# \#authentication **URL:** https://developer.community.nhs.uk/tag/authentication/9.md [Latest](https://developer.community.nhs.uk/latest.md) · [Categories](https://developer.community.nhs.uk/categories.md) · [Tags](https://developer.community.nhs.uk/tags.md) --- ## [Receiving invalid\_client error when attaching client assertion during CIS2 token exchange in integration env](https://developer.community.nhs.uk/t/receiving-invalid-client-error-when-attaching-client-assertion-during-cis2-token-exchange-in-integration-env/13565)
**Author:** [@Tara\_Chatterton](https://developer.community.nhs.uk/u/Tara_Chatterton)\ **Replies:** 1\ **Last updated:** [15 October 2026 14:31 UTC](https://developer.community.nhs.uk/t/receiving-invalid-client-error-when-attaching-client-assertion-during-cis2-token-exchange-in-integration-env/13565 "2026-10-15T14:31:45Z")
We are trying to run the HelloWorldSeparateAuth sample: We appreciate that this sample has not been maintained for several years, but we are not currently aware of a more recent ASP.NET Core example. We have updated … --- ## [INT Env - Application Restricted API Requests](https://developer.community.nhs.uk/t/int-env-application-restricted-api-requests/15207)
**Author:** [@Application\_Support](https://developer.community.nhs.uk/u/Application_Support)\ **Replies:** 11\ **Last updated:** [28 September 2026 08:00 UTC](https://developer.community.nhs.uk/t/int-env-application-restricted-api-requests/15207 "2026-09-28T08:00:37Z")
Have an application registered within the INT environment. Obtaining the access token for API requests is working fine but we need advice on how to make requests to APIs that have ‘Application-restricted access’. Seems… --- ## [NHS login redirect url addition](https://developer.community.nhs.uk/t/nhs-login-redirect-url-addition/15208)
**Author:** [@Adedayo\_Adeboye](https://developer.community.nhs.uk/u/Adedayo_Adeboye)\ **Replies:** 12\ **Last updated:** [25 September 2026 10:53 UTC](https://developer.community.nhs.uk/t/nhs-login-redirect-url-addition/15208 "2026-09-25T10:53:34Z")
Hello, Hello, good afternoon. We need a callback url added to our NHS login configuration. Can someone please help. --- ## [403 on Retrieve attachment (A042, FHIR R4)](https://developer.community.nhs.uk/t/403-on-retrieve-attachment-a042-fhir-r4/14738)
**Author:** [@Benjamin\_Michel](https://developer.community.nhs.uk/u/Benjamin_Michel)\ **Replies:** 7\ **Last updated:** [27 August 2026 11:15 UTC](https://developer.community.nhs.uk/t/403-on-retrieve-attachment-a042-fhir-r4/14738 "2026-08-27T11:15:55Z")
Hello, We are getting some 403s when hitting Retrieve Attachment API (link). With the message: "eRS response \[1/1\]: {\\"resourceType\\":\\"OperationOutcome\\",\\"meta\\":{\\"lastUpdated\\":\\"2026-08-24T08:16:24.324Z\\",\\"profi… --- ## [CIS2 authentication for Digital Signature Service and EPS FHIR](https://developer.community.nhs.uk/t/cis2-authentication-for-digital-signature-service-and-eps-fhir/14655)
**Author:** [@Sam\_Cole](https://developer.community.nhs.uk/u/Sam_Cole)\ **Replies:** 0\ **Last updated:** [21 August 2026 10:44 UTC](https://developer.community.nhs.uk/t/cis2-authentication-for-digital-signature-service-and-eps-fhir/14655 "2026-08-21T10:44:32Z")
Our Users already have Smartcards (or modern equivilent) with relevant Orgs (either Trust or ICB orgs), roles and activities for authentication for PDS and other relevant APIs, and they will authenticate at the point of … --- ## [New support route for live NHS login partner services](https://developer.community.nhs.uk/t/new-support-route-for-live-nhs-login-partner-services/14289)
