Docs: report 403 Forbidden on INT PDS FHIR POST /Patient

Testing the INT environment for Personal Demographics FHIR Create Patient endpoint.

Endpoint:

https://int.api.service.nhs.uk/personal-demographics/FHIR/R4/Patient

Method: POST

Headers sent:

  • Authorization: Bearer
  • Accept: application/json
  • Content-Type: application/json
  • X-Request-ID:
  • apikey: // key name only, not the secret

Response:
HTTP/1.1 403 Forbidden
{
“resourceType”: “OperationOutcome”,
“issue”: [
{ “severity”: “error”, … }
]
}

Request JSON payload followed the NHS FHIR Patient resource structure.

Need guidance on:

  1. Mandatory headers such as NHSD-Session-URID, X-Correlation-ID, or organisation ODS code.
  2. Required OAuth scopes/audience for creating a patient in INT.
  3. Any additional onboarding steps or product enablement for write access.

Hi Kapil, please could you raise a ticket using one of the methods in this link Incident and service request process - NHS England Digital - once you have raised a request, your ticket will be assigned to the correct team who will be able to advise you on your query.