Validate · Enforce · Trust

CMI — Bank Service Initiation Requirements v2.16 min read

The tables below define the display, labelling, and behavioural requirements for the Bank Service Initiation consents (Single Instant Payment and Multi Payment) in the TPP Consent Management Interface (CMI). See the User Experience page for interactive wireframes of the dashboard and detail pages.

Adjustments to the requirements below are permitted provided the customer can always clearly understand what consents they have granted. Any adjustments must be documented in your CX certification submission.

01 Section

Dashboard — tabs

The dashboard must present Bank Service Initiation consents across two tabs.

Rule

The Current tab must display all consents whose status is AwaitingAuthorization, Authorized, Suspended, or Paused.

The History tab must display all consents whose status is Rejected, Consumed, Expired, or Revoked.

02 Section

Dashboard — filters

A filter panel must be available on the dashboard. The following three filters are required:

Filter

Options

LFI Name

Dynamically populated from the LFIs present in the user's connections

Consent Type

Dynamically populated from the types present in the current tab

Consent State

Dynamically populated from the statuses present in the current tab

03 Section

Status labels

Consent statuses must be translated from their API values into user-friendly labels before display.

API status

Displayed label

Authorized

Active

AwaitingAuthorization

Pending

Revoked

Cancelled

Suspended

Suspended

Paused

Paused

Expired

Expired

Rejected

Rejected

Consumed

See below

`Consumed` — Single Instant Payment

For Single Instant Payments in the Consumed state, the displayed label is derived from the payment's paymentStatus field rather than the consent status.

`paymentStatus`

Displayed label

AcceptedSettlementCompleted

Successful

AcceptedCreditSettlementCompleted

Successful

AcceptedWithoutPosting

Successful

Rejected

Failed

For Multi Payment consents, Consumed is displayed verbatim as Consumed.

05 Section

Dashboard — card content

Each consent card on the dashboard must show a consistent set of fields depending on the payment consent type.

Single Instant Payment

Field

Content

LFI name

Name of the LFI the consent is held with

Status badge

Mapped label from Status labels

Masked IBAN

Masked payer IBAN (only shown when the TPP has access to the DebtorAccount details)

Consent Type

Single Payment

Payment Date

Date the payment was or is to be made

Payment Amount

Amount of the payment in AED. Shown as 0.00 when status is AwaitingAuthorization; must be a positive value once the consent is Authorized or later

Multi Payment (all subtypes)

Field

Content

LFI name

Name of the LFI the consent is held with

Status badge

Mapped label from Status labels

Masked IBAN

Masked payer IBAN (only shown when the TPP has access to the DebtorAccount details)

Consent Type

Flexi Pay

Total paid to date

Cumulative sum of all successful payments under this consent in AED

Connection expires

Date the consent expires

06 Section

Detail page

Selecting a consent on the dashboard opens its detail page. The detail page presents the same information the customer saw on the Consent Page at the time they gave consent — the limits, accounts, and conditions that defined what they agreed to. In addition to all fields shown on the dashboard card, the detail page must show a truncated Consent ID with a copy button (format: f47ac10b...d479).

Single Instant Payment — additional sections

Section

Content

Payment details

Amount, Reference, and Payment Purpose. If status is Authorized, a Status badge of Authorized must also be shown.

From account

Bank name, Payer Name, and full IBAN of the payer account. If the TPP does not have access to the account details — i.e. did not supply the DebtorAccount nor has a ReadAccounts permission on the consent — this section must not be shown.

To account

Payee Name and IBAN of the destination account

Multi Payment — additional sections

Section

Content

From account

To account

Payee Name and IBAN of the destination account

Payment Rules / Payment History

Tabbed section: Payment Rules shows consent parameters (schedule, limits, frequency); Payment History shows a log of all payments with date, amount, purpose, reference, and status

Multi Payment — dates card

A dates card must appear below the Payment Rules / Payment History section for all Multi Payment consents, except when status is Rejected.

Status behaviour

Rejected: Card is not shown
Revoked: Second row label changes to You cancelled payments on
Expired: Second row label changes to Payments expired
All other statuses: Default labels

Date rows

1
You started this permission
Date the consent was first authorised
2
We will make these payments until
Consent expiration date

07 Section

Detail page — action buttons

Button

Label

Shown when

Pause

Pause

Status is Authorized and consent type is not Single Instant Payment

Reactivate

Reactivate

Status is Paused

Revoke

Cancel Permission

Status is AwaitingAuthorization, Authorized, Suspended, or Paused

No action buttons are shown when status is Consumed, Expired, Rejected, or Revoked.

08 Section

Confirmation screen

When the user selects Pause, Reactivate, or Revoke, replace the detail view with a single confirmation screen that includes: a title, a description of the impact of the action on the service, a Confirm button, and a Go back button.

Pause

Reactivate

Revoke

Title

Pause payment permission

Resume payment permission

Cancel payment permission

Confirm button

Confirm pause

Confirm reactivation

Confirm cancellation

Once a user confirms the action, the change must take effect immediately — there must be no delay between confirmation and the consent reflecting its new state.

Revoke Immediate PATCH to /payment-consents/{ConsentId}
Pause No API Hub update — record paused state in the TPP's own system only
Reactivate No API Hub update — clear the paused state in the TPP's own system only

Single-use consents that have already been submitted (such as a Single Instant Payment that has completed) are irrevocable. Do not display a revoke button for consents in the Consumed state.