What is account provisioning?
Account provisioning allows healthcare staff to create or upgrade an NHS login account on behalf of a patient.
This provides the patient with a fully verified (P9) account, without them having to go through the standard prove who you are process.
This can help patients who cannot verify their identity online or choose not to.
Requirements
For the process to work, the patient must:
- not already have a P9-level NHS login account
- have a valid email address and mobile phone number
- have an active Personal Demographics Service (PDS) record
How it works
There are two parts to the account provisioning process:
1. Healthcare professional flow
Healthcare staff use the Provisioning API to start the process. Here's what happens:
- The patient’s demographic details and the organisation’s ODS code are submitted
- The system checks eligibility and validates the patient’s details against PDS
- A response is returned with either a provisioning ID or an error
- If successful, an email is sent to the patient with a link to complete setting up their account
Visual diagram: Healthcare professional flow
2. Patient claiming flow
Once the patient receives the email, they follow a short journey to activate their account:
- The patient selects the link in the email
- They receive a one-time passcode (OTP) to their mobile number and enter it
- Their details are checked again against PDS
- The patient creates or enters their password
- If everything matches, the account is created or upgraded to P9 level
- They can now use NHS login to access services
Visual diagram: Patient claiming flow
Developer documentation
For technical details about how the Provisioning API works, see the Provision Account External Interface Specification.
Edit this page on GitHub