# Https://int-ers.nhs.uk login failures **URL:** \ **Category:** e-Referral Service FHIR API\ **Tags:** onboarding, ers\ **Created:** [23 December 2025 11:49 UTC](https://developer.community.nhs.uk/t/https-int-ers-nhs-uk-login-failures/9571 "2025-12-23T11:49:24Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![tc1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tc1/32/83_2.png) [@tc1](https://developer.community.nhs.uk/u/tc1)\ **Post date:** [23 December 2025 11:49 UTC](https://developer.community.nhs.uk/t/https-int-ers-nhs-uk-login-failures/9571/1 "2025-12-23T11:49:24Z")
I’m trying to access [https://int-ers.nhs.uk](https://int-ers.nhs.uk) to setup an integration test for our eRS system. Of the options, I’m picking “authenticator app” as that’s what we’re setup for on [Log in to NHS Digital developer account](https://onboarding.prod.api.platform.nhs.uk/Index) This prompts for a username and password but doesn’t seem to believe me with the ones I’ve just used on the onboarding system. Do I have a “care identity” ? None of the other “login methods” seem applicable. Sometimes it bounces me to [login.microsoft.com](http://login.microsoft.com) where I can login, then dies with the below. Is the system itself OK ? Or am I logging in wrong ? > AADSTS90072: User account ‘xxxx@yyyyy.com’ from identity provider ‘[live.com](http://live.com)’ does not exist in tenant ‘NHS Strategic Tenant’ and cannot access the application ‘urn:amazon:cognito:sp:eu-west-2\_aSGTWdnmj’(NHSD API Management PROD) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account > > Request Id: 2d7bf0d7-4d0f-4d1c-92f4-f4b9982e6400 > Correlation Id: 1c3324e7-0e79-4dcf-a87f-ebad203bde66 > Timestamp: 2025-12-23T11:37:13Z > Message: AADSTS90072: User account ‘xxxx@yyyy.com’ from identity provider ‘[live.com](http://live.com)’ does not exist in tenant ‘NHS Strategic Tenant’ and cannot access the application ‘urn:amazon:cognito:sp:eu-west-2\_aSGTWdnmj’(NHSD API Management PROD) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account ---
**Author:** ![Allison\_Loose](https://avatars.discourse-cdn.com/v4/letter/a/a88e57/32.png) [@Allison\_Loose](https://developer.community.nhs.uk/u/Allison_Loose)\ **Post date:** [2 January 2026 09:44 UTC](https://developer.community.nhs.uk/t/https-int-ers-nhs-uk-login-failures/9571/2 "2026-01-02T09:44:49Z")
Hi @tc1 , I don’t work on e-RS, but use of path-to-live INT would normally require you to set up a Care Identity. This is a different identity to your developer account which is why the authenticator app option you set up does not work. The set up instructions here should mention contacting ITOC, who can help you set up a Care Identity for INT with an authenticator option (passkey, authenticator app etc): [https://digital.nhs.uk/services/path-to-live-environments/integration-environment#messaging-urls](https://digital.nhs.uk/services/path-to-live-environments/integration-environment#messaging-urls) You can read more about authentication with CIS2 or Care Identities here: [https://digital.nhs.uk/services/care-identity-service](https://digital.nhs.uk/services/care-identity-service) & [https://digital.nhs.uk/services/care-identity-service/applications-and-services/cis2-authentication](https://digital.nhs.uk/services/care-identity-service/applications-and-services/cis2-authentication) ---
**Author:** ![tc1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tc1/32/83_2.png) [@tc1](https://developer.community.nhs.uk/u/tc1)\ **Post date:** [19 January 2026 11:37 UTC](https://developer.community.nhs.uk/t/https-int-ers-nhs-uk-login-failures/9571/3 "2026-01-19T11:37:37Z")
OK, ta. We’re currently working through getting an ITOC account so we can login and set up things more fully.