tell. Configuration Guide

Getting started, implementation and configuration

As well as configuring your Interface, you will need to intergrate with our services. For more information on this aspect, see our Integration Guide.

Premium Services
We offer a range of customisation and value-added services. Some are highlighted below (look out for yellow boxes like this), but feel free to contact us to discuss any additional or bespoke requirements you may have.

Register

If you haven't done so already, register as a FinTech Account Provider by clicking here .

You only need to provide some basic information at this stage. Verify your email address, register your MFA device, then you're ready to go. You will be given access to the Management Console and will be issued with:

  • client_id
  • client_secret

You should store these details securely - you'll need them to call our API.

Create Interface

A Dedicated Interface is your PSD2 gateway, providing an end to end solution including a Developer Portal, API Gateway, Consent Management and much more. You can create as many Interfaces as you need. You may wish to have different Interfaces if you operate multiple brands, otherwise one will be enough.

To add an Interface within the Management Console, go to Interfacesand select Create New Interface.

When you submit the form, your Interface will be created instantly. This will include:

  • Developer Portal* - your external facing website for TPPs
  • Sandbox and Production Environments
  • Authorisation Simulator - for development and testing in Sandbox
  • Stub Data Set - your ring-fenced data repository in Sandbox
  • Account-Access Endpoints - these are described in more detail below
  • API Key & Certificate - purpose & usage is described in the Integration Guide

* Your Developer Portal uses the subdomain you selected. For example, if you chose “alias-bank” as your subdomain, the Portal will be located athttps://alias-bank.tell.money. It can sometimes take a few minutes for the domain to fully propogate so if the site isn't available immediately, leave it briefly then try again.

When your Interface is created, you can configure it by selecting General Information where you can view and edit the name and description. You can also upload the logo and favicon that you wish to use in the Developer Portal.

Contact us if you'd like to discuss a fully customised portal (domain, design & feature set).

Account Access

An Account Information Service Provider (AISP) is a type of Third Party Provider (TPP) that is permitted to access account information and to perform certain account-based activities on behalf of a user. An AISP needs a user's explicit consent to do so.

The way in which your users provide Account Access consent is described in more detail in the Integration Guide.

By selecting Account Access within the Management Console, you can configure which Endpoints (types of services) you will be exposing to TPPs.

We automatically configure a set of default Endpoints for you:

  • GET /accounts
  • GET /balance
  • GET /transactions
You can and add, view and edit this list at any time, and any changes are instantly reflected in the specification on your Developer Portal.

We can support an unlimited range of additional endpoints - get in touch to discuss your requirements.

Payment Initation

A Payment Initiation Service Provider (PISP) is a type of Third Party Provider (TPP) that is permitted to initiate payments from an account on your system on behalf of a user. A PISP needs a user's explicit consent to do so.

The way in which your users provide Payment Initiation Consent is described in more detail in the Integration Guide.

By selecting Payment Initation within the Management Console, you can configure this service. If you are not intending to support outbound payment initiation, simply select "not supported" and this option will not be made available to PISPs (this is the default setting).

If you switch Payment Initiation on, you can then configure the type of payments that you accept and the message schema you expect to receive. The Management Console allows you to choose a number of different options including:

  • payee-id - to support payments to pre-existing recipients, identified by an ID of your choice
  • payeeinfo - to support payments with a new recipient details specified in the request
    • UK - recipients with UK bank account details
    • IBAN - recipients with IBAN details
    • SWIFT/BIC - recipients with SWIFT/BIC account details
  • future-dated - to support future dated payments
  • recurring - to support recurring payments / standing orders

These options can be changed at any time.

Require something more bespoke? No problem, just let us know what you need.

Integration Settings

The way in which you integrate with tell.connect is described in details in the Integration Guide. The Management Console allows you to control how and where the integration with your application takes place. Within your Interface, select Integration from the menu.

Whilst the standard implementation provides you with everything that you need to integrate and comply, we understand that not all businesses have the same needs, nor do they necessarily have the time or resources to carry out the implementation. We have a range of options to help with this, including;

  • Custom integration into your API
  • Direct integration with your service providers (e.g. card processor & payment gateway)
  • Outsourced developement (whereby we carry out any work on your behalf)
Get in touch if you'd like to discuss any of these options.

Authorisation

You can set the location of your Authorisation service for both Sandbox and Production. This is the location on your website or app where you present the user with the consent being requested and allow them to review and approve it.

In Sandbox you can select Simulator Mode. Doing so means that all authorisation requests will be auto-approved by our simulator without any communication with your application. You can switch this on and off as required.

Simulator Mode is the default setting when you create an Interface. This means that you can try out the API immediately without any development. You may choose to leave this setting on so that all Authorisation requests into the Sandbox continue to be served directly by tell.connect.

Resources

You can set the location of your Resource service for both Sandbox and Production. This is the location of an endpoint on your application where we will direct all resource requests (Account Access & Payment Initiation).

In Sandbox you can select Stub Data Mode. Doing so means that all resource requests will responded to by our Stub Data Server, providing responses directly from your dedicated stub data enviornment without any communication with your application. You can switch this on and off as required.

Stub Data Mode is the default setting when you create an Interface. This means that you can try out the API immediately without any development. You may choose to leave this setting on so that all Resource requests into the Sandbox continue to be served directly from the tell.connect Stub Data Environment.

Security

As part of integrating with the Service as described in the Integration Guide, you will receive API requests from tell.connect for Account Access and Payment Initiation.

These requests will always contain an API Key and may also be signed using aCertificate Public Key (use of a Public Key for signing messages is optional - this is described in more detail in the Integration Guide).

You can manage these settings in the Management Console by navigating to your Interface and selectingSecurity.

You can view your API Key and select from a list of your pre-configured Certificates. To view or create a Certificate, go toOrganisation in the main menu and selectCertificates.

Testing

You may find it useful to try out the API before carrying out any integration. Doing so will allow you to experience how the system behaves from the perspective of a TPP (AISP or PISP).

When a TPP registers on your Dedicated Interface, they will be issued with a client_id and client_secret in order to securely access the API, and they will be required to sign their requests using a shared certificate.

You don't have to go through this process. You can access the API in Sandbox instantly by using the phrasesandbox in place of:

  • username - used for Basic Auth in certain calls
  • password - used for Basic Auth in certain calls
  • JWT - used to sign requests in the x-jws-signature header