragraph","content":[{"text":"The request succeeded.","type":"text"}]},{"type":"paragraph","content":[{"text":"Not used in case an error has occured","type":"text","marks":[{"type":"underline"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[411.0]},"content":[{"type":"paragraph","content":[{"text":"urn:oasis:names:tc:SAML:2.0:status:Requester","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[549.0]},"content":[{"type":"paragraph","content":[{"text":"The request could not be performed due to an error on the part of the requester.","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 39: First level SAML status codes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"paragraph","content":[{"text":"The second level status code is present for the cases as discussed in Section 12.2. There are several standard values for the SAML second level status code, and some defined values that are only used within the iDIN domain. The possible values for the second level status code within iDIN are listed in the Table below.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"StatusCode@Value","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"urn:oasis:names:tc:SAML:2.0:status:","type":"text"}]},{"type":"paragraph","content":[{"text":"RequestUnsupported","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"The request could not be executed because the requested BankID.ServiceID or BankID.LOA is not supported.","type":"text"}]},{"type":"paragraph","content":[{"text":"This value is ","type":"text"},{"text":"only used in combination with","type":"text","marks":[{"type":"underline"}]},{"text":" the first level status code value urn:oasis:names:tc:SAML:2.0:status:Requester","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"urn:oasis:names:tc:SAML:2.0:status:","type":"text"}]},{"type":"paragraph","content":[{"text":"InvalidAttrNameOrValue","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"The request could not be executed because unexpected or invalid content was encountered within a SAML element.","type":"text"}]},{"type":"paragraph","content":[{"text":"It is used when the contents or attribute value of a SAML element is not in line with the iDIN specifications, ","type":"text"},{"text":"other than","type":"text","marks":[{"type":"underline"}]},{"text":" BankID.ServiceID or BankID.LOA. E.g. wrong formatting, incorrect version etc.","type":"text"}]},{"type":"paragraph","content":[{"text":"This value is ","type":"text"},{"text":"only used in combination with","type":"text","marks":[{"type":"underline"}]},{"text":" the first level status code value urn:oasis:names:tc:SAML:2.0:status:Requester","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"urn:nl:bvn:bankid:1.0:status:","type":"text"}]},{"type":"paragraph","content":[{"text":"MismatchWithIDx","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"This status code is made specifically for iDIN","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"The request could not be executed because one or more fields inside the SAML AuthnRequest do not match the fields in the iDx message as required by the iDIN specifications. E.g. the MerchantID in the SAML AuthnRequest does not correspond to that in the iDx message. ","type":"text"}]},{"type":"paragraph","content":[{"text":"This value is ","type":"text"},{"text":"only used in combination with","type":"text","marks":[{"type":"underline"}]},{"text":" the first level status code value urn:oasis:names:tc:SAML:2.0:status:Requester","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"urn:oasis:names:tc:SAML:2.0:status:","type":"text"}]},{"type":"paragraph","content":[{"text":"RequestDenied","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"The request is denied because the Assertion is expired.","type":"text"}]},{"type":"paragraph","content":[{"text":"See next section for the correct use. ","type":"text"}]},{"type":"paragraph","content":[{"text":"This value is ","type":"text"},{"text":"only used in combination with","type":"text","marks":[{"type":"underline"}]},{"text":" the first level status code value urn:oasis:names:tc:SAML:2.0:status:Requester","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"urn:nl:bvn:bankid:1.0:status:Success","type":"text"}]},{"type":"paragraph","content":[{"text":"This status code is made specifically for iDIN","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"Present when the Validation Service has delivered all attributes conform the minimal set as defined in Section 8.5","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[361.0]},"content":[{"type":"paragraph","content":[{"text":"urn:nl:bvn:bankid:1.0:status:","type":"text"}]},{"type":"paragraph","content":[{"text":"IncompleteAttributeSet","type":"text"}]},{"type":"paragraph","content":[{"text":"This