**Author:** [@Abbie\_Cotterill](https://developer.community.nhs.uk/u/Abbie_Cotterill)\ **Replies:** 0\ **Last updated:** [12 August 2026 12:04 UTC](https://developer.community.nhs.uk/t/new-support-route-for-live-nhs-login-partner-services/14289 "2026-08-12T12:04:18Z")
Hello NHS login partners, You can now submit live support tickets direct to us rather than using the NHS England Service Desk. This will enable issues to be resolved faster as our support team will pick them up direct. … --- ## [CIS2 Combined Authentication Selected Role](https://developer.community.nhs.uk/t/cis2-combined-authentication-selected-role/14219)
**Author:** [@Duncan\_James](https://developer.community.nhs.uk/u/Duncan_James)\ **Replies:** 3\ **Last updated:** [11 August 2026 09:52 UTC](https://developer.community.nhs.uk/t/cis2-combined-authentication-selected-role/14219 "2026-08-11T09:52:23Z")
We are implementing CIS2 using the User-restricted RESTful APIs - CIS2 combined authentication and authorisation security pattern as this is recommended for accessing user-restricted API’s. This is to authorise requests… --- ## [Guidance required for CIS2 INT environment authenticator allocation for test UUIDs](https://developer.community.nhs.uk/t/guidance-required-for-cis2-int-environment-authenticator-allocation-for-test-uuids/13927)
**Author:** [@Infohealth\_Dev](https://developer.community.nhs.uk/u/Infohealth_Dev)\ **Replies:** 0\ **Last updated:** [30 July 2026 11:17 UTC](https://developer.community.nhs.uk/t/guidance-required-for-cis2-int-environment-authenticator-allocation-for-test-uuids/13927 "2026-07-30T11:17:48Z")
We have successfully obtained test user UUIDs after contacting the ITOC team through the “Make a smartcard request for a Path to Live environment” process. We requested test users for the INT environment without physical… --- ## [Accessing Active API Key for Production Application](https://developer.community.nhs.uk/t/accessing-active-api-key-for-production-application/13664)
**Author:** [@Sean\_Redikin](https://developer.community.nhs.uk/u/Sean_Redikin)\ **Replies:** 3\ **Last updated:** [21 July 2026 11:11 UTC](https://developer.community.nhs.uk/t/accessing-active-api-key-for-production-application/13664 "2026-07-21T11:11:00Z")
When trying to view Active API Key using Log in to NHS Digital developer account , it is asking to enter “one-time” code . After adding one-time code using the authenticator APP, it complains of code being wrong-The Aut… --- ## [Unable to create RSA Public Key](https://developer.community.nhs.uk/t/unable-to-create-rsa-public-key/13488)
**Author:** [@alison.tant](https://developer.community.nhs.uk/u/alison.tant)\ **Replies:** 3\ **Last updated:** [15 July 2026 10:03 UTC](https://developer.community.nhs.uk/t/unable-to-create-rsa-public-key/13488 "2026-07-15T10:03:24Z")
I am trying to authenticate via CIS2 and I am getting the following response from our token request. ({“error\_description”:“Unable to create RSA Public Key”,“error”:“server\_error”}) (With a 500 code) This is this step… --- ## [API access to Medicines](https://developer.community.nhs.uk/t/api-access-to-medicines/12805)
**Author:** [@ebotoeva](https://developer.community.nhs.uk/u/ebotoeva)\ **Replies:** 1\ **Last updated:** [12 July 2026 17:22 UTC](https://developer.community.nhs.uk/t/api-access-to-medicines/12805 "2026-07-12T17:22:31Z")
We are trying to use the API to access NHS medicines ( Medicines A to Z - NHS ) via an API. We have been attempting to use the APIs described in the following documentation: \* https://digital.nhs.uk/developer/api-catal… --- ## [NHS login vector of trust for facial recognition](https://developer.community.nhs.uk/t/nhs-login-vector-of-trust-for-facial-recognition/12998)
