What is account provisioning
Account provisioning enables GP practices to set up an NHS login on behalf of a patient.
Instead of patients registering and verifying their identity themselves, authorised staff can create a high-level verified account (known as P9) for them.
This makes it easier for patients to access digital health services and reduces the need for support.
Requirements
For the process to work, the GP practice must:
- have a registered and authorised ODS code
- use a GP system that supports provisioning (currently EMIS and TPP are integrated)
The patient must:
- have an active PDS record with NHS number, phone number, and other demographics
- not already have a P9-level NHS login account
- have a mobile number that matches their PDS record
How it works
There are two parts to the account provisioning process:
1. Healthcare professional flow
Healthcare staff use the Provisioning API to start the process. Here's what happens:
- The GP system authenticates using an access token
- The patient’s demographic details and the organisation’s ODS code are submitted
- The system checks eligibility and validates the patient’s details against the Personal Demographics Service (PDS)
- A response is returned with either a provisioning ID or an error
- An email is sent to the patient with instructions to complete their account setup
Visual diagram: Healthcare professional flow
2. Patient claiming flow
Once the patient receives the email, they follow a short journey to activate their account:
- The patient selects the link in the email
- They receive a one-time passcode (OTP) and enter it
- Their details are checked again against PDS
- If everything matches, the account is created or upgraded to P9 level
- The patient sets a password
- They can now use NHS login to access services
Visual diagram: Patient claiming flow
Developer documentation
For technical details about how the Provisioning API works, see the Provision Account External Interface Specification.
Edit this page on GitHub