PSD2 SCA PSDTWO-5: Customer Authentication Methods, Biometric Controls, Device Binding

Per PSD2 RTS Articles 4-9 + EBA Opinions: authentication methods. Requirements include (a) implement biometric authentication using device + cloud biometric meeting EBA guidance + (b) implement device binding for possession factor + (c) implement secure mobile payment + e-commerce flows + (d) implement out-of-band authentication where appropriate + (e) maintain authentication credential lifecycle + revocation + (f) align with FIDO2 + WebAuthn + similar standards.