Sandbox

Rabobank offers a Sandbox environment, which purpose is to try out our products. For Rabo Identity Services this environment does not allow any custom configurations and is not intended to be used for actual integration testing. For this purpose, Rabobank provides a dedicated preproduction environment for you. This environment allows specific configurations uses static responses and is intended to be used as an environment to integrate your own application to our services.

🚧
The Rabobank Sandbox environment does not support webhooks, it's advised to use Rabobank Preproduction during the integration and testing phase.

Preproduction

For Rabo Identity services APIs, in addition to Sandbox we also offer a Preproduction environment for testing your app in conditions that closely resemble the production setup. This environment will only become available after entering an agreement with Rabo Identity Services. When you take a subscription, the Preprod environment becomes visible, allowing you to subscribe your app to it.

To ensure proper separation between testing and live usage, you should create two separate apps:

One app subscribed only to the Preprod product
One app subscribed only to the Production product

This setup helps prevent accidental use of test configurations in the live environment and ensures clean, reliable testing and deployment workflows.

📘
The Rabobank Preproduction is the environment where we can apply your own unique configurations during the integration and testing phase. Webhooks are supported on this environment.

Rate Limiting

A default rate limit plan is set for all APIs. The rate limit can be shared or individual (defined per operation). The table below describes the rate limiting for this product.

Fourthline ID Scan

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`GET /ris/fourthline/keys`	Shared	6	Yes
`POST /ris/fourthline/workflows`	Shared	6	Yes
`GET /ris/fourthline/workflows/{workflowId}`	Shared	6	Yes
`GET /ris/fourthline/workflows/{workflowId}/results/{format}`	Shared	6	Yes

Onfido

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`GET /ris/onfido/dossiers`	Shared	6	Yes
`POST /ris/onfido/dossiers`	Shared	6	Yes
`GET /ris/onfido/dossiers/{dossierId}`	Shared	6	Yes
`DELETE /ris/onfido/dossiers/{dossierId}`	Shared	6	Yes
`POST /ris/onfido/dossiers/{dossierId}/processes`	Shared	6	Yes
`GET /ris/onfido/dossiers/{dossierId}/processes/{processId}`	Shared	6	Yes
`DELETE /ris/onfido/dossiers/{dossierId}/processes/{processId}`	Shared	6	Yes
`GET /ris/onfido/dossiers/{dossierId}/processes/{processId}/download`	Shared	6	Yes
`GET /ris/onfido/configurations`	Shared	6	Yes
`GET /ris/onfido/keys`	Shared	6	Yes
`GET /ris/onfido/processes`	Shared	6	Yes

iDIN

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`GET /ris/auth/idin/issuers`	Shared	6	Yes
`GET /ris/auth/idin/keys`	Shared	6	Yes
`POST /ris/auth/idin/sessions`	Shared	6	Yes
`GET /ris/auth/idin/sessions/{sessionId}`	Shared	6	Yes

ItsMe

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`GET /ris/auth/itsme/keys`	Shared	6	Yes
`POST /ris/auth/itsme/sessions`	Shared	6	Yes
`GET /ris/auth/itsme/sessions/{sessionId}`	Shared	6	Yes

SMSOtp

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`GET /ris/auth/smsotp/keys`	Shared	6	Yes
`POST /ris/auth/smsotp/sessions`	Shared	6	Yes
`GET /ris/auth/smsotp/sessions/{sessionId}`	Shared	6	Yes

Sign API

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`POST /ris/sign/documents`	Shared	6	Yes
`GET /ris/sign/documents/{documentId}`	Shared	6	Yes
`DELETE /ris/sign/documents/{documentId}`	Shared	6	Yes
`GET /ris/sign/keys`	Shared	6	Yes
`POST /ris/sign/orders`	Shared	6	Yes
`GET /ris/sign/orders/{orderId}`	Shared	6	Yes
`DELETE /ris/sign/orders/{orderId}`	Shared	6	Yes
`GET /ris/sign/orders/{orderId}/packaging-tasks/{packagingTaskId}/result`	Shared	6	Yes
`GET /ris/sign/orders/{orderId}/packaging-tasks/{packagingTaskId}/status`	Shared	6	Yes
`GET /ris/sign/orders/{orderId}/tasks/{taskId}/documents/{documentId}/result`	Shared	6	Yes
`GET /ris/sign/orders/{orderId}/tasks/{taskId}/events`	Shared	6	Yes
`GET /ris/sign/orders/{orderId}/tasks/{taskId}/status`	Shared	6	Yes

Surepay

Operation	Type	Limit (API calls / s)	Counts towards shared limit
`POST /ris/surepay`	Shared	6	Yes
`GET /ris/surepay/keys`	Shared	6	Yes