HTI Flow
Health Tools Interoperability
HTI is a light-weight solution from GIDS to quickly implement client-to-client launches. In short, the HTI launch is simply a signed JWT with HTI-specific claims that is sent from one client to another. A public key can be used to verify that the JWT comes from a trusted source.
Requirements
The
module provideruses Token Introspection OR must be able to relate the issuer to its JWKS endpoint.
Information Flow
The HTI launch can be done without an authentication server. Therefore, it is important that the module provider is in possession of the issuer and the related JWKS endpoint. This way it can be proven that the portal actually signed the JWT. A public key may also be exchanged, although there is a strong preference to use JWKS since applications must implement it to make a Connection with Koppeltaal.
Topics
Last updated
