TPP authentication using client certificates for NextGenPSD2

This document describes how to use the plugin "NextGenPSD2 Certificate Authenticator" (within the Loginapp's one-shot feature HTTP request authentication (Airlock One-Shot flow)) in order to provide NextGenPSD2 compliant TPP authentication. 

It also shows how to inform "the bank" (ASPSP) about newly registered technical clients (TPP certificates).

This documentation gives examples and advice how to configure the IAM plugin to be compliant with NextGenPSD2.

The documentation may be used as example but does not guarantee that the legal PSD2 require are met. Please ensure the correct configuration by examining the latest PSD2 specifications.