Difference between revisions of "OFX Direct Connect Bank Settings"

Latest revision as of 16:41, 11 October 2022

Here are some settings for banks and credit cards. Follow this link for instructions on Setting up OFXDirectConnect.

General instructions

• Bank Name may not be significant.
• ORG may be case sensitive.
• Bank Code is probably not used for credit cards, but may be critical for bank accounts.

Note: 2.4.0 doesn't seem to enable the "Online Actions" menu if the Bank Code is not defined. It can be set to some nonsense numerical value like "1" as a workaround.

It is usually the same as the bank's ABA routing number. You can find routing numbers here: [1].

• Userid and Username are usually the same.

• ClientUID is required by some banks. It was introduced by Intuit as a sort of multi-factor authentication Intuit MFA Reference Guide. Intuit products generate it on demand, but AQBanking doesn't; users must generate themselves. A simple way is to generate a UUID with any UUID generator (here's one) and paste it into the ClientUID field in AQBanking setup.

• If your bank does not appear on the list, you can attempt to
  • contact your bank (usually does not work).
  • Or you can check out ofxhome which has a searchable database of OFX information.
  • Intuit lists banks' OFX support at [2]. There are different icons for Direct Connect and Web Connect.

• Quicken provides access to a log of the OFX Send/Recv SGML text, which is the same text you can find for AqBanking when you create the AQOFX_LOG_COMM system variable in Windows. In some cases, it might be worth paying the $40 to buy Quicken and get access to its logs, if only to learn how to configure AqBanking correctly.
• In case of problems
  1. Google site://lists.gnucash.org/pipermail/gnucash-user (the english user list) for your bank and account type
  2. Subscribe the list and ask there.
• When you do find the right settings, please add them to this page!

Table of bank specific parameters

Notes on banks

BofA, CA

The information listed here was verified to work for BofA California. It will most likely work with BoA accounts in other States. You need to call 1-800-792-0808 and ask the CSR to "enable transaction downloading in Quicken". There may be a $9.95 monthly charge for this convenience for consumer customers. But the fee is waived for me because I have monthly direct deposit. Once enabled, you can download transactions for all the accounts that are linked in your online banking. Other information you may need to set up the OFX Direct Connect is BankID = "121000358". --DS 14:08, 5 December 2006 (EST) As of 2007-10-29 direct connect is not available in WA and ID, it should function in all other states.

BofA, NY

As of 2013-10-13:

• Bank of America OFX service for Online Banking customers (an OLB ID and Direct Connect enablement is required first) changed last October. The Org/FID must be "HAN" and "5959" respectively. The URL noted below is incorrect. Please use: https://eftx.bankofamerica.com/eftxweb/access.ofx

As of 2009-04-06:

• A call was required to enable Quicken download - there was initial resistance to attempting to enable this for a credit card only account.
• They didn't balk at the mention of GnuCash, but mentioned they didn't have instructions to assist in setup.
• There was no mention of any monthly fee associated with having the service enabled. This may work for accounts outside of NY (YMMV).
• After entering the bankName as the bankCode (051000017) the account download feature works. Once the accounts are downloaded and assigned then the transactions can be downloaded. (This is all from GnuCash 2.2.8. after following the instructions for setting up OFXDirectConnect in GnuCash 2 with respect to correcting OFX download failures on Windows.)
• Shown here are the settings.conf entries which allow download for BofA credit card accounts out of New York:

 users {
   user {
     int  uniqueId="335"
     char backendName="aqofxconnect"
     char userName="<your name>"
     char userId="<your id>"
     char customerId="<your id>"
     char country="US"
     char bankCode="051000017"
     int  lastSessionId="0"
     data {
       backend {
         char fid="6805"
         char org="HAN"
         char serverType="https"
         char serverAddr="https%3A%2F%2Fofx.bankofamerica.com%2Fcgi%2Dforte%2Fofx?servicename%3Dofx%5F2%2D3%26pagename%3Dbofa "
         char flags="account%5Flist", "statements"
       } # backend
     } # data
   } # user
   } #users
 accounts {
   account {
     int  uniqueId="336"
     char country="US"
     char bankCode="051000017"
     char accountNumber="<cc number>"
     int  user="335"
     char bankName="051000017"
     int  accountType="2"
     char accountName="Credit card <cc number>"
     char provider="aqofxconnect"
     provider {
     } # provider
   } # account
 } # accounts

American Express

"ORG" must be AMEX (case sensitive).

