Sandbox
Rabobank offers a Sandbox environment, which purpose is to try out our products. For Rabo Identity Services this environment does not allow any custom configurations and is not intended to be used for actual integration testing. For this purpose, Rabobank provides a dedicated preproduction environment for you. This environment allows specific configurations uses static responses and is intended to be used as an environment to integrate your own application to our services.
The Rabobank Sandbox environment does not support webhooks, it's advised to use Rabobank Preproduction during the integration and testing phase.
Preproduction
For Rabo Identity services APIs, in addition to Sandbox we also offer a Preproduction environment for testing your app in conditions that closely resemble the production setup. This environment will only become available after entering an agreement with Rabo Identity Services. When you take a subscription, the Preprod environment becomes visible, allowing you to subscribe your app to it.
To ensure proper separation between testing and live usage, you should create two separate apps:
- One app subscribed only to the Preprod product
- One app subscribed only to the Production product
This setup helps prevent accidental use of test configurations in the live environment and ensures clean, reliable testing and deployment workflows.
The Rabobank Preproduction is the environment where we can apply your own unique configurations during the integration and testing phase. Webhooks are supported on this environment.
Rate Limiting
A default rate limit plan is set for all APIs. The rate limit can be shared or individual (defined per operation). The table below describes the rate limiting for this product.
Fourthline ID Scan
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
GET /ris/fourthline/keys | Shared | 6 | Yes |
POST /ris/fourthline/workflows | Shared | 6 | Yes |
GET /ris/fourthline/workflows/{workflowId} | Shared | 6 | Yes |
GET /ris/fourthline/workflows/{workflowId}/results/{format} | Shared | 6 | Yes |
Onfido
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
GET /ris/onfido/dossiers | Shared | 6 | Yes |
POST /ris/onfido/dossiers | Shared | 6 | Yes |
GET /ris/onfido/dossiers/{dossierId} | Shared | 6 | Yes |
DELETE /ris/onfido/dossiers/{dossierId} | Shared | 6 | Yes |
POST /ris/onfido/dossiers/{dossierId}/processes | Shared | 6 | Yes |
GET /ris/onfido/dossiers/{dossierId}/processes/{processId} | Shared | 6 | Yes |
DELETE /ris/onfido/dossiers/{dossierId}/processes/{processId} | Shared | 6 | Yes |
GET /ris/onfido/dossiers/{dossierId}/processes/{processId}/download | Shared | 6 | Yes |
GET /ris/onfido/configurations | Shared | 6 | Yes |
GET /ris/onfido/keys | Shared | 6 | Yes |
GET /ris/onfido/processes | Shared | 6 | Yes |
iDIN
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
GET /ris/auth/idin/issuers | Shared | 6 | Yes |
GET /ris/auth/idin/keys | Shared | 6 | Yes |
POST /ris/auth/idin/sessions | Shared | 6 | Yes |
GET /ris/auth/idin/sessions/{sessionId} | Shared | 6 | Yes |
ItsMe
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
GET /ris/auth/itsme/keys | Shared | 6 | Yes |
POST /ris/auth/itsme/sessions | Shared | 6 | Yes |
GET /ris/auth/itsme/sessions/{sessionId} | Shared | 6 | Yes |
SMSOtp
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
GET /ris/auth/smsotp/keys | Shared | 6 | Yes |
POST /ris/auth/smsotp/sessions | Shared | 6 | Yes |
GET /ris/auth/smsotp/sessions/{sessionId} | Shared | 6 | Yes |
Sign API
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
POST /ris/sign/documents | Shared | 6 | Yes |
GET /ris/sign/documents/{documentId} | Shared | 6 | Yes |
DELETE /ris/sign/documents/{documentId} | Shared | 6 | Yes |
GET /ris/sign/keys | Shared | 6 | Yes |
POST /ris/sign/orders | Shared | 6 | Yes |
GET /ris/sign/orders/{orderId} | Shared | 6 | Yes |
DELETE /ris/sign/orders/{orderId} | Shared | 6 | Yes |
GET /ris/sign/orders/{orderId}/packaging-tasks/{packagingTaskId}/result | Shared | 6 | Yes |
GET /ris/sign/orders/{orderId}/packaging-tasks/{packagingTaskId}/status | Shared | 6 | Yes |
GET /ris/sign/orders/{orderId}/tasks/{taskId}/documents/{documentId}/result | Shared | 6 | Yes |
GET /ris/sign/orders/{orderId}/tasks/{taskId}/events | Shared | 6 | Yes |
GET /ris/sign/orders/{orderId}/tasks/{taskId}/status | Shared | 6 | Yes |
Surepay
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
POST /ris/surepay | Shared | 6 | Yes |
GET /ris/surepay/keys | Shared | 6 | Yes |