September 3, 2026
Banno Plugins Are Easy. Until They Aren’t.
Trabian Is Your Banno Team
We shipped our first Banno plugin a long time ago. Since then we've built a bunch of them — some for financial institutions that wanted their digital banking to do something it didn't do out of the box, some for fintechs that wanted their product in front of banking users where those users actually spend their time.
Some of our customers didn't have a good place to run their plugin, standing up a public web server with all the particulars Banno requires isn't something most bank IT departments are eager to own, and operating production plugins is challenging.
So we packaged all of this up into the Trabian Mesh platform enabling us to offer a full suite of Banno Plugin capabilities and services. We can with help with everything whether it be design, build, hosting, helping operate your Banno plugins…just some of it or all of it.
Some background, if Banno is new to you
Banno is Jack Henry's flagship digital banking platform and with it comes the ability to extend functionality via Banno plugins. A plugin is a web app that shows up as a visual card on the Banno dashboard, with a full expanded view when someone engages. Jack Henry opened this up for its Clients to empower them - the Digital Toolkit is the same API Banno itself is built on, the docs are public at jackhenry.dev, and you can register and get keys without ever needing to engage with a Jack Henry team member. In an industry that mostly locks the doors and hides the keys, they published the floor plan.
Where it can get tricky
The idea is never the hard part. Even with the floor plan, the hard part can surface during the smaller execution tasks: It’s OAuth token exchange with an exact-match redirect that fails if a slash is out of place, it's the CSP and iframe headers Banno requires, it's keeping sessions alive with silent re-authentication so members don't get logged out mid-task, and it's the first party cookie trap, my personal nemesis: your plugin runs in an iframe, Safari or similar decides its cookies are third-party, and login breaks. The fix is serving the plugin from a first-party domain, something like plugin.yourinstitution.com, with the DNS and certificates done properly. Jack Henry recommends exactly this, and Trabian has built the solution right into our Mesh platform.
We learned it the hard way too, years ago, and we've been learning project to project ever since. What's new is that it now lives in Mesh instead of in our repos. First-party domains where the certificates issue and renew themselves. All the headers and auth plumbing preconfigured. And it runs on the same infrastructure as our production financial institution integrations. SOC 2 Type II, annual pen testing, monitored, someone actually on call. If you read my fintech_devcon post, you know Temporal sits underneath everything we build, and that matters here too. When a plugin writes a change back to a banking core, you want durability and a real audit trail, not hope.
The router
There's one more piece, and it's the one that unlocks the best user experiences.
A card can show a single plugin, but not all experiences are created equal. The Mesh plugin router enables straight forward interactions like sign up or sign in detection, as well as more complex business outcomes. Want to show a specific plugin when a user can skip a payment, let’s do it. Want a new user experience that graduates to a call to action, sure. The Mesh plugin router can be used to provide the ideal user experience and desired outcomes based on context.
And this is where we really want to expand this offering… we've got some pretty good stuff cooking in the labs - if you want to see more just let us know.
If this is an issue you are facing
Maybe you're a financial institution with a list of things you wish your digital banking could do. Maybe you're a fintech that wants to be integrated and have some engaging real estate on the dashboard. Maybe you already built something and just want it hosted by people who've been bitten by third party cookies before. If either of these sound like you, or its something completely different, let’s talk.
Find even more Banno information at trabian.com/banno