Bank of the West

As of 2022-09-08:

• A call was made to enable Quicken download. I was told there would be a fee, but later I was told there wasn't and I have not been charged one. It's not completely clear that the call was required.
• The clientUid used was one generated by Quicken and extracted from Quicken's ofx log. I was unable to generate my own (on a separate account) and use it.
• The aqbanking account listing did work, and download was working for personal and business checking accounts and business credit card.
• In the end, I decided to stick with monthly statement and corresponding .qfx file download.
• Here is the data section of a ~/.aqbanking/settings6/users/00000005.conf that allowed successful download:

data {
  backend {
    char bankName="Bank of the West"
    char org="BOW"
    char fid="15130"
    char serverAddr="https%3A%2F%2Fofx.bankofthewest.com%2Fprocess.ofx"
    char appId="QWIN"
    char appVer="2700"
    char headerVer="103"
    char clientUid="d0fb1b25eda6aa88b3ceb33b48649760"
    int  httpVMajor="0"
    int  httpVMinor="0"
  } #backend
} #data

Capital One - credit card

Customer service states that Capital One does not support Direct Connect services for credit card accounts (as of 6/15/09). However, a manual download of transactions from the web browser online access in ofx format, and subsequent import into GnuCash, is possible and works well.

Charles Schwab Bank

Brokerage account works. GnuCash 3.6. AqBanking v5.7.8.0stable. Use the following user configuration (create a file in ~/.aqbanking/settings/users/)

int  uniqueId="some unique integer, let's say 6699" 
char backendName="aqofxconnect"
char userName="your schwab username"
char userId="your schwab username"
char customerId="your schwab username"
char country="us"
char bankCode="0000000000"
int  lastSessionId="0"

data {
  backend {
    char bankName="Charles Schwab%26Co., INC"
    char brokerId="SCHWAB.COM"
    char org="ISC"
    char fid="5104"
    char serverAddr="https%3A%2F%2Fofx.schwab.com%2Fcgi_dev%2Fofx_server"
    char appId="QWIN"
    char appVer="2700"
    char headerVer="220"
    int  httpVMajor="0"
    int  httpVMinor="0"
  } #backend
} #data

and similarly, an account file in ~/.aqbanking/settings/accounts with contents

char provider="aqofxconnect"
int  uniqueId="some other unique integer"
int  accountType="5"
char accountNumber="your Schwab investment account number"
char bankCode="121202211"
char accountName="Schwab Investment"
char bankName="SCHWAB.COM"
char ownerName=""
char currency="USD"
char country="US"
int  user="that unique integer 6699"
int  selectedUser="6699"

apps {
} #apps

provider {
} #provider

data {
  backend {
    int  maxPurposeLines="1"
    int  debitAllowed="0"
  } #backend
} #data

Checking account works. GnuCash 3.6. AqBanking v5.7.8.0stable. Create user file in ~/.aqbanking/settings/users/ with contents:

int  uniqueId="some other unique integer, let's say 6700" 
char backendName="aqofxconnect"
char userName="your schwab username"
char userId="your schwab username"
char customerId="your schwab username"
char country="us"
char bankCode="0000000000"
int  lastSessionId="0"

data {
  backend {
    char bankName="Charles Schwab Bank, N.A."
    char org="ISC"
    char fid="101"
    char serverAddr="https%3A%2F%2Fofx.schwab.com%2Fbankcgi_dev%2Fofx_server"
    char appId="QWIN"
    char appVer="2200"
    char headerVer="102"
    int  httpVMajor="1"
    int  httpVMinor="1"
  } #backend
} #data