status code is made specifically for iDIN","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[599.0]},"content":[{"type":"paragraph","content":[{"text":"The request has been delivered, however not all of the requested Consumer attributes could be delivered according to the minimal set as defined in Section 8.5, or the telephone and/or email address are deselected by the Consumer, see Section 0. The element DeliveredServiceID either indicates which attributes are delivered conform the minimal set, or is equal to ‘0’ if the Issuer was unable to determine this. In both cases it is not equal to the RequestedServiceID","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Table 40: Second level SAML status codes","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"12.3 SAML error cases","type":"text"}]},{"type":"paragraph","content":[{"text":"There are two cases where a SAML Response is returned with a first level status code not equal to “urn:oasis:names:tc:SAML:2.0:Success” but equal to “urn:oasis:names:tc:SAML:2.0:Requester”.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"There is some type of error in the AuthnRequest between the Merchant and the Routing Service. This AuthnRequest is embedded inside the container of the AcquirerTrxReq (B):","type":"text"},{"type":"hardBreak"},{"text":"For this case on iDx level an AcquirerErrorRes (B’(X)) is returned to the Merchant ","type":"text"},{"text":"with a SAML Response","type":"text","marks":[{"type":"underline"}]},{"text":" in the container. The iDx errorCode equals AP3000 with an errorMessage ‘Product specific error’. The second level status code depends on the type of error that has occurred, see above table.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Merchant has requested the Status, however the Assertion is expired. This can occur when the Consumer has successfully authenticated and approved the transaction, however the Merchant has not succeeded in requesting the status within 30 seconds from the moment the Consumer has returned to the website of the Merchant.","type":"text"},{"type":"hardBreak"},{"text":"For this case a normal AcquirerStatusRes is returned to the Merchant. The iDx Transaction.status of this message equals “Success”. However the SAML Response does not contain an Assertion, ","type":"text"},{"text":"but has the structure as discussed in","type":"text","marks":[{"type":"underline"}]},{"text":" Table 28: Elements/attributes inside the container of AcquirerErrorRes. It has a second level status code value of “urn:oasis:names:tc:SAML:2.0:status:RequestDenied”.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"12.4 Issuer cannot provide all attributes conform minimal set or deselection of telephone or email","type":"text"}]},{"type":"paragraph","content":[{"text":"When the Issuer cannot deliver all requested attributes conform the minimal set (or the telephone and or email address are deselected by the Consumer), the following shall be done:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A normal SAML Response is returned. The first level status code is “urn:oasis:names:tc:SAML:2.0:Success”;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the Consumer de-selects his/her telephone number and/or email address, then these are not returned to the Merchant;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Issuer returns all other attributes that are available in the requested categories;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Instead of the second SAML status code “urn:nl:bvn:bankid:1.0:status:Success” the second SAML status code “urn:nl:bvn:bankid:1.0:status:IncompleteAttributeSet” is used;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The DeliveredServiceID shall indicate which attribute categories are delivered conform the minimal set as defined in Section 5. ","type":"text"},{"text":"If the Issuer cannot determine the DeliveredServiceID it must use the value ‘0’.","type":"text","marks":[{"type":"underline"}]}]}]}]},{"type":"paragraph","content":[{"text":"Example:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Merchant has requested the date of birth and all address attributes of a Consumer with RequestedServiceID 1472;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When the Issuer processes the request, its systems detects the address attributes cannot be delivered conform the minimal set as defined in Section 5 (it has the consumer.postalcode, consumer.city, consumer.streetname but is missing the consumer.houseno. Therefore, it cannot match any of the five possible options as defined in Section 8.5.