Single SCA payments?

[christianpanton]

Hi Lunar,

Since "accountId" is required for payment initiation, we need to fetch the account number first form another source, which means that we need to perform "double SCA" in contexts where this "accountId" is not known prior. Is this correctly understood?

[dentych]

That is only true if you request PSP_AI and PSP_PI scopes in separate calls.

If you request an access token with PSP_AI and PSP_PI, you should be able to make both retrieve accounts call and initiate payment using the same access token, and thus only requiring SCA for login once. The customer will still have to approve the payment in the Lunar app.

[christianpanton]

Thank you. The final approval however counts as an "SCA" as well. And be mindful of some TPPs do not hold a license as AISP, hence would not be able to complete the journey. See also the 4 June 2020 EBA Opinion on obstacles under Article 32(3) of the RTS on SCA and CSC, sections "Account selection" and "Multiple SCAs"

[bsnlunar]

Update: Issue under advisement

We are currently evaluating and will return back when the needed experts have concluded the consequences and impact.

Br. Lunar