Remediate

Remediation

The platform recommends changes and records progress. Engineers implement changes through the Bank's own change process; nothing is modified automatically.

OPEN13
ASSIGNED4
CHANGE PLANNED1
IMPLEMENTED0
RETEST REQUIRED0
VERIFIED0
CLOSED0
18
REM-102FND-1043CriticalASSIGNEDOBMIG-241

OAuth audience references legacy token endpoint

  1. OPEN→
  2. ASSIGNED→
  3. CHANGE PLANNED→
  4. IMPLEMENTED→
  5. RETEST REQUIRED→
  6. VERIFIED→
  7. CLOSED
Current state

aud = https://matls-auth.directory.openbanking.org.uk/token

Required state

aud = https://auth.directory.openbanking.org.uk

Recommended change

Update the expected audience to the new issuer and retest token validation in Sandbox then Production.

Affected systems
Jans IAM
Dependencies
Change advisory board; Sandbox validation
Risk
Critical
Suggested test
TST-004 Validating OAuth audience
Evidence required
  • Configuration snapshot (post-change)
  • Test result with PASS
  • Engineer attestation
Ownership