ING Australia · OAuth Scopes

ING Australia OAuth Scopes

OAuth 2.0 searched

ING Australia publishes 10 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the ING Australia API on a user’s behalf.

Tokens are issued from https://secure.ob.ing.com.au/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FinancialBanksOpen BankingCDRConsumer BankingAustraliaProduct Reference DataADI

Scopes: 10 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://id.ob.ing.com.au/authorize

Token URL
https://secure.ob.ing.com.au/token

Flows
authorizationCode

Scopes (10)

Scope	Description	Flows
openid	OpenID Connect authentication; issue an ID token for the customer.	authorizationCode
profile	Basic OIDC profile claims (name, given_name, family_name).	authorizationCode
bank:accounts.basic:read	Read basic account information and balances (list/detail without full account numbers).	authorizationCode
bank:accounts.detail:read	Read detailed account information including account numbers and features.	authorizationCode
bank:transactions:read	Read account transactions and transaction detail.	authorizationCode
bank:payees:read	Read the customer's saved/registered payees.	authorizationCode
bank:regular_payments:read	Read direct debits, scheduled payments and instalment plans.	authorizationCode
common:customer.basic:read	Read basic customer information (name, occupation / organisation basics).	authorizationCode
common:customer.detail:read	Read detailed customer information including contact details.	authorizationCode
cdr:registration	Dynamic client registration management for the Accredited Data Recipient's software product.	clientCredentials

📄 Provider scope reference: https://consumerdatastandardsaustralia.github.io/standards/#authorisation-scopes

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: https://id.ob.ing.com.au/.well-known/openid-configuration
docs: https://consumerdatastandardsaustralia.github.io/standards/#authorisation-scopes
description: >-
  OAuth2 / OIDC scopes advertised in ING Australia's live CDR OpenID Provider
  metadata (scopes_supported). These are the standard Consumer Data Standards
  (CDS) banking and common authorisation scopes granted to Accredited Data
  Recipients through the CDR consent flow. The public PRD endpoints require no
  scope; every other endpoint requires the mapped bank:* scope (see x-scopes in
  the OpenAPI). Descriptions and endpoint mappings are from the CDS authorisation
  scopes reference.
schemes:
  - name: CDR-OAuth2
    source: well-known/ing-australia-openid-configuration.json
    flows:
      - flow: authorizationCode
        authorizationUrl: https://id.ob.ing.com.au/authorize
        tokenUrl: https://secure.ob.ing.com.au/token
scopes:
  - scope: openid
    description: OpenID Connect authentication; issue an ID token for the customer.
    flows: [authorizationCode]
  - scope: profile
    description: Basic OIDC profile claims (name, given_name, family_name).
    flows: [authorizationCode]
  - scope: bank:accounts.basic:read
    description: Read basic account information and balances (list/detail without full account numbers).
    operations: [listBankingAccounts, listBankingBalancesBulk, listBankingBalancesSpecificAccounts, getBankingBalance]
    flows: [authorizationCode]
  - scope: bank:accounts.detail:read
    description: Read detailed account information including account numbers and features.
    operations: [getBankingAccountDetail]
    flows: [authorizationCode]
  - scope: bank:transactions:read
    description: Read account transactions and transaction detail.
    operations: [listBankingTransactions, getBankingTransactionDetail]
    flows: [authorizationCode]
  - scope: bank:payees:read
    description: Read the customer's saved/registered payees.
    operations: [listBankingPayees, getBankingPayeeDetail]
    flows: [authorizationCode]
  - scope: bank:regular_payments:read
    description: Read direct debits, scheduled payments and instalment plans.
    operations: [listDirectDebits, listDirectDebitsBulk, listDirectDebitsSpecificAccounts, listScheduledPayments, listScheduledPaymentsBulk, listScheduledPaymentsSpecificAccounts, listInstalmentPlans, listInstalmentPlansBulk]
    flows: [authorizationCode]
  - scope: common:customer.basic:read
    description: Read basic customer information (name, occupation / organisation basics).
    flows: [authorizationCode]
  - scope: common:customer.detail:read
    description: Read detailed customer information including contact details.
    flows: [authorizationCode]
  - scope: cdr:registration
    description: Dynamic client registration management for the Accredited Data Recipient's software product.
    flows: [clientCredentials]