Swedbank and Sparbankerna (SWEDSESS)
Status Highlights
| Status | Product | Comment |
|---|---|---|
 | Consent, PIS | HTTP headers PSU-IP-Address and PSU-User-Agent are required for Create Consent and Create Payment Initiation. |
| Consent, PIS | Decoupled Only If PSU has engagement in several banks that belongs to Swedbank, the X-AffiliatedASPSP-ID header must be sent. Please see response from Get ASPSP Details for potential values. |
| AIS, Consent, PIS | In order to use decoupled, please send the TPP-Redirect-Preferred header with the value false to all calls to AIS, Consent and PIS endpoints. Please do not mix usage of this header, if a consent or payment was created with it specified, all subsequent calls must include it with the same value. This also applies to AIS calls which are referencing consents via the Consent-ID header. |
| AIS | Sandbox Requesting transactions over 90 days might fail if the same dateFrom has been used by any API user recently, resulting in a 401 response with the text Unauthorized, request not successful. Statement requires SCA. Please change the parameter value or wait a while before trying again. |
| PIS | remittanceInformationUnstructured has different max lengths depending on payment product and the specified creditorAgent (BICFI of the creditor account). Payment product domestic allows for up to 35 characters when creditorAgent is SWEDSESS, otherwise 10 characters. Payment product international allows for up to 140 characters. |
| Consent | Decoupled Only scaStatus will transition through the following statuses, and can at any time end up in failed: received -> authenticationStarted (with AUTO_START_TOKEN or QR_IMAGE) -> started (with AUTO_START_TOKEN or QR_IMAGE) -> finalised |
| PIS | Decoupled Only scaStatus will transition through the following statuses, and can at any time end up in failed: received -> authenticationStarted (with AUTO_START_TOKEN or QR_IMAGE) -> ( Conditional) authoriseCreditorAccountStarted (with AUTO_START_TOKEN or QR_IMAGE) -> started (with AUTO_START_TOKEN or QR_IMAGE) -> finalised |
| Consent, AIS, PIS | For corporate end users "Open Banking 3rd party provider" access needs to be added in the online bank to access their bank via API. This may be activated by default based on how the bank account was setup. |
Supported SCA Methods
| Environment | SCA Method | Authentication Method | Status | Comment |
|---|---|---|---|---|
| Sandbox | OAuth Redirect | None |  | Authentication can be done with any PSU id, but must be provided. |
| Sandbox | Decoupled | None | | Authentication can be done with any PSU id, but must be provided. |
| Production | OAuth Redirect | Mobilt BankID | | |
| Production | Decoupled | Mobilt BankID | |
Sandbox Test Data
- No remarks
Consent Service
API Status
| Service | Sandbox | Comment | Production | Comment |
|---|---|---|---|---|
| Create Consent | | Headers PSU-IP-Address and PSU-User-Agent is required by the ASPSP and must be provided | | Headers PSU-IP-Address and PSU-User-Agent is required by the ASPSP and must be provided |
| Get Consent | | | ||
| Delete Consent | | | ||
| Get Consent Status | | | ||
| Start Consent Authorisation Process | | | ||
| Get Consent Authorisation Sub-Resources | | | ||
| Get Consent Authorisation SCA Status | | | ||
| Update PSU Data for Consent | | |
Account Information Service
Transaction Limits
| Transaction History (Private) | Transaction List (Private) | Transaction History (Corporate) | Transaction List (Corporate) |
|---|---|---|---|
| Not disclosed by ASPSP | Not disclosed by ASPSP | Not disclosed by ASPSP | Not disclosed by ASPSP |
API Status
| Service | Sandbox | Comment | Production | Comment |
|---|---|---|---|---|
| Get Account List | | | ||
| Get Account Details | | | ||
| Get Balances | | | ||
| Get Transaction List | | Parameters dateFrom, dateTo and bookingStatus are ignored by ASPSP | | |
| Get Transaction Details |  | Not supported by ASPSP | | Not supported by ASPSP |
Payment Initiation Service
Supported Payment Products
| Payment Product | Sandbox | Production |
|---|---|---|
| domestic | | |
| swedish-giro | | |
| sepa-credit-transfers | | |
| international |  | |
API Status
| Service | Sandbox | Comment | Production | Comment |
|---|---|---|---|---|
| Create Payment Initiation | | Headers PSU-IP-Address and PSU-User-Agent is required by the ASPSP and must be provided | | Headers PSU-IP-Address and PSU-User-Agent is required by the ASPSP and must be provided |
| Get Payment Initiation | | | ||
| Cancel Payment Initiation | | Not supported by ASPSP | | Not supported by ASPSP |
| Get Payment Initiation Status | | | ||
| Start Payment Initiation Authorisation Process | | | ||
| Get Payment Initiation Authorisation Sub-Resources | | | ||
| Get Payment Initiation Authorisation SCA Status | | | ||
| Update PSU Data for Payment Initiation | | | ||
| Start Payment Initiation Cancellation Authorisation Process | | Not supported by ASPSP | | Not supported by ASPSP |
| Get Payment Initiation Cancellation Authorisation Sub-Resources | | Not supported by ASPSP | | Not supported by ASPSP |
| Get Payment Initiation Cancellation Authorisation SCA Status | | Not supported by ASPSP | | Not supported by ASPSP |
| Update PSU Data for Payment Initiation Cancellation | | Not supported by ASPSP | | Not supported by ASPSP |