Organisations
Onboard organisations that participate in an ecosystem or a federation. Establish trust and secure data exchange between businesses and their technical resources. Onboard suborganisations to reflect a business structure you need.
Organisations are the main entities of the Connect Platform representing real business entities within which all the users and technical resources are created and managed.
Organisations on Raidiam Connect are linked to creating a one-to-one relation between organisations and their registration number.
Besides the governing organisation(s) acting as a Trust Framework Administrator, organisations can be divided into two types:
- Data Providers - organisations offering acess to data usually upon user consent but also in machine-to-machine scenarios. A Data Provider is not limited only to offering data but can act as a Data Receiver as well. For example, a financial institution can offer user-permissioned financial and PII data to fintech applications being a part of an Open Finance ecosystem.
- Data Receivers - organisations which access data provided by Data Providers to build new products and services. For example, a data receiver can be a payments provider platform, a data access platform, or other financial intermediary.
Data Providers, also called Data Holders, are organisations that offer data, usually user-permissioned, to other organisations -- Data Receivers.
With Raidiam Connect, Data Providers can:
- Establish secure data exchange channels by using OAuth, mutual TLS, and more.
- Authenticate Data Receivers and verify that the organisation trying to access the data really is a part of the ecosystem or federation.
- Add their Authorisation Servers enabling Data Receivers to discover their configuration and get access tokens -- a mean to access data with OAuth.
- Publish APIs (like data APIs or consent APIs) with ease and using endpoint discovery that automatically defines the available endpoints required by ecosystem or federation.
- Prove and advertise their compliance with various security profiles, data profiles, customer journey requirements, and more.
- Streamline the onboarding process for organisations and partners to access data in a standardized way.
If your organisation wants to share data, see the Provide Data getting started guide to learn how quickly add authorisation servers, publish your organisations APIs, and more.
A Data Provider, as an organisation, is not limited only to offering their data but can also act as a Data Receiver to get data from other organisations to enhance its services and offering. If this is a case for your organisation, see the Receive Data getting started guide.
Data Receivers, also called Data Recipients or Third Party Providers (TPPs), can access data provided by other organisations to build new products and offer new services. With Raidiam Connect, Data Receivers:
- Benefit with a streamlined onboarding process to start accessing the Data Provider's resources. Data APIs are standardized and once published by a Data Provider easy to discover. Client applications are either easy to onboard at the provider's authorisation server using OAuth Dynamic Client Registration or are automatically registered at the authorisation server if OpenID Federation is used within the ecosystem or federation.
- Connect with Data Providers securely using OAuth and mutual Transport Security Layer (mTLS). With Connect, Data Receivers can obtain Digital Certificates issued by a Certificate Authority that is trusted by all participants of the ecosystem or federation. Such certificates can be used to establish secure connection (transport), to authenticate client applications, and more.
If your organisation wants to receive data from other organisations, see the Receive Data getting started guide.
When an Organisation is created, it is assigned the Active status, allowing it to fully exist and interact with other entities within an ecosystem or federation.
Changing the status to Withdrawn offboards the organisation, for example, in a case when the Organisation breaches Terms and Conditions of the ecosystem or federation. This organisation's technical resources cannot successfully interact with other participants' applications and servers.
An Organisation can be made Active again by a Super User or Data Administrator.
- See the Receive Data Getting Started if your organisation wants to receive data offered by Data Providers.