Https://int-ers.nhs.uk login failures

e-Referral Service (e-RS) e-Referral Service FHIR API
,
1

I’m trying to access https://int-ers.nhs.uk to setup an integration test for our eRS system.

Of the options, I’m picking “authenticator app” as that’s what we’re setup for on Log in to NHS Digital developer account This prompts for a username and password but doesn’t seem to believe me with the ones I’ve just used on the onboarding system.

Do I have a “care identity” ? None of the other “login methods” seem applicable.
Sometimes it bounces me to login.microsoft.com where I can login, then dies with the below.

Is the system itself OK ? Or am I logging in wrong ?

AADSTS90072: User account ‘xxxx@yyyyy.com’ from identity provider ‘live.com’ does not exist in tenant ‘NHS Strategic Tenant’ and cannot access the application ‘urn:amazon:cognito:sp:eu-west-2_aSGTWdnmj’(NHSD API Management PROD) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account

Request Id: 2d7bf0d7-4d0f-4d1c-92f4-f4b9982e6400
Correlation Id: 1c3324e7-0e79-4dcf-a87f-ebad203bde66
Timestamp: 2025-12-23T11:37:13Z
Message: AADSTS90072: User account ‘xxxx@yyyy.com’ from identity provider ‘live.com’ does not exist in tenant ‘NHS Strategic Tenant’ and cannot access the application ‘urn:amazon:cognito:sp:eu-west-2_aSGTWdnmj’(NHSD API Management PROD) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account

2

Hi @tc1 ,

I don’t work on e-RS, but use of path-to-live INT would normally require you to set up a Care Identity. This is a different identity to your developer account which is why the authenticator app option you set up does not work.

The set up instructions here should mention contacting ITOC, who can help you set up a Care Identity for INT with an authenticator option (passkey, authenticator app etc): https://digital.nhs.uk/services/path-to-live-environments/integration-environment#messaging-urls

You can read more about authentication with CIS2 or Care Identities here: https://digital.nhs.uk/services/care-identity-service & https://digital.nhs.uk/services/care-identity-service/applications-and-services/cis2-authentication

3

OK, ta.

We’re currently working through getting an ITOC account so we can login and set up things more fully.

1 Like