Specification 2 - Open Financial Exchange (OFX)

1 Specification Nov 26, 2017 2017 Intuit Inc., Envestnet | Yodlee , Enterprise Engineering Inc., Finicity, Innovision Corporation, JPMorgan Chase & Co., Plaid, SVB Financial Group, Wells Fargo Bank, and Xero rights reserved. ii open Financial Exchange Specification LegendOpen Financial Exchange Specification 2017 by: Intuit Inc., Enterprise Engineering Inc., Envestnet | Yodlee , Finicity, Innovision Corporation, JPMorgan Chase & Co., Plaid, SVB Financial Group, Wells Fargo Bank, and Xero Limited ( Publishers ). All rights royalty-free, worldwide, and perpetual license is hereby granted to any party to use the open Financial Exchange Specification to make, use, and sell products and services that conform to this open Financial Exchange Specification IS MADE AVAILABLE AS IS WITHOUT WARRANTY OF ANY KIND.

2 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, PUBLISHERS FURTHER DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT, ALL OF WHICH ARE HEREBY DISCLAIMED. THE ENTIRE RISK ARISING OUT OF THE USE OF THIS Specification REMAINS WITH RECIPIENT. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE PUBLISHERS OF THIS Specification BE LIABLE FOR ANY CONSEQUENTIAL, INCIDENTAL, DIRECT, INDIRECT, SPECIAL, PUNITIVE, OR OTHER DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, OR OTHER PECUNIARY LOSS) ARISING OUT OF ANY USE TO WHICH THIS Specification IS PUT, EVEN IF THE PUBLISHERS HEREOF HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

3 OFX Specificationiii11/26/2017 TABLE OF CONTENTSC hapter 1 OFX Specification Overview .. Introduction .. Design Principles .. open Financial Exchange at a Glance .. Data Transport .. Request and Response Model .. HTTP Form Request and Response Model .. Definitions .. User .. Financial Institution .. Service Provider .. Client .. Server .. Service .. Tag .. Element .. Aggregate .. Request .. Response .. Message .. Transaction .. Synchronization .. Message Set .. OFX Versions .. Conventions .. 30 Chapter 2 Structure .. HTTP Headers .. open Financial Exchange File Format .. OFXHEADER .. VERSION.

4 SECURITY .. OLDFILEUID and NEWFILEUID .. XML Details .. Compliance .. 37 ivOFX Specification 11/26 open Financial Exchange XML Structure .. Overview .. Case Sensitivity .. Top Level .. Messages .. Message Sets and Version Control .. Transactions .. Synchronization Wrapper .. Message Set Wrapper .. The Signon Message Set .. Signon <SONRQ> and <SONRS> .. USERPASS Change <PINCHRQ> <PINCHRS> .. <CHALLENGERQ> <CHALLENGERS> .. <MFACHALLENGERQ> <MFACHALLENGERS> .. Signon Message Set Profile Information .. Examples .. External Data Support .. Extensions to open Financial Exchange .. Private Tag Extension .. <OFXEXTENSION> Aggregate.

5 <OFXEXTENSION> Example .. Backward Compatibility with Pre-OFX Systems .. End Tag Usage .. XML Compliant Header .. International Support .. Message Set Versioning .. 75 Chapter 3 Common Aggregates, Elements, and Data Types .. Common Aggregates .. Identification of Financial Institutions and Accounts .. Punctuation in Certain User-Supplied Values .. Echoing in Responses .. Balance Records <BAL> .. Error Reporting <STATUS> .. Common Aggregates related to Images .. Common Elements .. Client-Assigned Transaction UID <TRNUID> .. Server-Assigned ID <SRVRTID> .. Financial Institution Transaction ID <FITID> .. 84 OFX Specificationv11/26 Token <TOKEN>.

6 Transaction Amount <TRNAMT> .. Memo <MEMO> .. Date Start and Date End <DTSTART> <DTEND> .. Common Data Types .. Amounts, Prices, and Quantities .. Language .. Other Basic Data Types .. 93 Chapter 4 OFX Security .. Security Concepts in OFX .. Architecture .. Security Goals .. Security Standards .. FI Responsibilities .. Security Levels: Channel vs. Application .. Security Implementation in OFX .. Channel-Level Security .. Application-Level Security .. 98 Chapter 5 International Support .. Language and Encoding .. Currency <CURDEF> <CURRENCY> <ORIGCURRENCY> .. Country-Specific Element Values .. 107 Chapter 6 Data Synchronization.

7 Overview .. Background .. Data Synchronization Approach .. Data Synchronization Specifics .. Tokens .. The Synchronization Process .. Synchronizable Objects .. Token and Full Synchronization Summary .. Conflict Detection and Resolution .. Synchronization Options .. Synchronization Errors .. 118 viOFX Specification 11/26 Typical Server Architecture for Synchronization .. Typical Client Processing of Synchronization Results .. Simultaneous Connections .. Synchronization Alternatives .. File-Based Error Recovery .. Lite Synchronization .. Relating Synchronization and Error Recovery .. Examples .. 126 Chapter 7 FI Profile .. Overview.

8 Message Sets .. Version Control .. Batching and Routing .. Client Signon for Profile Requests .. Profile Request <PROFRQ> .. Profile Response <PROFRS> .. Message Set .. Signon Realms .. Status Codes .. Profile Message Set Profile Information .. 138 Chapter 8 Activation & Account Information .. Overview .. Approaches to User Sign-Up with OFX .. Users and Accounts .. Enrollment and Password Acquisition .. User IDs .. Enrollment Request <ENROLLRQ> .. Enrollment Response <ENROLLRS> .. Enrollment Status Codes .. Examples .. Account Information .. Account Obfuscation .. Request <ACCTINFORQ> .. Response <ACCTINFORS>.

9 Account Information Aggregate <ACCTINFO> .. 148 OFX Specificationvii11/26 Status Codes .. Examples .. Service Activation .. Activation Request <ACCTRQ> .. Activation Response <ACCTRS> .. Status Codes .. Service Activation Synchronization .. Examples .. Name and Address Changes .. Change User Information Request <CHGUSERINFORQ> .. Change User Information Response <CHGUSERINFORS> .. Status Codes .. Change User Information Synchronization .. Signup Message Set Profile Information .. 164 Chapter 9 Recurring Transactions .. Creating a Recurring Model .. Recurring Instructions <RECURRINST> .. Values for <FREQ> .. Examples .. Retrieving Transactions Generated by a Recurring Model.

10 Models and Sync Behavior .. Modifying and Canceling Individual Transactions .. Modifying and Canceling Recurring Models .. Examples .. Expired Models .. 183 Chapter 10 Customer to FI Communication .. The E-Mail Message Set .. E-Mail Messages .. Regular vs. Specialized E-Mail .. Basic <MAIL> Aggregate .. E-Mail <MAILRQ> <MAILRS> .. E-Mail Synchronization <MAILSYNCRQ> <MAILSYNCRS> .. E-Mail Example .. Get HTML Page .. MIME Get Request and Response <GETMIMERQ> <GETMIMERS> .. 170 viiiOFX Specification 11/26 MIME Example .. Message Sets and Profile .. Message Set and Messages .. E-Mail Message Set Profile .. 173 Chapter 11 Banking.