EU Health Data API
1.0.0-ballot - ballot 150

EU Health Data API, published by HL7 Europe. This guide is not an authorized publication; it is the continuous build for version 1.0.0-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/euridice-org/eu-health-data-api/ and changes regularly. See the Directory of published versions

: Health Data API Authorization Server

Active as of 2026-11-05

Raw json | Download

{
  "resourceType" : "ActorDefinition",
  "id" : "eu-authorization-server-eu-api",
  "text" : {
    "status" : "generated",
    "div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: ActorDefinition eu-authorization-server-eu-api</b></p><a name=\"eu-authorization-server-eu-api\"> </a><a name=\"hceu-authorization-server-eu-api\"> </a><table class=\"grid\"><tr><td><b>Actor: EuAuthorizationServerEuApi </b></td><td>Health Data API Authorization Server</td><td>Type: system </td></tr><tr><td colspan=\"3\"/></tr></table></div>"
  },
  "url" : "http://hl7.eu/fhir/health-data-api/ActorDefinition/eu-authorization-server-eu-api",
  "version" : "1.0.0-ballot",
  "name" : "EuAuthorizationServerEuApi",
  "title" : "Health Data API Authorization Server",
  "status" : "active",
  "experimental" : false,
  "date" : "2026-11-05T11:19:50+00:00",
  "publisher" : "HL7 Europe",
  "contact" : [
    {
      "name" : "HL7 Europe",
      "telecom" : [
        {
          "system" : "url",
          "value" : "http://hl7.eu"
        }
      ]
    }
  ],
  "description" : "The Health Data API Authorization Server issues access tokens after applying the authentication and\nauthorization requirements of the selected environment and protocol. When user authentication\nis required, it relies on an acceptable result from the\n[Authentication Service](ActorDefinition-authentication-service-eu-api.html), with which it MAY\nbe grouped. Authentication alone does not establish API access entitlement. Client assertion\nvalidation applies only when the selected flow uses asymmetric client authentication. The\nAuthorization Server remains responsibility-distinct from a Resource Server, including when\nthe two are co-located. This generic role does not by itself claim IHE IUA or SMART conformance.\nThe Health Data API qualifier identifies this IG's role, not a central EU-operated service.\nSee the applicable [IHE IUA Authorization Server](https://profiles.ihe.net/ITI/IUA/index.html#34112-authorization-server)\nor [SMART Authorization Server](ActorDefinition-smart-authorization-server-eu-api.html)\ndefinition and the relevant [Authorization](authorization.html) requirements.",
  "jurisdiction" : [
    {
      "coding" : [
        {
          "system" : "http://unstats.un.org/unsd/methods/m49/m49.htm",
          "code" : "150",
          "display" : "Europe"
        }
      ]
    }
  ],
  "copyright" : "Copyright HL7 Europe. Licensed under Creative Commons public domain (CC0 1.0).",
  "type" : "system"
}