Hi team,
We are implementing NHS CIS2 authentication and authorisation to use user-restricted eRS API where our goal is to get the final access token in exchange
of idToken received from CIS2 authentication flow.
I have queries related to NHS CIS2 Technical conformance section where consumers should answer about the UserInfo Response and Session Management related queries. But considering above scenario where main goal is to get accessToken in exchange of id Token received from CIS2 and not calling /userInfo endpoint, How consumers should demonstrated towards Session management , validating Token info and User Info response related queries.
Kindly guide.