Change:
Due to the changes that Santander are making as part of migrating from version 3 (V3) to the latest version of the Open Banking Standard (V4), we are introducing 2 new Santander provider_ids, ob-santander-personal and ob-santander-business and replacing ob-santander. At the end of the transition period all Data API and Payments API (SIP & VRP) requests to Santander will need to be made to ob-santander-personal or ob-santander-business and ob-santander will no longer be accepted.
ob-santander-corporate will not be supported.
🗓️Timeline: We will begin the transition on 03-03-2026 and end on 30-04-2026.
⚠️Impact: This change impacts all clients on Data or Payments products in the UK. If no action is taken:
- Existing data connections will break: Any Data connections that have not been re-created on the new provider_ids by 30-04-2026, will be lost since data consents are not backwards compatible.
-
Request failures: If you have hardcoded ob-santander in your backend/UI or you request a selection of providers at provider selection, new data, payments and mandate requests will fail.
📋 Details of how changes will be made
1. Data migration (Data API)
In order to have minimal impact to existing Data connections, we will be switching on ob-santander-personal, ob-santander-business and running it in parallel with ob-santander so that we can migrate connections to the new implementation when connections are sent to us for re-authentication.
Tuesday 03-03-2026
- 2 new provider-ID ob-santander-personal and ob-santander-business will exist in the providers endpoint in public beta
- The ob-santander provider will no longer be returned by the providers endpoint
- Requests for new auth URIs for ob-santander will no longer be possible
- Requests for reconfirmation of consent to ob-santander will no longer be possible
- Requests for reauth to ob-santander will no longer be possible
- Token refresh and resource requests for ob-santander will continue to work until Thursday 30 April 2026.
Thursday 30-04-2026
- ob-santander token refreshes & resource requests will no longer be possible
- All requests to Santander will need to be made to ob-santander-personal or ob-santander-business as they will be the only provider_id that you can use
-
ob-santander-personal and ob-santander-business will be available in GA
2. Payments and Variable Recurring Payment Mandate migration (Payments API)
Tuesday 03-03-2026
- user_selected: TrueLayer will start transitioning payment and mandate creation requests to ob-santander-personal and ob-santander-business.
-
pre-selected: you will still be able to use ob-santander
Tuesday 31-03-2026
- user_selected: you will no longer be able to use ob-santander as a provider filter and must use either ob-santander-personal or ob-santander-business
-
pre-selected: you will no longer be able to use ob-santander and must use either ob-santander-personal or ob-santander-business
Existing mandates with Santander accounts are not affected. We will migrate these, so they will continue to work and no action is required from clients.
Only new mandates will need to be created using the new provider_ids.
🏃Actions clients need to take
| Clients using Data API - Reconfirmation and Reauth | |
| If you use Reconfirmation of Consent | Reconfirmation will only work with the new providers. Reconfirmation directed to ob-santander will return invalid request error. At this point, you should generate a new auth link so that the user can create a new connection. |
| If you use Reauth | Reauth will only work with the new providers. Reauth directed to ob-santander will receive 500 errors. At this point, you should generate a new auth link so that the user can create a new connection. |
| Generate an auth link - Clients using auth dialog provider selection screen and/or TrueLayer consent screen | |
| All providers enabled | No action is needed and no disruption will be experienced |
| Selection of providers enabled - If using the providers parameter | If your auth link uses providers parameter and references uk-ob-santander, you'll need to add uk-ob-santander-business if you would like to make both providers available to your customers from Tuesday 03-03-2026. |
| Selection of providers enabled - If using the provider_id | If your auth link uses provider_id parameter with ob-santander, you will need to reconfigure it to have ob-santander-personal and/or ob-santander-business from Tuesday 03-03-2026. |
| Generate direct bank auth link - Clients using their own provider selection screen or direct bank auth | |
| Use TrueLayer providers endpoint |
1. Do not make requests for ob-santander from Tuesday 03-03-2026, otherwise you will begin receiving 500 errors 2. You need to clear your cache of the providers endpoint, should you cache the providers list 3. If your auth link is configured to have ob-santander, you will need to reconfigure it to have ob-santander-personal and/or ob-santander-business |
| Do not use TrueLayer providers endpoint i.e. if you have hardcoded the provider-ID ob-santander |
1. Do not make requests for ob-santander from Tuesday 3 March, otherwise you will begin receiving 500 errors 2. From Tuesday 3 March, requests for new auth URIs need to be directed to ob-santander-personal and ob-santander-business 3. Subsequent refresh requests and resource requests for those new AIS connections will need to be made on ob-santander-personal and ob-santander-business. 3. You will receive invalid request errors when attempting to create new AIS connections using ob-santander |
| Provider Selection - Payments API (SIP & VRP) | |
| user_selected: All providers enabled at provider selection | No action is needed and no disruption will be experienced |
| user_selected: Selection of providers enabled at provider selection |
From Tuesday 31-03-2026 you must re-configure your SIP payment creation and VRP mandate creation to include ob-santander-personal and/or ob-santander-business.
If you continue to use ob-santander no Santander option will be available for selection. |
| pre-selected |
From Tuesday 31-03-2026 you must update ob-santander to one of ob-santander-personal or ob-santander-business
If you continue to use ob-santander no provider will be available. |
Comments
0 comments
Article is closed for comments.