and the following account file

char provider="aqofxconnect"
int  uniqueId="yet another unique integer"
int  accountType="3"
char accountNumber="your checking account number, padded with 5 zeros"
char bankCode="121202211"
char accountName="Schwab Checking"
char bankName="121202211"
char ownerName=""
char currency="USD"
char country="US"
int  user="6700, which matches the user account unique integer"
int  selectedUser="6700"
apps {
} #apps

provider {
} #provider

data {
  backend {
    int  maxPurposeLines="1"
    int  debitAllowed="0"
  } #backend
} #data

Works on August 20, 2019.

Enable OFX (download & direct via aqbanking)

if you have an account, you have to enable this: Log in, go to Service -> Security -> Third party access -> OFX -> Enable. [3]; [4]

Account type must be set to "Checkings", or "CHECKING", as it appears in the OFX request. Account number may need to be padded with leading zeros to make it 17 characters [5] Indigo 04:38, 8 January 2011 (UTC)

I have been able to access a Schwab Brokerage account with the following settings: FID: 5104; ORG: ISC; Broker ID: Schwab.com; Server URL: [https://ofx.schwab.com/cgi_dev/ofx_server] (Some of this info came from: [6]) Using this connection setup I can connect and download the correct account numbers in aqbanking druid. However when I try to download balance or transaction info from the Gnucash account register, the download appears to run, logs "success," but then Gnucash crashes. --Jdbosmaus 01:38, 21 February 2008 (EST)

[https://ofx.scbwab.com/cgi_dev/ofx_server] is a phishing site, they are stealing passwords. It's not a schwab website. --Kazia 17:34, 15 November 2008 (EST)

OFX access to my Schwab brokerage accounts stopped working in August, 2013. On March 10, 2014, I contacted Schwab Customer Service, and I was able to access my brokerage accounts again by changing the FID from 5104 to 8888. -- Dkgibson (talk) 22:04, 11 March 2014 (UTC)

Chase (Bank Accounts and Credit Cards)

OFX access is free for a personal "Total Checking" account. May not be free for business/other types of accounts.

OFX access needs to be setup and enabled with the following steps: Updated Instructions as of 9/6/2020 for GNUcash Success.

Setup

Use the following parameters for bank profile, user name and user id, client id setup. Also user Header Version.

BANK PROFILE TO SELECT:  Chase Credit Card (636)
USER NAME:  (ABA Routing #)
USER ID:  (Your normal web login username)
CLIENT ID: (Randomly Generated) 
APPLICATION ID:  QWIN
APPLICATION VERSION:  2200
HEADER VERSION:  103

Note on CLIENT ID

Can be done here.

Send Out The First Retrieve Account List

Click Retrieve Account List to trigger the request for OFX Third Party Access.

When Password is Prompted

Enter your normal web login Password.

Now The Tricky Part

Once sending out the first request, and it fails, check your email for a message from Chase. Should receive an email automatically in a few minutes. The Message will ask you go onine to secure messages section, and verify your identity for Quicken Access. Once you have completed the above steps and some time has passed for Chase to activate OFX access for you, you should be able to retrieve a list of accounts and transactions both for Chase credit cards and bank accounts.

Retrieve Accoount List

After verifying your ID at Chase website above, go and Retrive Your Account List once again in GNUcash. It will work this time. Success looks like like the string of messages below.

01:33:09 Sending request...
01:33:09 Using GnuTLS default ciphers.
01:33:09 TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-128-GCM:AEAD.
01:33:09 Waiting for response...
01:33:09 Parsing response...
01:33:09 Status for signon request: Success (Code 0, severity "INFO").
The server successfully processed the request.
01:33:09 Status for account info request: Success (Code 0, severity "INFO").
The server successfully processed the request.
01:33:09 Received account (no bank code)/################ ((no bank name)/CREDIT CARD).
01:33:09 Received account 071000013/######### ((no bank name)/TOTAL CHECKING).
01:33:10 Operation finished, you can now close this window.

