Onboard to the Open Banking Limited (OBL) UK directory as a Third Party Provider and obtain eIDAS/QWAC certificates for production

Steps

1. Complete FCA authorisation as a AISP and/or PISP (or confirm your EEA passport status post-Brexit via temporary permissions); obtain your FCA Firm Reference Number (FRN) — directory registration requires regulatory authorisation
2. Register on the Open Banking Directory at directory.openbanking.org.uk; create an Organisation and associate it with your FRN; OBL will validate your regulatory status against the FCA register
3. Create a Software Statement within your Organisation; specify the redirect URIs, logo URL, and applicable roles (AISP, PISP, CBPII); receive a Software Statement Assertion (SSA) JWT which proves your identity to ASPSPs
4. Generate a key pair and submit a Certificate Signing Request (CSR) to OBL's certificate authority (or a recognised QTSP for eIDAS QWAC/QSealC); download your Transport Certificate (QWAC) and Signing Certificate (QSealC)
5. Install the transport certificate in your TLS stack; all connections to ASPSP Open Banking APIs must present this client certificate — standard TLS without a client certificate will be rejected
6. Register a dynamic client with each ASPSP using DCR (Dynamic Client Registration): POST /register at the ASPSP's DCR endpoint with your SSA, redirect_uris, and token_endpoint_auth_method (private_key_jwt)