How are TPPs authenticated? March 12, 2019 14:16 finAPI XS2A requires the TPP to provide a QWACS certificate with every service call. Related articles Which PSU SCA authentication flows are supported? How are TPPs authenticated? Which account types are supported in the Sandbox? Which consent types are supported? Which payment types are supported by the Sandbox?