_______________________________________________________________________________________________

ALTERNATIVE APPROACH - OFXGET. Previous recommendations suggest that it will work more reliably with ofxget, but not from GnuCash.

[chase]
clientuid = <some uuid4>
bankid = <ABA or routing number>
user = <username>
checking = <account number>
appver = 2700
version = 220

ofxget stmt chase

provided the above configuration is saved in ~/.config/ofxtools/ofxget.cfg

Citi Credit Card

Works as of June 2020 with the following modifications to defaults.

• The new server is https://mobilesoa.citi.com/CitiOFXInterface. aqbanking's default is out-of-date.

• A space at the end of the username field may be necessary.

• For initial access, you must visit the Citi website and enable Online Banking. This is under Citi.com -> Profile -> Manage Desktop Apps.

As with all accounts, you may need a UID for it to work correctly. You can generate this by issuing "uuidgen" from a terminal.

A working configuration in the Online Banking setup section:

Bank Name: Citi Credit Card
FID: 24909
ORG: Citigroup
URL: https://mobilesoa.citi.com/CitiOFXInterface

Username: <doesn't-seem-to-matter>
User id: <your-Citi.com-username>
UID: <yourgenerateduid>

Application ID: QWIN
Application version: 2500
Header version: 103

Previous note - doesn't appear true as of June 2020, but left in for posterity:

Works correctly with username and password used for logging into the citi.com web site, but only after changing the password to remove special characters. I am not sure which special character was the culprit. The symptom prior to changing the password was that, during setup, the attempt to retrieve the list of accounts caused the connection to terminate without receiving any response (error or otherwise).

Discover

Works as of November 12, 2019.

• Some users have reported that the Discover OFX server is sensitive to the order of headers in the HTTP Request.
• Requests with less than 5 seconds between them result in a "temporarily unavailable" response.
• An alternate working set of parameters is: FID = 9625, ORG = Discover Card Account Center, URL = https://ofx.discovercard.com:443

The following order of headers works:

h = HTTPSConnection("ofx.discovercard.com:443", timeout = 30)
h.putrequest('POST', None, skip_host=True, skip_accept_encoding=True)
h.putheader('Content-Type', 'application/x-ofx')
h.putheader('Host', 'ofx.discovercard.com:443')
h.putheader('Content-Length', len(ofx_query))
h.putheader('Connection', 'Keep-Alive')
h.endheaders(ofx_query.encode())
res = h.getresponse()

E*Trade

Only seems to work with brokerage accounts. E*Trade has another ABA number you might try as the bankCode 056073573, this Server URL is also mentioned https://64.14.19.49/DataFeedAPI/ , also you could try a brokerId of "etrade.com". This link says that E*Trade bank only supports Web Connect not OFX http://web.intuit.com/personal/quicken/details.cfm?type=basic&fidetails=E%2ATrade%20Bank&qwid=qw1600&qmid=qm1600&qbid=qb1700&qbmid=qbm1700&country=

HSBC

Their FITID's are not unique for overlapping time ranges. FixFitid.pl by IRC user Tom can fix them. [7]

TD Bank

These settings worked for TD bank in MA. In the AqBanking Wizard create your User with these settings:

• User Name, User Id, and Customer Id - only important one here is your User ID which is your online banking user ID
• Bank Id = Use your bank routing number found on your check. I'm not sure how important it is
• FID is 1001, Org is CommerceBank, Broker Id does not matter (for just banking), server URL is https://ofx.tdbank.com/scripts/serverext.dll like in the above chart

This is the key piece:

• Under Server Capabilities Check the following:

Supports Account List Download

Supports Statement Download

• Under Server Options Do Not Check Anything:
• Under Expert Settings APPID:QWIN APPVER:1800 and Header Version: 102
• Then you press Get Accounts
• Your password is your pin number with TD Bank

It should setup your Account info for you.

