Account Broker
/
User Onboarding Journey
Glossary
Decision Tree

User Onboarding Journey

1
Registration
Step 1: Register

The user initiates the onboarding by submitting a registration request via the frontend

plus

Basic user or company details are captured.

Step 2: Verify KYC

The backend triggers KYC verification through integrated services or internal checks.

plus

User identity or company data is validated based on predefined KYC rules.

Step 3: Check KYC Result

If KYC is Passed

plus

Proceed to Authentication.

plus

Terminate the flow and return an error (user cannot proceed further).

Step 4: Authenticate

The user is authenticated using credentials or oAuth-based methods.

plus

Secure authentication ensures that the identity matches the registered record.

Step 5: Access Account API Sandbox

Once authenticated, the user gains access to a sandbox environment or real Open Banking services (depending on the stage).

plus

API access is typically enabled at this point for next steps.

Step 6: Terminator

The Registration process ends here successfully, with the user now onboarded.

2
Access Account Information
Step 1: Request for Accounts

The onboarded user or application makes a request to retrieve account data via the frontend.

Step 2: Check User Consent

The system verifies whether the user has already approved the necessary consent for account access.

Step 3: Check KYC Result

If KYC is Passed

plus

Proceed to next step

Redirect user to Approve Consent screen.

plus

Once approved, loop back to account request handling.

Step 4: Get Accounts from Account Broker

Account broker microservice securely retrieves approved user account data from the bank.

plus

This ensures secure abstraction between the client and core open banking services.

Step 5: Retrieve Account ID

The system fetches the user's account ID(s) from the account broker response.

plus

These IDs are then used to retrieve or display further banking details.

Step 6: Terminator

The flow ends successfully with account data now accessible to the user or application.