... flows should be traceable; proper authentication is needed in all communications between the entities involved (i.e. the TPP, the account-servicing PSP and the merchant/payee) also to prove which entity was responsible for which part of the process in the event of repudiation, operational problems...