• Click Ok, Ok. Forward. Associate your GnuCash accounts with the accounts you just setup and follow the wizard out.
• Then Open your GnuCash Checking account for instance.
• Click menu Actions > Online Actions > Get Transactions

That should import your transactions and you're all set!

UCCU (Utah Community Credit Union)

UCCU supports account download, at least through quicken. I was not, however able to get it to work in GnuCash. You can still set it up however. (this worked with GnuCash 2.4.10)

Set up the user as described here. http://wiki.gnucash.org/wiki/Setting_up_OFXDirectConnect_in_GnuCash_2#AqBanking When you are finished, the pertinent user info is as follows:

• Under the User tab you at least need your account number. Which at present should be 7 digits (as of 4/3/2012). The account number on a check actually contains 12 numbers, you only need the last 7. This goes in the field that says "User Id." I believe that is all that is required on the User tab.
• On the Bank Settings Tab, you can push select and type in "Utah" and it should find Utah Community Credit Union, and then you can select it and push ok and it will enter the pertinent information which should be as follows: (note, no Broker Id is required)

Bank Name: Utah Community Credit Union

Broker Id:

FID: 324377820

ORG: Utah Community Credit Union

• On the application settings tab, you should be able to select Windows Quicken 2011 and no special settings are needed.
• After you verify that your settings match those above you are ready to create an account. Go to the accounts tab. The pertinant information is as follows.

Account Number

1234567=9 or 1234567=0

This is the same 7 digit number used previously, only you add =9 for checking accounts and =0 for savings (make sure to replace 1234567 as seen in the example with your account number)

Bank Code

324377820

(notice, this is the same as the FID, at least for UCCU, and is also the same as the banks routing number)

Bank Name

Utah Community Credit Union

(I think this is optional, but this is what I typed in to mine, and mine is working)

Selected User

Select the user that you created previously for UCCU.

I think these are optional, but I have my Currency set to USD, and my Country set to US.

That is all you need for the account. Click ok for the account setup, and click close for the AqBanking setup, and then click Forward and assign your new account to an existing account in GnuCash. Click Forward again, then click Apply.

Open the account you just set up for online banking and do a test. Go to the actions menu, and then go to Online Actions, and select Get Transactions or Get Balance. For me at this point GnuCash said "No user assigned to this account please check your configuration." I think this is either a problem with GnuCash 2.4.10 (I'm running Windows 7 64 bit) or with AqBanking wizard or something, because we assigned a user in a previous step. See http://wiki.gnucash.org/wiki/Setting_up_OFXDirectConnect_in_GnuCash_2#.22No_user_assigned_to_this_account._Please_check_your_configuration.22_Error to fix this problem.

If you do not get this error, then it will ask for a password. This is the same password you use to log on to the UCCU website to do online banking.

Update as of Dec 2014 (using version 2.4.10)

I want to point out that UCCU wanted my acct # as the login username rather than the normal username I usually use to get in from uccu.com.

U.S. Bank

Fee $3.95/month for home user, $9.95-12.95/month for business (See Bank With Quicken).

USAA

In January 2021 USAA changed their authentication for OFX DirectConnect. In order to use it you need GnuCash 4.4 built after 14 February. and AQBanking 6.2.6. New bundles on flathub (4.4-4) and for macOS (4.4-2) are available; Microsoft Windows users can use nightly builds from 14 February 2021 and later.

First visit http://usaa.com/accessid or https://df3cx-services.1fsapi.com/casm/usaa/enroll. You'll be redirected to https://www.usaa.com/inet/ent_logon/Logon?logoffjump=true&akfixed=true where you can log in to your USAA account using your regular website credentials and two-factor authentication. Once you've logged in you'll get a page saying that Quicken wants access to your Account Owner Information and Bank Account Numbers and Details with buttons to Deny or Allow. Click Allow. You'll redirect to another page with an AccessID and AccessPIN.

Copy the URL of this page from the browser address bar and paste it somewhere convenient. Make a note of the AccessID and AccessPIN.

Open Tools>Online Banking>Online Banking Setup, click Nex on the assistant, and click Open AQBanking Setup Wizard. Create a new user or edit your existing USAA user. If you're creating a user give it a name (I use "USAA") in User Name, enter your AccessID into User ID.

Now look at the URL you copied and pasted from the USAA webpage with the AccessID. It will be something like

 https://df3cx-services.1fsapi.com/casm/usaa/connect?code=08e05960-6eea-4a47-baa5-46840bd9dae7&state=my_state&scope=usaa.profile.member.read+usaa.bank.aggregation.read. 

The long letter-and-number combination after code=is your client id (the example is fake), but it needs to be converted to all uppercase. If you have a text editor or word processor that can do that that's the easist way. Once converted, copy it and paste it into the Client UID space.

Note: There are varying reports on whether this UUID will work for the ClientUID. If it doesn't for you (attempting to retrieve transactions will fail with the message "The user cannot signon because he or she entered an invalid user ID or password." in the progress dialog) this email includes one extracted from a Quicken session and has worked for several users. We aren't copying the actual UUID here to make it less likely that Quicken's publisher will realize that it's been revealed.

Select the Bank Settings tab on the dialog box and fill out the boxes as follows (ignore the Bank Name box at the top)

 FID               67811
 ORG               USAA Federal Savings Bank
 Server URL        https://df3cx-services.1fsapi.com/casm/usaa/access.ofx
 HTTP User Agent   InetClntApp/3.0

Select the Application Settings tab and fill in:

 Application ID       QMOFX
 Application Version  2300
 Header Version       103

Now back to Bank Settings: Click the Retrieve Account List button. You'll be prompted for your PIN. Enter the AccessPIN. A window should pop up with a session log finishing with a Received line for each account you have with USAA bank.

Click OK to dismiss the user dialog.

Select the Accounts tab on the AQBanking Setup dialog. Your accounts should be listed. Edit each one in turn and make sure that each is set to the correct user and has the right bank code (it's 314074269). When you're happy with all of the accounts close the AQBanking Setup dialog and click Next on the wizard. Assign each account to its GnuCash equivalent. Click next, then Apply. You're done with setup.

Vanguard

Set HTTP Version to 1.1 (1.0 will not work)

OFX DirectConnect information download

Extensive (and probably near-complete) OFX DirectConnect information can also be auto-downloaded to your computer from a major accounting software provider's web archives by using the script found at http://www.jongsma.org/gc/. This script uses the programs curl, xmllint and tidy (on Debian/Ubuntu aptitude install curl tidy). If you don't have these programs installed, the error messages are cryptic, so if it is not working first verify you have curl and tidy installed.

Use the commands:

   wget http://www.jongsma.org/gc/bankinfo/getfidata.sh.gz

then

   gzip -d getfidata.sh.gz

• open up getfidata.sh in your favorite editor

• find and replace "2006" with "2008" to retrieve more updated xml files

• replace VER=6 with VER=9
• make sure you have "tidy" installed ("sudo aptitude install tidy" or "sudo yum install tidy")

then

   bash getfidata.sh -d

This will download, according to the above webpages, "thousands of XML files," however finding this information on the web is difficult at best.

Once the files are downloaded, you will have a "fidata" zip file. Unpack it, and inside you will find three xml files (if you have all three dependant programs, as listed on the jongsma.org webpage), bank.xml, brokerage.xml and creditcard.xml. Open the one you want to search an institution for (such as in Firefox), search for your bank's name. Within that xml listing, you will find it's "<guid>," which corresponds to the xml file number under the "fi" directory you will see alongside these three main xml files.

Open the number listed as the "<guid>" for your bank: "<guid>6756</guid>" corresponds to 6756.xml in the fi folder.

This file will contain the information needed to get GNUCash's OFX DirectConnect working with your bank's OFX DirectConnect feature.