Release Calendar

AA Ecosystem Release Calendar by Sahamati

The Release Calendar outlines the updates and improvements introduced by Sahamati in the common services provided to the Account Aggregator (AA) ecosystem. It highlights key feature deployments and their scheduled timelines for both UAT and Production environments, enabling participants to stay aligned with regulatory and ecosystem-related enhancements. By adhering to the deployment dates, participants can seamlessly integrate these updates into their own release cycles, ensuring they stay up to date with the evolving changes.

2024 - Q4

Release Item	Description	Details
Customisable Client Secret Expiry Duration	Ecosystem members can specify the expiry duration for secrets' rotation within regulator-defined boundaries.	Members can set expiry duration value via the API request, with a default value of 180 days or a customised value using the secretExpiryDays parameter defined by the entity itself.
Grace Period for Expired Secrets	A grace period allows access token generation with expired secrets, accompanied by a warning.	Tokens can still be generated during the 5-day grace period after expiry, with a warning that the secret has expired.
Error Reduction in Automated Secret Reset	Changes to reduce errors in the automated secret reset process, even if environment configurations change.	Reduces errors during the secret reset process, ensuring compatibility with updated expiry durations or other configuration changes.
Human Readable Expiry Date Format	The expiry date is now visible in a human-readable ISO format.	The expiry date is now provided in the response attribute expirationDate along with expiresOn in the secret API, formatted in an easily readable ISO format.

For detailed information on the API changes, do refer to the API documentation link here

2024 - Q3

Description	UAT Status	Production Status
Deprecation of V1 API Endpoint URLs in Base URL of Entities in Central Registry	Deployed (August 2024)	Deployed (Oct 2024)
Client Secret Rotation for Participants in Token Service (Identity & Access Management)	Deployed (August 2024)	Deployed (Oct 2024)
Deactivation of deprecated V1 APIs of Central Registry	Deployed (July 2024)	Deployed (Oct 2024)

Update on Client Secret Rotation:

Based on the UAT feedback regarding client secret rotation, we will be updating the validity period for newly generated tokens to 180 days. As a result, the planned deployment, originally scheduled for 3rd October 2024, has been deployed on 16th October 2024, following the next round of UAT.

The next release will also include changes that allow entities to parameterise and configure the expiry period themselves, based on their respective regulatory guidelines.