At the core of PSD2 is the requirement for banks to grant Third Party Providers (TPPs) access to a customer’s online account (XS2A) in a secure and regulated way via APIs. In his talk, Berthold Kerl will discuss the consequences of the XS2A rule including identity verification, log-in and transaction authorization from a compliance, technology and usability perspective.