**Author:** [@Patchs](https://developer.community.nhs.uk/u/Patchs)\ **Replies:** 1\ **Last updated:** [24 June 2026 09:15 UTC](https://developer.community.nhs.uk/t/nhs-login-vector-of-trust-for-facial-recognition/12998 "2026-06-24T09:15:48Z")
Our product Patchs is currently integrated with NHS login and NHS App. We have a patient complaining that they can’t login with facial scanning/recognition. I assume this is due to our vectors of trust. We currently use … --- ## [About NHS login Category](https://developer.community.nhs.uk/t/about-nhs-login-category/12518)
**Author:** [@Abbie\_Cotterill](https://developer.community.nhs.uk/u/Abbie_Cotterill)\ **Replies:** 0\ **Last updated:** [4 June 2026 12:25 UTC](https://developer.community.nhs.uk/t/about-nhs-login-category/12518 "2026-06-04T12:25:00Z")
About the NHS login category NHS login is a critical national platform that provides secure, authenticated access to a wide range of NHS digital services. Since its launch in 2019, it has supported millions of users to s… --- ## [Int - oAuth redirect\_uri\_mismatch](https://developer.community.nhs.uk/t/int-oauth-redirect-uri-mismatch/12207)
**Author:** [@Andrew\_Zagozda](https://developer.community.nhs.uk/u/Andrew_Zagozda)\ **Replies:** 3\ **Last updated:** [20 May 2026 09:19 UTC](https://developer.community.nhs.uk/t/int-oauth-redirect-uri-mismatch/12207 "2026-05-20T09:19:01Z")
I’ve set up a new INT application via the NHS Digital Onboarding website to test connectivity to e-Referral Service - Healthcare Worker ( Integration Testing ). My application connects to https://am.nhsint.auth-ptl.cis2… --- ## [CIS2 INT OIDC discovery failing with IDX20803 / IDX20807 – Unable to obtain configuration](https://developer.community.nhs.uk/t/cis2-int-oidc-discovery-failing-with-idx20803-idx20807-unable-to-obtain-configuration/12036)
**Author:** [@prince.sivan](https://developer.community.nhs.uk/u/prince.sivan)\ **Replies:** 2\ **Last updated:** [7 May 2026 12:39 UTC](https://developer.community.nhs.uk/t/cis2-int-oidc-discovery-failing-with-idx20803-idx20807-unable-to-obtain-configuration/12036 "2026-05-07T12:39:08Z")
Hi all, I am integrating NHS CIS2 Authentication (Separate Authentication & Authorisation) into a backend ASP.NET Core API for accessing PDS in the Integration (INT) environment, and I’d appreciate some guidance to conf… --- ## [CIS2 Separate Authentication](https://developer.community.nhs.uk/t/cis2-separate-authentication/11289)
**Author:** [@David\_Hobson](https://developer.community.nhs.uk/u/David_Hobson)\ **Replies:** 4\ **Last updated:** [30 April 2026 08:03 UTC](https://developer.community.nhs.uk/t/cis2-separate-authentication/11289 "2026-04-30T08:03:18Z")
I’m trying to test the separate authentication for CIS2. I followed the github tutorial to get started. I have obtained the keycloak credentials. When I try to run with the provided info, I get invalid redirect\_url as … --- ## [Use of CIS2 on Shared Mobile Devices](https://developer.community.nhs.uk/t/use-of-cis2-on-shared-mobile-devices/11528)
**Author:** [@JuhMed](https://developer.community.nhs.uk/u/JuhMed)\ **Replies:** 2\ **Last updated:** [23 April 2026 06:38 UTC](https://developer.community.nhs.uk/t/use-of-cis2-on-shared-mobile-devices/11528 "2026-04-23T06:38:45Z")
Hi, based on Care Identity Service authenticators - NHS England Digital shared devices are supported. What options are available when using an Android device which is organization owned and shared amongst users? I’ve u… --- ## ['Invalid parameter: redirect\_uri' when trying to use the intergration mock cis2 login](https://developer.community.nhs.uk/t/invalid-parameter-redirect-uri-when-trying-to-use-the-intergration-mock-cis2-login/7218)
