{"group":"Commonwealth Bank Group","live":true,"model":{"illustrative":true,"watermark":"Illustrative reference model","note":"Brands, divisions and authentication patterns are modelled from public information so the federation feels like CBA’s own estate. Structure is illustrative and is not a statement about CBA’s real systems.","domain":"demo.cba.raidiam.io"},"treatments":[{"id":"raidiam-product","label":"Raidiam product","note":"Shipping Raidiam capability. This is the Trust Controller and the views over it."},{"id":"reference-implementation","label":"Reference implementation","note":"Stands in for your authorization server. In production this is Ping or Entra."},{"id":"cba-side","label":"CBA side illustration","note":"Stands in for a bank owned application or API that CBA already runs."}],"trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","ops":[{"id":"op-netbank","name":"NetBank Identity Platform","treatment":"reference-implementation","stands_in_for":"the retail enterprise authorization server","issuer":"https://netbank.demo.cba.raidiam.io","openid_configuration":"https://netbank.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://netbank.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://netbank.demo.cba.raidiam.io/token"},{"id":"op-commbiz","name":"CommBiz Identity Platform","treatment":"reference-implementation","stands_in_for":"the business banking authorization server","issuer":"https://commbiz.demo.cba.raidiam.io","openid_configuration":"https://commbiz.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://commbiz.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://commbiz.demo.cba.raidiam.io/token"},{"id":"op-ibm","name":"Institutional Banking and Markets Identity Platform","treatment":"reference-implementation","stands_in_for":"the institutional authorization server","issuer":"https://ibm.demo.cba.raidiam.io","openid_configuration":"https://ibm.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://ibm.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://ibm.demo.cba.raidiam.io/token"},{"id":"op-bankwest","name":"Bankwest Identity Platform","treatment":"reference-implementation","stands_in_for":"the Bankwest brand authorization server","issuer":"https://bankwest.demo.cba.raidiam.io","openid_configuration":"https://bankwest.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://bankwest.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://bankwest.demo.cba.raidiam.io/token"},{"id":"op-asb","name":"ASB FastNet Identity Platform","treatment":"reference-implementation","stands_in_for":"the ASB authorization server","issuer":"https://asb.demo.cba.raidiam.io","openid_configuration":"https://asb.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://asb.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://asb.demo.cba.raidiam.io/token"},{"id":"op-commsec","name":"CommSec Identity Platform","treatment":"reference-implementation","stands_in_for":"the broking authorization server","issuer":"https://commsec.demo.cba.raidiam.io","openid_configuration":"https://commsec.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://commsec.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://commsec.demo.cba.raidiam.io/token"},{"id":"op-workforce","name":"CBA Workforce Identity Platform","treatment":"reference-implementation","stands_in_for":"Microsoft Entra ID","issuer":"https://workforce.demo.cba.raidiam.io","openid_configuration":"https://workforce.demo.cba.raidiam.io/.well-known/openid-configuration","openid_federation":"https://workforce.demo.cba.raidiam.io/.well-known/openid-federation","token_endpoint":"https://workforce.demo.cba.raidiam.io/token"}],"services":[{"id":"svc-payments","name":"Payments API","treatment":"cba-side","resource":"https://rs-payments.demo.cba.raidiam.io","endpoint":"https://rs-payments.demo.cba.raidiam.io/mcp/execute_payment","rar_detail_type":"payment_initiation","required_roles":["cba.payments.initiator"],"oauth_protected_resource":"https://rs-payments.demo.cba.raidiam.io/.well-known/oauth-protected-resource"},{"id":"svc-accounts","name":"Accounts API","treatment":"cba-side","resource":"https://rs-accounts.demo.cba.raidiam.io","endpoint":"https://rs-accounts.demo.cba.raidiam.io/mcp/list_accounts","rar_detail_type":"accounts_read","required_roles":["cba.accounts.reader"],"oauth_protected_resource":"https://rs-accounts.demo.cba.raidiam.io/.well-known/oauth-protected-resource"},{"id":"svc-supplier","name":"Supplier and Invoice API","treatment":"cba-side","resource":"https://rs-supplier.demo.cba.raidiam.io","endpoint":"https://rs-supplier.demo.cba.raidiam.io/mcp/list_invoices","rar_detail_type":"supplier_invoice","required_roles":["cba.supplier.reader"],"oauth_protected_resource":"https://rs-supplier.demo.cba.raidiam.io/.well-known/oauth-protected-resource"}],"flows":[{"id":"flow-ap-envelope","name":"Business banking accounts payable, inside a bounded envelope","kind":"agentic-envelope","run":"/flows/flow-ap-envelope/run"},{"id":"flow-retail-servicing","name":"Retail customer servicing, read only by construction","kind":"servicing","run":"/flows/flow-retail-servicing/run"},{"id":"flow-partner-onboarding","name":"An external agent presents at a platform that has no record of it","kind":"dynamic-onboarding","run":"/flows/flow-partner-onboarding/run"},{"id":"flow-workforce-reconciliation","name":"Internal workforce agent reconciling the payment run","kind":"workforce","run":"/flows/flow-workforce-reconciliation/run"}]}