Developer Programs
Vendor Integration Program (VIP)
Direct access to Jack Henry's technical integration resources.
Technical Account Manager (TAM)
Get technical integration help from a single point of contact.
Learn
Shared Responsibility
Learn about shared roles and responsibilities of customers and Jack Henry in open banking.
Developer Use Cases
Find a use case that fits your development needs.
Developer Video Gallery
Watch the latest demos, webinars, and more.
Developer Conference
Connect with industry leaders, gain insights from expert speakers, and explore our latest innovations.
Docs
Admin API
Create solutions for an institution's back office support tools.
Authentication Framework
Map customer identities to your existing system IDs.
Consumer API
Access financial data for user accounts, transactions, and more.
Data Broker
Get deeper access to financial institution data.
Enterprise Event System
Respond to events in real-time using this powerful pub/sub-based solution.
jXchange - REST API
Translate business information between Jack Henry and third-party applications using a REST-based API.
jXchange - SOAP API
Translate business information between Jack Henry and third-party applications using a SOAP-based API.
Operational Data Integration (ODI)
Get customized queries for bulk data needs.
Payments
Embed check deposits, ACH, bill pay, cards, and real-time payments.
Plugin Framework
Embed the best of the fintech world directly into your user's dashboard.
SymXchange
Query Symitar core member accounts, post transactions, run PowerOn scripts, and more.
Xperience
Modern UI that provides consistent visual integration across Jack Henry products.

Glossary

Glossary
Computer keyboard - Photo by Pixabay: https://www.pexels.com/photo/alphabets-close-up-computer-connection-532173/
The glossary contains terms that are commonly used throughout the documentation.

Access token

This represents and enables authorized access to data provided by an OAuth 2.0-based API.

Must be kept confidential.

When an Access Token becomes invalid or expires, a new Access Token can be obtained via a Refresh Token.

Account

An account refers to one of a user’s banking accounts (including types such as Checking, Savings, and Loans).

API

This acronym stands for application programming interface.

Cards

Within the context of plugins: These are UI summary views that are displayed using a card-like visual metaphor on the dashboard for Banno’s built-in features as well as plugins.

Within the context of APIs: These refer to credit cards or debit cards.

Confidential client

Confidential clients are OAuth clients that can keep their API credentials secret (e.g. secure servers).

Core

Banking software that provides basic functionality (including general ledger, transactions, and transfers) for financial institutions.

Dashboard

This is the primary UI that a user typically sees when they use Banno Online & Mobile.

The dashboard displays a set of UI summary cards, which includes Banno’s built-in features as well as plugins.

Financial institution

A bank or credit union.

Identity token

This represents authenticated identity information about a user in an OpenID Connect-based API.

JSON

This acronym refers to JavaScript Object Notation, the data-interchange format used in the API.

OAuth

The OAuth 2.0 industry standard allows users to delegate scoped access to third parties who wish to act on the user’s behalf.

OpenID Connect (OIDC)

The OpenID Connect (OIDC) industry standard is an identity layer built on top of OAuth 2.0 that provides authenticated information about the user to third party apps.

PKCE (Proof Key for Code Exchange)

PKCE (pronounced ‘pixie’) is an extension that adds additional security to the OAuth2 authorization code flow.

Plugins

These are web apps that can be configured to display as cards in a user’s dashboard in Banno Online & Mobile.

An optional primary action button can be used to take users to a full-screen web view of your application.

Plugins are sometimes referred to informally in the developer community as “card/cards” or “tile/tiles”, but the correct terms are “plugin/plugins”.

Public client

Public clients are OAuth clients that are incapable of keeping their API credentials secret, such as mobile apps or single-page applications (SPA).

Refresh token

A credential used to obtain a new access token per this RFC.

REST

Acronym for Representational state transfer, the software architectural style used by the API.

Tiles

See plugins.

Have a Question?
Have a how-to question? Seeing a weird error? Get help on StackOverflow.
Register for the Digital Toolkit Meetup where we answer technical Q&A from the audience.
Last updated Tue Jul 18 2023