**Author:** [@George\_Paddon](https://developer.community.nhs.uk/u/George_Paddon)\ **Replies:** 6\ **Last updated:** [31 March 2026 13:27 UTC](https://developer.community.nhs.uk/t/invalid-parameter-redirect-uri-when-trying-to-use-the-intergration-mock-cis2-login/7218 "2026-03-31T13:27:40Z")
We have the regular intergration cis2 working for our application and I’m trying to setup the mock cis2 intergration for our tests. I’m running into an issue while trying to use the ‘https://identity.ptl.api.platform.nh… --- ## [MFA requirements for native login system when integrating with NHS Login](https://developer.community.nhs.uk/t/mfa-requirements-for-native-login-system-when-integrating-with-nhs-login/10777)
**Author:** [@Christina\_Tang](https://developer.community.nhs.uk/u/Christina_Tang)\ **Replies:** 1\ **Last updated:** [3 March 2026 11:12 UTC](https://developer.community.nhs.uk/t/mfa-requirements-for-native-login-system-when-integrating-with-nhs-login/10777 "2026-03-03T11:12:29Z")
Hi all, We’re currently looking to implement NHS Login within our platform and would appreciate some clarification around our native MFA expectations. Referring to the DAPB3051 standards, our application will require … --- ## [Ownership and deleting subsites in the NHS M365 Tenant](https://developer.community.nhs.uk/t/ownership-and-deleting-subsites-in-the-nhs-m365-tenant/10744)
**Author:** [@Greg\_Booth](https://developer.community.nhs.uk/u/Greg_Booth)\ **Replies:** 1\ **Last updated:** [3 March 2026 09:46 UTC](https://developer.community.nhs.uk/t/ownership-and-deleting-subsites-in-the-nhs-m365-tenant/10744 "2026-03-03T09:46:46Z")
We have customers ( developers) who have requested a sharepoint site in NHS M365 tenant, and this has been created. However they have found that they cannot delete subsites, probably due to tenant wide policies. Is anyon… --- ## [Failed to resolve API Key variable request.header.apikey](https://developer.community.nhs.uk/t/failed-to-resolve-api-key-variable-request-header-apikey/10185)
**Author:** [@Alan\_Kings](https://developer.community.nhs.uk/u/Alan_Kings)\ **Replies:** 3\ **Last updated:** [21 January 2026 12:10 UTC](https://developer.community.nhs.uk/t/failed-to-resolve-api-key-variable-request-header-apikey/10185 "2026-01-21T12:10:54Z")
I’m trying to connect to Organisation Data Terminology - FHIR API in the Integration (INT) environment. get the following error { “resourceType”: “OperationOutcome”, “issue”: \[ { “severity”: “error”, “code”: “401”… --- ## [Patient Flag API (Patient Warning)](https://developer.community.nhs.uk/t/patient-flag-api-patient-warning/10064)
**Author:** [@ali.musa](https://developer.community.nhs.uk/u/ali.musa)\ **Replies:** 1\ **Last updated:** [15 January 2026 07:45 UTC](https://developer.community.nhs.uk/t/patient-flag-api-patient-warning/10064 "2026-01-15T07:45:47Z")
We need to retrieve patient warnings from EMIS. Could you confirm if it’s possible to obtain these warnings using the Patient Flag API? @paula.turnock2 @navin.bose --- ## [Invalid client identifier when trying to authenticate for Application-restricted RESTful APIs sandbox environments](https://developer.community.nhs.uk/t/invalid-client-identifier-when-trying-to-authenticate-for-application-restricted-restful-apis-sandbox-environments/8476)
**Author:** [@Anthony\_Medhurst](https://developer.community.nhs.uk/u/Anthony_Medhurst)\ **Replies:** 1\ **Last updated:** [2 December 2025 10:41 UTC](https://developer.community.nhs.uk/t/invalid-client-identifier-when-trying-to-authenticate-for-application-restricted-restful-apis-sandbox-environments/8476 "2025-12-02T10:41:27Z")
Today when trying to continue development using the sandbox environments, when I go to authenticate, I am getting a 500 error: Invalid client identifier. Request URL: https://sandbox.api.service.nhs.uk/oauth2/token Met… --- ## [NRL FHIR Sandbox API Issue](https://developer.community.nhs.uk/t/nrl-fhir-sandbox-api-issue/8978)
