OpenID Connect and OAuth 2.0
General Concepts
OAuth
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for OAuth.
OpenID Connect
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for OpenID Connect.
Scopes
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Scopes.
Claims
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Claims.
Tokens
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
Banno Digital Toolkit
The Banno Digital Toolkit implements the standards per the General Concepts, along with the specific details below.
Scopes
Standard scopes
See the General Concepts for Scopes.
Additional scopes
These additional scopes are supported by the Banno Digital Toolkit.
https://api.banno.com/consumer/auth/offline_access
- Used to request a Refresh Token from the authentication server.
- See this RFC for more details on Refresh Tokens.
Claims
Standard claims
See the General Concepts for Claims.
Additional claims
Publicly available claims
Publicly available claims may be requested by any client application.
https://api.banno.com/consumer/claim/cash_management_user
- Cash Management userhttps://api.banno.com/consumer/claim/cash_management_user_id
- Cash Management user IDhttps://api.banno.com/consumer/claim/devices
- Authorized device informationhttps://api.banno.com/consumer/claim/fi_routing_number
- Institution routing numberhttps://api.banno.com/consumer/claim/institution_assets
- Institution assetshttps://api.banno.com/consumer/claim/institution_details
- Institution detailshttps://api.banno.com/consumer/claim/institution_id
- Unique identifier for the institutionhttps://api.banno.com/consumer/claim/masked_accounts
- Accounts with masked account numbershttps://api.banno.com/consumer/claim/netteller_id
- NetTeller ID - Bankshttps://api.banno.com/consumer/claim/phone_numbers
- Home, mobile, and work phone numbershttps://api.banno.com/consumer/claim/theme_data
- Theme datahttps://api.banno.com/consumer/claim/user_type
- User type
Restricted claims
Restricted claims contain potentially sensitive data.
An app must specifically be configured to be allowed to request and obtain them.
The back office administrator at your financial institution can do this for you.
https://api.banno.com/consumer/claim/accounts
- Accounts with full account numbershttps://api.banno.com/consumer/claim/cards
- Debit and credit cards with full unmasked card numbershttps://api.banno.com/consumer/claim/customer_identifier
- Unique customer identifier (CIF or Member Number)https://api.banno.com/consumer/claim/external_loans
- External loan records - Credit Unionshttps://api.banno.com/consumer/claim/external_tracking_records
- SymXchange external tracking recordshttps://api.banno.com/consumer/claim/id_documents
- Identification documents information - Credit Unionshttps://api.banno.com/consumer/claim/loans
- Loan records - Credit Unionshttps://api.banno.com/consumer/claim/shares
- Share records - Credit Unionshttps://api.banno.com/consumer/claim/tax_id
- User’s tax ID or social security number