HTI Flow
Health Tools Interoperability
Last updated
Health Tools Interoperability
Last updated
HTI is a light-weight solution from GIDS to quickly implement client-to-client launches. In short, the HTI launch is simply a signed JWT with HTI-specific claims that is sent from one client to another. A public key can be used to verify that the JWT comes from a trusted source.
The module provider
uses Token Introspection OR must be able to relate the issuer to its JWKS endpoint.
The HTI launch can be done without an authentication server. Therefore, it is important that the module provider
is in possession of the issuer and the related JWKS endpoint. This way it can be proven that the portal
actually signed the JWT. A public key may also be exchanged, although there is a strong preference to use JWKS since applications must implement it to make a Connection with Koppeltaal.