Hi Team,
We are working on the User restricted authentication to access the NHS REST Apis ( following steps in this User-restricted REST API tutorial - NHS Digital)
As we are waiting for the NHS smartcards to use INT TEST environment, we are currently working with sandbox environment , that don’t need smart cards and can support simulated authentication.
As suggested in above documentation, Simulated authentication page gets displayed when this URL is loaded : Simulated Login Page
We selected smart card (radio button) and clicking on sign in , redirected to this url : https://sandbox.api.service.nhs.uk/oauth2/callback?code=f6a9e989-c6c0-4cfa-9475-abf597476519&state=FPs0kNFesZqjBVagK9B7iIp2ic-G-e2ggTUS&client_id=some-client-id
And Json response returned is : {
“error”: “invalid_request”,
"error_description": "Invalid state parameter.",
"message_id": "rrt-4995145636691281930-c-geu2-31789-19662426-1"
}
Could you please check and advise in case anything missed from our end please.