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Issuer calculates the DeliveredServiceID that corresponds to the requested attributes categories it can deliver conform the minimal set (in this case 448 which indicates the date of birth is delivered conform the minimal set);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Issuer returns all requested attributes (date of birth and all attributes in the incomplete address category), and uses the second SAML status code “urn:nl:bvn:bankid:1.0:status:IncompleteAttributeSet” and the DeliveredServiceID equal to 448.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"12.5 Consumer message","type":"text"}]},{"type":"paragraph","content":[{"text":"The Error.consumerMessage can contain one of four different standardised texts that are sent to the Merchant by the Routing Service, see Table 41. The Merchant must show the Error.consumerMessage to the Consumer on his website. The value of Error.consumerMessage is specified in the AcquirerErrorRes by the Acquirer.","type":"text"}]},{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.0]},"content":[{"type":"paragraph","content":[{"text":"Situation","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"Message to be shown to Consumer (English)","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Message to be shown to Consumer (Dutch)","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.0]},"content":[{"type":"paragraph","content":[{"text":"Error occurred in sending or receiving message ","type":"text"},{"text":"A","type":"text","marks":[{"type":"em"}]},{"text":", ","type":"text"},{"text":"A’","type":"text","marks":[{"type":"em"}]},{"text":", ","type":"text"},{"text":"B","type":"text","marks":[{"type":"em"}]},{"text":", ","type":"text"},{"text":"B’","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"It is currently not possible to use iDIN. Please try again later.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Het is op dit moment niet mogelijk om iDIN te gebruiken. Probeer het later nog een keer.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.0]},"content":[{"type":"paragraph","content":[{"text":"Error occurred in sending or receiving message ","type":"text"},{"text":"F","type":"text","marks":[{"type":"em"}]},{"text":", ","type":"text"},{"text":"F’’","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"It is currently not possible to use iDIN. Please try again later.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"Het is op dit moment niet mogelijk om iDIN te gebruiken. Probeer het later nog een keer.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.0]},"content":[{"type":"paragraph","content":[{"text":"Error occurred because of unavailability of Validation Service (SO1000, SO1100, SO1200 , SO1400 or no response received from Validation Service by Routing Service after sending message C)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"The selected bank is currently unavailable. Please try again later.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"De geselecteerde bank is op dit moment niet beschikbaar. Probeer het later nog een keer.","type":"text"},{"type":"hardBreak"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.0]},"content":[{"type":"paragraph","content":[{"text":"Error occurred because of unavailability of Validation Service (see above) AND additional information is available from the Notification System","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[317.0]},"content":[{"type":"paragraph","content":[{"text":"The selected bank is currently unavailable due to maintenance until projected time of [DateTime received from the Notification System].","type":"text"}]},{"type":"paragraph","content":[{"text":"Please try again later.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[309.0]},"content":[{"type":"paragraph","content":[{"text":"De geselecteerde bank is op dit moment niet beschikbaar i.v.m. onderhoud tot naar verwachting [DateTime ontvangen van Notification System]. ","type":"text"},{"type":"hardBreak"},{"type":"hardBreak"},{"text":"Probeer het later nog een keer.","type":"text"}]}]}]}]},{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Table 41: Consumer messages","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"13 Appendix B: Message examples","type":"text"}]},{"type":"paragraph","content":[{"text":"Most of the example messages given here only use the default method of namespace declaration. At the end of the appendix one example is given of a message with namespace prefixes (this message does not contain an information container, it is merely meant to signify the use of namespace