**Author:** [@Gary\_Mathers](https://developer.community.nhs.uk/u/Gary_Mathers)\ **Replies:** 2\ **Last updated:** [26 November 2025 08:16 UTC](https://developer.community.nhs.uk/t/nrl-fhir-sandbox-api-issue/8978 "2025-11-26T08:16:26Z")
Hi, I am having difficulty with the PATCH and DELETE requests using the sandbox API endpoint: https://sandbox.api.service.nhs.uk//record-locator/consumer/FHIR/R4/DocumentReference/{ID} With the GET and the POST I get t… --- ## [What does AAL2 mean?](https://developer.community.nhs.uk/t/what-does-aal2-mean/8743)
**Author:** [@Elizabeth\_Williams](https://developer.community.nhs.uk/u/Elizabeth_Williams)\ **Replies:** 1\ **Last updated:** [12 November 2025 14:43 UTC](https://developer.community.nhs.uk/t/what-does-aal2-mean/8743 "2025-11-12T14:43:39Z")
What does AAL2 mean? Is AAL2 the same as 2FA? --- ## [Initial test of the combined simulated auth error](https://developer.community.nhs.uk/t/initial-test-of-the-combined-simulated-auth-error/3253)
**Author:** [@nila.surti3](https://developer.community.nhs.uk/u/nila.surti3)\ **Replies:** 24\ **Last updated:** [28 October 2025 17:18 UTC](https://developer.community.nhs.uk/t/initial-test-of-the-combined-simulated-auth-error/3253 "2025-10-28T17:18:35Z")
I am raising this for one of our partners - Imperial College Healthcare NHS Trust: I did an initial test of the combined simulated auth but getting the below error { “error”: “invalid\_request”, “error\_description”: “… --- ## [New applications setup for RAN, possibly due to missing roles](https://developer.community.nhs.uk/t/new-applications-setup-for-ran-possibly-due-to-missing-roles/7951)
**Author:** [@yunus\_Ozdemir](https://developer.community.nhs.uk/u/yunus_Ozdemir)\ **Replies:** 13\ **Last updated:** [23 October 2025 16:00 UTC](https://developer.community.nhs.uk/t/new-applications-setup-for-ran-possibly-due-to-missing-roles/7951 "2025-10-23T16:00:21Z")
Hi im currently working on an Epic connect project between UCLH-RNOH. Having an issue with the below steps; New applications set up for RAN Currently getting this error while testing We think it may be due to mi… --- ## [e-RS INT 403 on A008](https://developer.community.nhs.uk/t/e-rs-int-403-on-a008/7850)
**Author:** [@Neil\_Davies](https://developer.community.nhs.uk/u/Neil_Davies)\ **Replies:** 8\ **Last updated:** [23 October 2025 15:33 UTC](https://developer.community.nhs.uk/t/e-rs-int-403-on-a008/7850 "2025-10-23T15:33:55Z")
Hi, We are getting a 403 error when making a request to A008 on the INT environment for a service we created with an ID of 6710863. The code is NO\_ACCESS and the diagnosis:“ASID is not configured in the application”. Th… --- ## [API access approval](https://developer.community.nhs.uk/t/api-access-approval/8227)
**Author:** [@novalux\_dev](https://developer.community.nhs.uk/u/novalux_dev)\ **Replies:** 3\ **Last updated:** [22 October 2025 15:52 UTC](https://developer.community.nhs.uk/t/api-access-approval/8227 "2025-10-22T15:52:08Z")
Hello, please I’ve applied for access to your web content API and it’s been pending approval for a while now --- ## [JWKS endpoint, for your client\_assertion can’t be reached](https://developer.community.nhs.uk/t/jwks-endpoint-for-your-client-assertion-can-t-be-reached/8210)
**Author:** [@abdullah](https://developer.community.nhs.uk/u/abdullah)\ **Replies:** 2\ **Last updated:** [17 October 2025 15:27 UTC](https://developer.community.nhs.uk/t/jwks-endpoint-for-your-client-assertion-can-t-be-reached/8210 "2025-10-17T15:27:15Z")
Hi all, PDS was working perfectly fine from last couple of years. however started to send error. { “error”: “public\_key error”, “error\_description”: “The JWKS endpoint, for your client\_assertion can’t be reached”, “m… [Next page](https://developer.community.nhs.uk/tag/authentication/9.md?match_all_tags=true&page=1&tags%5B%5D=authentication)