1

(27 replies, posted in Institution Errors)

I may have to download some of these tools to see if we can debug how they are changing their requests to satisfy the new chances Citi has put in place.

Edit: I see that moneywell is working for getting the transactions following the procedure above.  However, I don't see a way to identifying what the software is doing to satisfy the server from an OFX point of view.

Edit2: Okay, so I was able to get this working using pure OFX.  Citi now requires a CLIENTUID to be passed with your request.  Which means you need to have a unique identifier that you consistently use in order to get the transactions on the backend.

So in the past you could send the following for a signon request:
<SONRQ><DTCLIENT>20190918<USERID>ExampleUser<USERPASS>*******<LANGUAGE>ENG<FI><ORG>Citigroup<FID>24909</FI><APPID>QWIN<APPVER>2500</SONRQ>

Now you need to include CLIENTUID like:
<SONRQ><DTCLIENT>20190918<USERID>ExampleUser<USERPASS>*******<CLIENTUID>22576921-8E39-4A82-9E3E-EDDB121ADDEE</CLIENTUID><LANGUAGE>ENG<FI><ORG>Citigroup<FID>24909</FI><APPID>QWIN<APPVER>2500</SONRQ>

Also, this change only worked if you use the https://mobilesoa.citi.com/CitiOFXInterface URL

So I'm able to pull transactions again.  Thanks for the help.

2

(27 replies, posted in Institution Errors)

So I am not sure what "Submit client id during download" is doing on the backend.  I'd love to have some insight as to how to do that without forcing me to use someone else's software.

When I do those steps and try to pull transactions or get account information via OFX, it doesn't change the behavior.  So there is clearly something in the new process that I am missing.

3

(27 replies, posted in Institution Errors)

I've tried changing to version 103 without any success.  It seems as though Citi is really pushing for a new sort of integration that requires some sort of a negotiation with the server.

I've also tried both the existing and the new URL and get the same result.  However, every once in a while I get a working response from the OFX server.

I've reached out to Citi and they gave me a canned response along the lines of 'please tell us what software you are using so we can better assist you'

I never get much progress with financial companies when I try to communicate about the OFX protocol sad

4

(27 replies, posted in Institution Errors)

As of about 5 hours ago, I am getting the following error from the Citi OFX Server:

<STATUS>
<CODE>2000
<SEVERITY>ERROR
<MESSAGE>Due to security improvements, connection to this financial software will be shut down on 09/07/2019. Please request your financial management software contact Citi at citiOFXmigration@citi.com.
</STATUS>

I have tried enabling 3rd party software desktop access from the website.  This gives a 10 minute window to access the account.  However, I tried sending account list request as well as a transaction list during this period and nothing changes.

5

(21 replies, posted in Institution Errors)

I'm getting the same issue.  403 Forbidden with 'Accept': 'application/ofx' and 503 with 'Accept': '*/*'

Last time it worked for me was around 8:45 am (Pacific) on 5/12.

It seems like this is an intermittent issue

Update: Started randomly working a few hours later while using application/ofx header.  Seems like this is just a common AMEX server issue.