Skip to content
Last updated

Hosted Pages flow

Token.io's HP (click to enlarge) guide the user through request initiation to consent and authentication with the bank.

As a TPP you can't change the HP flow, but you can customize the UI with your own logo and color scheme.

The Hosted Pages' Payment Confirmation page is displayed upon consent authorization.

Country selection

The following settings determine which countries the user can see, or select from, in Hosted Pages v1.

  • Bank selection in the dashboard - This limits the banks shown in the Hosted Pages and can be as granular as including or excluding specific banks, or controlling the countries that can be accessed.
    See WebApp - Bank selection for more details.

  • Countries array in the API- This limits the selectable countries in the Hosted Pages.
    See the countries array in the API reference for more details.

  • Country query parameter - preselects the country but allows the end user to switch countries, within the limits defined by the bank selection in the dashboard and the countries array in the API.
    See Localization parameters for more details.

Search for banks by name or BIC

Users can search the list of banks by entering a full or partial bank name or BIC. If a full BIC or bank name is provided and a match is found, a single result is displayed.

When multiple matches are found for a partial string, all matching results are listed for user selection.

Remember, prior to customer redirect to the HP, you can filter the search list with a GET /banks call.

See Bank Selection (v1).

Customer cancellation during bank selection

A user choosing not to proceed with user consent during bank selection can click/tap Decline.

This returns the user to where the redirect originated in the TPP's UI.

Change the bank before confirming payment details

Prior to confirming payment for a redirect to the bank for consent authorization, users can change the selected bank, either by clicking Change on the Payment confirmation screen or by entering a full or partial IBAN search string.

Pictured above (click to enlarge), clicking Change returns the user to the Select Your Bank screen to pick a different country and bank within that country, whereas entering a full or partial IBAN presents a bank list of the closest matches, if any.

To enable this feature from the dashboard, go to Settings > Configuration > Web App – General and turn on Enable user to change pre-selected bank on Consent page.

Browser back button behavior during user redirect

If the browser's back button is clicked during authentication and consent after redirect to the bank, the back button's behavior will depend on the bank flow:

  • bank-initiated payments, also known as 'one-step' payments – the user is directed to the TPP provided redirect Url.

  • TPP-initiated payments, also known as 'two-step' payments – the user is returned to the bank selection process, where they can choose to go back to the same bank or back to the TPP.

IBAN validation

Before the Token.io HP redirect to the bank for authorization, the user's IBAN is validated. Until IBAN validation succeeds, the HP redirect to the selected bank is paused.

If you have any feedback about the developer documentation, please contact devdocs@token.io