[U2] DP 160 - Secondary User Support

Dinushi commented 2 years ago

Affected OB version:

OB 200

Affected OB specifications:

CDS

Existing pages to be updated:

Description (Optional):

Business use case This is a new feature introduced to CDS specification via Decision Proposal 160: Secondary Users. This feature enables the usage of secondary accounts as well in CDS data sharing. A user who has been nominated as a secondary account user of a particular account by the owner of that account is enabled to include that account as a secondary account in a data-sharing arrangement.
Optional or mandatory feature Optional
Technical specification https://www.cdr.gov.au/sites/default/files/2022-03/CDR-Secondary-users-in-the-banking-sector-FAQs-published-28-March-2022.pdf

Instructions:
1. Create the new OB_SECONDARY_USER_ACCOUNT table in OpenBanking Database by using the relevant script provided at <OB-IAM-HOME>/dbscripts/finance/ob-secondary-user-accounts folder.

Add the following configs to <OB-IAM-HOME>/repository/conf/deployment.toml file.


[[open_banking.authorize.steps.persist.step]]
class="com.wso2.finance.open.banking.consent.authorize.steps.impl.steps.persist.SecondaryAccountConsentPersistenceStep"
priority=6

[open_banking.secondary_user_accounts] enable = true

3. Restart the IAM server.

Note:
1. This feature requires updating the response from the Bank's sharable account endpoint to return the secondary account data of the user as well.
2. The secondary account update API is defined below. 
This API should be invoked by the bank to update the OB solution regarding the changes done on any secondary user account instruction or privilege ( This happens through the Bank's portal or any manual process as decided by the bank).

curl --location --request PUT 'https://obiam:9446/api/openbanking/consent-mgt/au/account-access-consents/secondary-accounts' \ --header 'Authorization: Basic YWRtaW5Ad3NvMi5jb206d3NvMjEyMw==' \ --header 'Content-Type: application/json' \ --data-raw '{ "data": [ { "accountID": "210587690", "secondaryUserID":"34567890", "otherAccountsAvailability": true, "secondaryAccountInstructionStatus":"inactive", "secondaryAccountPrivilegeStatus": "active" } ] }'



### Release date:
<!-- Mention the release date of U2-->

  ### References:
  <!-- Link all relevant support PRs or issues -->

  ### Labels:
  <!-- Directly add labels if you have edit rights or list them
  - Version of the solution (ex. 130, 150, 200 etc)
  - Affected specification (ex. UK, Australia, Berlin etc)
  - Priority (low, high, highest)
  - For errors/gaps, use the label “Type/bug” 
  - For improvements, use the label “Type/enhancement” 
  -->

isharailanga commented 2 years ago

U2 details: "wso2-obiam- 2.0.0.161.full wso2-obam-2.0.0.153.full"

isharailanga commented 2 years ago

Created a new page for $subject: https://docs.wso2.com/display/OB200/Configuring+Secondary+Users+Data+Sharing.
Updated the Configuring IAM for Australia as follows:

wso2 / docs-open-banking