prefixes). ","type":"text"},{"text":"NB:","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Signatures are examples and don’t validate against the messages;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The examples are not necessarily related to each other. ","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.1 DirectoryReq (A)","type":"text"},{"type":"hardBreak"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\t2001-12-17T09:30:47.123Z\n\t\n\t\t1234123456\n\t\t1\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\t\nIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.2 DirectoryRes (A’)","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\t2001-12-17T09:30:47.123Z\n\t\n\t\t1234\n\t\n\t\n\t\t2004-11-10T10:15:12.123Z\n\t\t\n\t\t\tNederland\n\t\t\t\n\t\t\t\tBANKNL2U\n\t\t\t\tBank 1\n\t\t\t\n\t\t\t\n\t\t\t\tBANANL2U\n\t\t\t\tBank 2\n\t\t\t\n\t\t\t\n\t\t\t\tBANBNL2UXXX\n\t\t\t\tBank 3\n\t\t\t\n\t\t\t\n\t\t\t\tBANCNL2U\n\t\t\t\tBank 4\n\t\t\t\n\t\t\n\t\t\n\t\t\tBelgië/Belgique\n\t\t\t\n\t\t\t\tBANKBE2U\n\t\t\t\tBanque 1\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\t\nIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.3 AcquirerTrxReq (B)","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\t2015-01-01T09:30:00.123Z\n\t\n\t\tBANKNL2U\n\t\n\t\n\t\t1234123456\n\t\t1\n\t\thttps://merchantwebsite.nl/returnPage.php?param1=true¶m2=3\n\t\n\t\n\t\tPT5M\n\t\tnl\n\t\t1234567890abcdefghijABCDEFGHIJ1234567890\n\t\t\n\t\t\t\n\t\t\t\t1234123456\n\t\t\t\t\n\t\t\t\t\tnl:bvn:bankid:1.0:loa3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\tIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.4 AcquirerTrxRes (B’)","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\t2001-12-17T09:30:47.123Z\n\t\n\t\t1234\n\t\n\t\n\t\thttps://issuer.nl?param=true¶mRandom=123456789012345678901234567890\n\t\n\t\n\t\t1234123456789012\n\t\t2001-12-17T09:30:47.123Z\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\t\nIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.5 AcquirerStatusReq (F)","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\t2001-12-17T09:30:47.123Z\n\t\n\t\t1234123456\n\t\t1\n\t\n\t\n\t\t1234123456789012\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\t\nIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.6 AcquirerStatusRes (F’) Unencrypted","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Note","type":"text"}]},{"type":"paragraph","content":[{"text":"Note: this message will never be sent/received, but is provided for illustrative purposes only.","type":"text","marks":[{"type":"underline"}]}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\t2015-01-01T09:30:47.123Z\n\t\n\t\t1234\n\t\n\t\n\t\t1234123456789012\n\t\tSuccess\n\t\t2015-01-01T09:30:47.123Z\n\t\t\n\t\t\t\n\t\t\t\t1234\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\tBANKNL2U\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tAA+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\tAAAAwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\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 c2MZVeXeTgV3Yz+USLg2Y+Jh4HxwkPFmZBctyXiUr6DxF8rvoP9W7O27rhRjE pmqOIfGTWQIDAQABox0wGzAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIFoDANBgkq hkiG9w0BAQQFAAOBgQBfDqEW+OI3jqBQHIBzhujN/PizdN7s/z4D5d3pptWDJf2n qgi7lFV6MDkhmTvTqBtjmNk3No7v/dnP6Hr7wHxvCCRwubnmIfZ6QZAv2FU78pLX8I3bsbmRAUg4UP9hH6ABVq4KQKMknxu1xQxLhpR1ylGPdiowMNTrEG8cCx3w/w==\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\tNLBANKsd45232432663dd34ja8sjsah439h28834HSh23h192h3\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tNL69ZZZ123456780000\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tnl:bvn:bankid:1.0:loa3\n\t\t\t\t\t\t\tBANKNL2U\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t21952\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t1\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tVries\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tVries-Jansen\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tJansen\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tde\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tde\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tJV\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t19850101\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tGustav Mahlerplein\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t33\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tbis\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\twoonboot t.o. de Albert Heijn\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t1082MS\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tAmsterdam\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tNL\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\tIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"13.7 