Open banking consent flow template

Steps in this flowchart

• User taps connect bank in fintech app
• Choose bank from list via Plaid, TrueLayer or Tink
• Show data scopes: accounts, balances, transactions
• User agrees to consent?
• Connection cancelled
• Create consent with bank API
• Redirect to bank app or website
• Strong customer authentication with biometrics or OTP
• SCA passed?
• Return error to app
• User selects accounts to share
• Bank issues authorisation code
• App exchanges code for access & refresh tokens
• Fetch account & transaction data
• Store consent expiry date
• Consent near 90 or 180 day expiry?
• Prompt user to reauthenticate
• User revokes consent?
• Delete tokens & stop data access
• Consent ended

How to use this flowchart template

1. Click Open in the editor. The flowchart opens on a new page in FlowDiagram — nothing is uploaded and there is no sign-up.
2. Rename, add or delete shapes and drag them where you want; connectors stay attached as things move.
3. Drop in vendor logos from the library — 1,160 of them, including every AWS, Azure and Google Cloud service icon — or restyle it with the colour and theme controls.
4. Prefer text? Edit the Mermaid source below and paste it in through ☰ → Import diagram (see the Mermaid editor); it imports as an editable diagram.
5. Export to PNG, SVG or PDF, or press Ctrl+L for a link that carries the whole diagram.

Mermaid source

The whole template is the text below. Paste it into FlowDiagram, keep it in Git next to the code it describes, or hand it to an AI assistant to extend.

flowchart TD
  A((User taps connect bank in fintech app)) --> B[Choose bank from list via Plaid, TrueLayer or Tink]
  B --> C[Show data scopes: accounts, balances, transactions]
  C --> D{User agrees to consent?}
  D -->|No| E((Connection cancelled))
  D -->|Yes| F[Create consent with bank API]
  F --> G[Redirect to bank app or website]
  G --> H[Strong customer authentication with biometrics or OTP]
  H --> I{SCA passed?}
  I -->|No| J[Return error to app]
  J --> E
  I -->|Yes| K[User selects accounts to share]
  K --> L[Bank issues authorisation code]
  L --> M[App exchanges code for access & refresh tokens]
  M --> N[Fetch account & transaction data]
  N --> O[Store consent expiry date]
  O --> P{Consent near 90 or 180 day expiry?}
  P -->|Yes| Q[Prompt user to reauthenticate]
  Q --> G
  P -->|No| R{User revokes consent?}
  R -->|Yes| S[Delete tokens & stop data access]
  R -->|No| N
  S --> T((Consent ended))

Related: Mermaid editor · All banking, fintech & insurance templates · All 521 templates