What is account provisioning?

Account provisioning allows healthcare staff to create or upgrade an NHS login account on behalf of a patient.

This provides the patient with a fully verified (P9) account, without them having to go through the standard prove who you are process.

This can help patients who cannot verify their identity online or choose not to.

Requirements

For the process to work, the patient must:


How it works

There are two parts to the account provisioning process:

1. Healthcare professional flow

Healthcare staff use the Provisioning API to start the process. Here's what happens:

  1. The patient’s demographic details and the organisation’s ODS code are submitted
  2. The system checks eligibility and validates the patient’s details against PDS
  3. A response is returned with either a provisioning ID or an error
  4. If successful, an email is sent to the patient with a link to complete setting up their account

Visual diagram: Healthcare professional flow

Open the Healthcare Professional Flow in a new window
Diagram showing the healthcare professional journey flow

2. Patient claiming flow

Once the patient receives the email, they follow a short journey to activate their account:

  1. The patient selects the link in the email
  2. They receive a one-time passcode (OTP) to their mobile number and enter it
  3. Their details are checked again against PDS
  4. The patient creates or enters their password
  5. If everything matches, the account is created or upgraded to P9 level
  6. They can now use NHS login to access services

Visual diagram: Patient claiming flow

Open the Patient Claiming Flow in a new window
Diagram showing the patient claiming journey flow

Developer documentation

For technical details about how the Provisioning API works, see the Provision Account External Interface Specification.


Edit this page on GitHub