Search loading...


Explore and Make use of Nationally Defined Messaging APIs


Authentication and Authorisation

Business flows and their related endpoints
Status: Live


This business flow describes the process of creating an authorised professional API session based upon an authenticated Care identify Service (CIS) smartcard. It makes use of the following NHS e-RS API Endpoints in order, with persisted rights to undertake further business workflows until the session is terminated.

Using the identity agent

Guidance on using the identity agent and authenticating with NHS Smartcards can be found at

This business flow involves the following APIs

Review the diagram below to learn more

BF001: Authentication and Authorisation

All content is available under the Open Government Licence v3.0, except where otherwise stated