Subject: [OAUTH-WG] Example of financial aggregator authorization

From: Tim Cappalli <[email-masked]>
Date: Tue, 12 May 2020 14:14:35 +0000

Hey all,

As mentioned on the call yesterday, here's an example of Capital One's financial data sharing flow for aggregators. Intuit's Mint is used in this example but others like Simplifi (Quicken) also use this flow. Chase and Capital One are the only two of my personal financial providers that provide delegated authorization vs screen scraping with direct user credentials.

Screencast of flow and Capital One-side screenshots:
https://1drv.ms/u/s!AkYnERHf4_toguJP2ZSDduOgkha9Zg?e=3GWW2d

Data sharing link presented during consent:
https://www.capitalone.com/legal/datasharing-terms-conditions

Hope this helps.
tim

 Tim Cappalli | @timcappalli<https://www.twitter.com/timcappalli>

[Microsoft logo]