As defined by the Bahrain OBF, access to these APIs is secured using the Open ID Foundation's Financial Grade API (FAPI) Profile. This profile enables user authentication of consents for access to Open Banking services.
Note: Our Sandbox API also offers less strict profiles to assist with integration testing.
TPPs will need to use both Transport and Signing Certificates. Separate certificates are required for each of the Sandbox and Production environments.