Strong Customer Authentication (SCA) is a way to ensure security in the payments space. SCA is a necessity for the TPPs to retrieve account information and initiate payments on behalf of the customer. SCA consists of a combination of at least two out of three elements which can be classified as knowledge, ownership and inherence. Knowledge is something the user knows and could be a password or pin. Ownership is somehing the user possesses and could be a mobile device, token or similar. Inherence is something the user is, in other words biometrics of the form of fingerprint, face- or voice recognition. In Norway "BankID" and "BankID on mobile" are used for SCA.
Published 01 December, 2020