04 - Specific BerlinGroup Implementation

• API base URL: https://api.psd2.lazardfreresbanque.fr
• Authorisation base URL: https://web-api.psd2.lazardfreresbanque.fr/public
• Sandbox base URL : https://sandbox.psd2.lazardfreresbanque.fr
• Sandbox authorisation base URL : https://web-sandbox.psd2.lazardfreresbanque.fr/public
• BerlinGroup Conformity : Implementation Guidelines version 1.3

  More details on how the APIs work, including sample queries, etc, are available in the Berlin Group's specifications. The above link redirects to the Implementation Guidelines, as well as the Berlin Group specifications in Open API 3.0 format.

A valid QWAC Certificate for PSD2 is required to access the Sandbox and Berlin Group API. The following conditions are verified:

• The certificate must be valid (the connection date is strictly between the creation date and the expiration date of the certificate)
• The certificate must be issued by a QWAC Certificate Authority. The official list of QTSP is available on the eIDAS Trusted List
• The certificate should not be revoked

If one of the conditions is not fulfilled, the connection is closed and the TPP received an HTTP 403 response (Access forbidden).

A TPP can provide and use any number of valid certificates as long as the CA properties and organizationIdentifier stay the same. The old certificates are not revoked when a new valid certificate is presented by the TPP and can be kept in use until their expiration date is passed.