AcquirerStatusRes (F’) Encrypted","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Note","type":"text"}]},{"type":"paragraph","content":[{"text":"Note: this example only shows the first two encrypted attributes.","type":"text","marks":[{"type":"underline"}]}]}]},{"type":"codeBlock","marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\n\t2015-01-01T09:30:47.123Z\n\t\n\t\t1234\n\t\n\t\n\t\t1234123456789012\n\t\tSuccess\n\t\t2015-01-01T09:30:47.123Z\n\t\t\n\t\t\t\n\t\t\t\t1234\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\tBANKNL2U\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tAA+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\tVGhpcyBpcyBhIHRlc3QgbWVzc2FnZSE=\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tMIICyjCCAjOgAwIBAgICAnUwDQYJKoZIhvcNAQEEBQAwgakxCzAJBgNVBAYTAlVTMRIwEAYDVQQIEwlXaXNjb25zaW4xEDAOBgNVBAcTB01hZGlzb24xIDAeBgNVBAoTF1VuaXZlcnNpdHkgb2YgV2lzY29uc2luMSswKQYDVQQLEyJEaXZpc2lvbiBvZiBJbmZvcm1hdGlvbiBUZWNobm9sb2d5MSUwIwYDVQQDExxIRVBLSSBTZXJ2ZXIgQ0EgLS0gMjAwMjA3MDFBMB4XDTAyMDcyNjA3Mjc1MVoXDTA2MDkwNDA3Mjc1MVowgYsxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhNaWNoaWdhbjESMBAGA1UEBxMJQW5uIEFyYm9yMQ4wDAYDVQQKEwVVQ0FJRDEcMBoGA1UEAxMTc2hpYjEuaW50ZXJuZXQyLmVkdTEnMCUGCSqGSIb3DQEJARYYcm9vdEBzaGliMS5pbnRlcm5ldDIuZWR1MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZSAb2sxvhAXnXVIVTx8vuRay+x50z7GJjIHRYQgIv6IqaGG04eTcyVMhoekE0b45QgvBIaOAPSZBl13R6+KYiE7x4XAWIrCP+c2MZVeXeTgV3Yz+USLg2Y1on+Jh4HxwkPFmZBctyXiUr6DxF8rvoP9W7O27rhRjE pmqOIfGTWQIDAQABox0wGzAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQQFAAOBgQBfDqEW+OI3jqBQHIBzhujN/PizdN7s/z4D5d3pptWDJf2nqgi7lFV6MDkhmTvTqBtjmNk3No7v/dnP6Hr7wHxvCCRwubnmIfZ6QZAv2FU78pLX8I3bsbmRAUg4UP9hH6ABVq4KQKMknxu1xQxLhpR1ylGPdiowMNTrEG8cCx3w/w==\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+V=\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tNL69ZZZ123456780000\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tnl:bvn:bankid:1.0:loa3\n\t\t\t\t\t\t\tBANKNL2U\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t21952\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+V=\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+VjenRyZVFCNf=\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+V=\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tnVPqBsVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVi=\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\tIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"3.8 AcquirerErrorRes (B’(X))","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\n\t2015-01-01T09:30:47.123Z\n\t\n\t\t1234\n\t\n\t\n\t\t1234123456789012\n\t\tSuccess\n\t\t2015-01-01T09:30:47.123Z\n\t\t\n\t\t\t\n\t\t\t\t1234\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\tBANKNL2U\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tAA+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\tVGhpcyBpcyBhIHRlc3QgbWVzc2FnZSE=\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\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 pmqOIfGTWQIDAQABox0wGzAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQQFAAOBgQBfDqEW+OI3jqBQHIBzhujN/PizdN7s/z4D5d3pptWDJf2nqgi7lFV6MDkhmTvTqBtjmNk3No7v/dnP6Hr7wHxvCCRwubnmIfZ6QZAv2FU78pLX8I3bsbmRAUg4UP9hH6ABVq4KQKMknxu1xQxLhpR1ylGPdiowMNTrEG8cCx3w/w==\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+V=\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tNL69ZZZ123456780000\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tnl:bvn:bankid:1.0:loa3\n\t\t\t\t\t\t\tBANKNL2U\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t21952\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+V=\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+VjenRyZVFCNf=\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBsVW+V=\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tnVPqBsVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVi=\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\tVW+VjenRyZVFCNfBTeoxDflQ4yfR8KYFvwPVinVPqBs=\n\t\t\t\n\t\t\n\t\tIELLwKSGFMk64US23YrpZ8//hJ8DeJEtYht5knlxJvBOr8dcI+aJTBq+YtyzP9ClcK62Obs5aynHBE/GPHZShuMw+8WHq4fCMInOwKURgwjDOz8UYaIMqG0Ojiz8dFYGn+dH2lL0QVss4jmIIAD8MCijb27oqij6PclXw9Y9veI=\n\t\t\n\t\t\t7D665C81ABBE1A7D0E525BFC171F04D276F07BF2\n\t\t\n\t\n","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"14 Appendix C: iDx Merchant-Acquirer Schema","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"marks":[{"type":"breakout","attrs":{"mode":"wide"}}],"content":[{"text":"\n\n\n\n\t\n\t\n\t\telements defined\n\t\n\t\n\t\t\n\t\t\tDirectory Request (A)\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\tDirectory Response (A')\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\tAcquirer Transaction Request (B)\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\tAcquirer Transaction Response (B')\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\tAcquirer Status Request (F)\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\tAcquirer Status Response (F')\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\tAcquirer Error Response (X')\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\tsimpleTypes defined\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\tbasic simpleTypes defined\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\tcomplexTypes defined\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\tattributeGroups defined\n\t\n\t\n\t\t\n\t\t\tattributes of each message\n\t\t\n\t\t\n\t\t\n\t\n","type":"text"}]},{"type":"paragraph","content":[{"text":"[1] Some of these terms map as follows to Identity Access Management terms: Consumer - Subject, Merchant - Relying Party/Service Provider, Acquirer / Routing Service - Broker and Issuer / Validation Service - Identity Provider.","type":"text"}]},{"type":"paragraph","content":[{"text":"[2] For due diligence reasons, the DISP may be subject to extra audits","type":"text"}]},{"type":"paragraph","content":[{"text":"[3] Because the BIN is in another place in the SAML message, namely the subject, it is not considered an attribute in this context.","type":"text"}]},{"type":"paragraph","content":[{"text":"[4] If the disputes are more common than expected, the process can be automated in the future. ","type":"text"}]},{"type":"paragraph","content":[{"text":"[5] This represent the group as defined in Table 12. Some attributes are not part of any group but can be requested and provided individually depending on the Requested- or DeliveredServiceID","type":"text"}]},{"type":"paragraph","content":[{"text":"[6] Characters = any UTF-8 character. Numbers = 0-9. Letters = a-Z. Capital letters = A-Z. Letter-based characters like ligatures or digraphs (e.g. á, ç, Æ) are allowed.","type":"text"}]},{"type":"paragraph","content":[{"text":"[7] 95","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" percentile is a statistical term indicating that 95% of transactions in a tested sample should be within the set target time.","type":"text"}]},{"type":"paragraph","content":[{"text":"[8] 95","type":"text"},{"text":"th","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]},{"text":" percentile is a statistical term indicating that 95% of transactions in a tested sample should be within the set target time.","type":"text"}]},{"type":"paragraph","content":[{"text":"[9] ","type":"text"},{"text":"http://www.w3.org/TR/xmldsig-core/","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/TR/xmldsig-core/"}}]}]},{"type":"paragraph","content":[{"text":"[10] XML Signature reference to the signed info URI is left blank, see example messages in APPENDIX B","type":"text"}]},{"type":"paragraph","content":[{"text":"[11] ","type":"text"},{"text":"https://www.w3.org/TR/xml-exc-c14n/","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.w3.org/TR/xml-exc-c14n/"}}]}]},{"type":"paragraph","content":[{"text":"[12] ","type":"text"},{"text":"https://www.w3.org/TR/xml-exc-c14n/","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.w3.org/TR/xml-exc-c14n/"}}]}]},{"type":"paragraph","content":[{"text":"[13] ","type":"text"},{"text":"http://www.w3.org/TR/xmldsig-core/#sec-EnvelopedSignature","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.w3.org/TR/xmldsig-core/#sec-EnvelopedSignature"}}]},{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":"[14] ","type":"text"},{"text":"https://www.w3.org/TR/xmlenc-core/#sec-SHA256","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.w3.org/TR/xmlenc-core/#sec-SHA256"}}]}]},{"type":"paragraph","content":[{"text":"[15] ","type":"text"},{"text":"https://www.w3.org/TR/xmlenc-core/#sec-SHA256","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.w3.org/TR/xmlenc-core/#sec-SHA256"}}]}]},{"type":"paragraph","content":[{"text":"[16] DER (Distinguished Encoding Rules), SHA-1 (Secure Hash Algorithm – 1), HEX (Hexidecimal)","type":"text"}]},{"type":"paragraph","content":[{"text":"[17] ","type":"text"},{"text":"http://tools.ietf.org/html/rfc2045#section-6.8","type":"text","marks":[{"type":"link","attrs":{"href":"http://tools.ietf.org/html/rfc2045#section-6.8"}}]}]},{"type":"paragraph","content":[{"text":"[18] ","type":"text"},{"text":"http://www.w3.org/TR/xmlenc-core/#sec-Alg-Block","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"http://www.w3.org/TR/xmlenc-core/#sec-Alg-Block"}}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}],"version":1}

Browser not supported