[toomuchtodo]

Your understanding is correct. It's an OAuth2-type mandate for banking services providers.

https://transferwise.com/gb/blog/what-is-psd2