Federated Authentication and Authorization for Regional Users

Upon client initiation of an OIDC Authorization Code Flow for a regional user, federation is performed as shown below.

Open

Federation of Authentication and Authorization for Regional Users (return of OIDC Tokens and use of eHealth Infrastructure omitted)

The sequence diagram described for clinicians Guide; Client Application Login and Logout to eHealth Infrastructure | Clinical logins explains the order in which the OIDC Authorization Code Flow is redirected to a series of OIOSAML-based AuthNRequest and AuthNResponse.