Questions about API usage

Can I have two TLS certificates active at the same time?

It is not possible to have two TLS certificates active at the same time, but you can upload multiple TLS certificates and link one to your application in the Rabobank developer portal Dashboard.

How do I change my TLS certificate?

To change your TLS certificate:

Log in to the Developer Dashboard.
Go to your organization, then to Apps and select the app for which you want to change the TLS certificate.
Go to Configuration
Click select or upload certificate and upload your TLS certificate in PEM format.
Click Save.

How do I configure multiple OAuth redirect URLs for my application?

When creating or editing your application, you can provide multiple OAuth URLs in the "OAuth Redirect URI" field in your App configuration.

When you supply multiple URLs, you need to specify which one we should use when you redirect the user to the authorization URL.

What is the difference between a SEPA EU credit transfer and a Cross Border credit transfer?

All payments in EUR to countries in the SEPA region are SEPA EU payments. Payments in EUR outside the SEPA region and all non-EUR payments are Cross Border credit transfers. To initiate these payments you need to use a different endpoint then for the SEPA EU payments. Please check the API documentation.

How can we use the "In-app" consent flow to make it possible for the user to give consent without having the need for a Rabo-scanner?

We support both the Web and In-app consent flow. For the Web flow, the Rabo scanner is mandatory and for the In-app flow consent can be given using the Rabo Bankieren App.

Prerequisites:

The Rabobank Bankieren app should be installed on and registered to the device being used to give consent.
The URL is picked up from the device, the OAuth2 /authorize call should be executed on the device. If this is not available, the web flow is initiated.

How do I subscribe my application?

Log in to the Developer Dashboard.
Go to your organization, then to Apps and create or select the app you want to subscribe.
Under Active subscriptions click 'Add subscription'.
Select the API product you want to subscribe to and confirm your choice.

Where can I find OAuth 2.0 scopes?

Each API product has a Product Overview that also includes information about the relevant scopes. For example: Payment Request

I am getting a 429 (too many requests) HTTP status code. What went wrong?

The 429 HTTP status code indicates that your application exceeded the rate limit. Check the plan of the product you subscribed your application to for more information on rate limits.

I am getting a 401 (unauthorized) HTTP status code. What went wrong?

The possible reasons for a 401 HTTP status code:

The required client id or client secret has not been successfully provided.
Your application is not subscribed to the correct product.
The TLS certificate for your application was not provided in the developer portal.
The TLS certificate was not added to the API call.
The TLS certificate added to the API call does not match the one provided in the developer portal.

How can I migrate to a different version of the same product?

When migrating to a new version of a product you first need to unsubscribe your application from the current product. Now you can subscribe your application again to the desired version of the product.

How to use mutual TLS

Read all about mutual TLS in our guide on How to use Mutual TLS

API calls in production fail while the same request works fine in sandbox.

There can be multiple reasons why requests are failing. Most error responses are self-explanatory. However, your request could be failing because it doesn't contain the "user-agent" header. Make sure you provide a user agent header in your request.

How to use OAuth 2.0?

Rabobank secured APIs use OAuth2 for authentication and authorization. When you successfully pass the OAuth flow you receive a access token.

A detailed description on how to use OAuth2 can be found with the APIs it applies to: