Financial-grade API
FAPI.
A hardened OAuth 2.0 / OIDC profile defined by the OpenID Foundation for high-security financial scenarios, Open Banking, payment APIs, fintech.
FAPI matters for fintech and financial services. Outside that vertical it is largely informational. The CIAM in this index with strong FAPI deployments are Curity (purpose-built for FAPI), ForgeRock, Ping Identity, and Auth0 (Enterprise tier). Most consumer-grade CIAM ship the protocol primitives but not the certified FAPI profile.
Common questions
When do I need FAPI compliance?
Which CIAM are FAPI-certified?
What's the difference between FAPI 1.0 and FAPI 2.0?