Guidance required for CIS2 INT environment authenticator allocation for test UUIDs

[Infohealth_Dev]

We have successfully obtained test user UUIDs after contacting the ITOC team through the “Make a smartcard request for a Path to Live environment” process. We requested test users for the INT environment without physical smartcards.

We are now trying to test the CIS2 authentication flow using the Mock Service Provider. However, we noticed that the mock service uses a preconfigured client configuration where the redirect URI is fixed to google.com. It does not appear to support configuring our own redirect URI, which prevents us from completing an end-to-end authentication flow back to our local application.

To continue our CIS2 authentication testing in the INT environment, we understand that we may need one of the following:

1. CIS2 user credentials (username/password) for the test users; or
2. A non-smartcard authenticator (for example, Microsoft Authenticator/AAL2) bound to the existing test UUIDs, allowing authentication using the username/password authentication method.

Based on the developer community discussion below:

Unclear how UUID used for CIS2 Auth Flow in Integration Test Env

We’ve successfully retrieved a UserID (UUID) after contacting the ITOC team via Make a smartcard request for a Path to Live environment. We asked for a new user in INT without a physical smart card. It is unclear how the UUID will be used to login once we reach the NHS CIS2 Authentication page. Essentially, what we need is a way for us to turn our UUID into a tangible login. We found little to no documentation on how to use the UUID for this purpose. All we know from what we read is that there…

we understand that we may need to contact the ITOC team to request authenticator allocation against our existing UUIDs, and that this may require a Teams session to complete the authenticator setup.

Could someone please clarify the following points?

1. Is the above understanding correct — that an ITOC request and Teams session are required to allocate an authenticator to an existing INT UUID?

2. We require multiple test users for our CIS2 integration testing. Is it possible to allocate authenticators for multiple UUIDs within a single Teams session?

3. Are there any prerequisites or information/documents required from our side before arranging the Teams session?

4. We are an organisation based outside the UK and are currently unable to access:

https://manage-care-identities.care-identity-service2.nhs.uk/

How should overseas development teams access this portal during the authenticator allocation process? Will ITOC provide an alternative process or support us during the Teams session?

Any guidance on the correct process for completing CIS2 authenticator setup for INT testing would be greatly appreciated.

Thank you.