Test & Prove
Prove

TPP Trust Journey

How a TPP becomes trusted end to end. Stage status is derived live from linked tests and open findings.

Directory Organisation Lookup

red

Lookup of TPP organisation in the OBL Directory

Tests

TST-001Connecting to Directory APIPASS
TST-002Directory API v2.2 organisation schemaWARNING
TST-005Retrieving TPP organisationPASS

Findings

CriticalLegacy Directory endpoint detectedOpenHighDirectory API client pinned to v2.1AssignedHighOutbound proxy allow-list lacks new Directory hostOpen

Configuration

Discovered on TPP Registration Service

System
TPP Registration Service
Owner
Open Banking Platform
Keyfactor trusted
No
  • directory.api.baseUrlhttps://matls-dirapi.openbanking.org.uk
  • directory.api.version2.1
  • directory.oauth.tokenUrlhttps://matls-auth.directory.openbanking.org.uk/token
  • ssa.jwks.urlhttps://keystore.openbanking.org.uk/keystore/openbanking.jwks
  • tls.truststore/etc/pki/ob-truststore.jks (Entrust only)

Evidence

EVD-2000Connecting to Directory API — PASSApproved
EVD-2001Directory API v2.2 organisation schema — WARNINGPending
EVD-2004Retrieving TPP organisation — PASSApproved
EVD-4001application-prod.yml (TPP Registration Service)Approved

Systems: TPP Registration Service