EU Health Data API, published by HL7 Europe. This guide is not an authorized publication; it is the continuous build for version 1.0.0-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/euridice-org/eu-health-data-api/ and changes regularly. See the Directory of published versions

• Narrative Content
• XML
• JSON
• TTL

: Health Data API Authorization Server

Raw xml | Download

<ActorDefinition xmlns="http://hl7.org/fhir">
  <id value="eu-authorization-server-eu-api"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: ActorDefinition eu-authorization-server-eu-api</b></p><a name="eu-authorization-server-eu-api"> </a><a name="hceu-authorization-server-eu-api"> </a><table class="grid"><tr><td><b>Actor: EuAuthorizationServerEuApi </b></td><td>Health Data API Authorization Server</td><td>Type: system </td></tr><tr><td colspan="3"/></tr></table></div>
  </text>
  <url
       value="http://hl7.eu/fhir/health-data-api/ActorDefinition/eu-authorization-server-eu-api"/>
  <version value="1.0.0-ballot"/>
  <name value="EuAuthorizationServerEuApi"/>
  <title value="Health Data API Authorization Server"/>
  <status value="active"/>
  <experimental value="false"/>
  <date value="2026-11-05T11:19:50+00:00"/>
  <publisher value="HL7 Europe"/>
  <contact>
    <name value="HL7 Europe"/>
    <telecom>
      <system value="url"/>
      <value value="http://hl7.eu"/>
    </telecom>
  </contact>
  <description
               value="The Health Data API Authorization Server issues access tokens after applying the authentication and
authorization requirements of the selected environment and protocol. When user authentication
is required, it relies on an acceptable result from the
[Authentication Service](ActorDefinition-authentication-service-eu-api.html), with which it MAY
be grouped. Authentication alone does not establish API access entitlement. Client assertion
validation applies only when the selected flow uses asymmetric client authentication. The
Authorization Server remains responsibility-distinct from a Resource Server, including when
the two are co-located. This generic role does not by itself claim IHE IUA or SMART conformance.
The Health Data API qualifier identifies this IG's role, not a central EU-operated service.
See the applicable [IHE IUA Authorization Server](https://profiles.ihe.net/ITI/IUA/index.html#34112-authorization-server)
or [SMART Authorization Server](ActorDefinition-smart-authorization-server-eu-api.html)
definition and the relevant [Authorization](authorization.html) requirements."/>
  <jurisdiction>
    <coding>
      <system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/>
      <code value="150"/>
      <display value="Europe"/>
    </coding>
  </jurisdiction>
  <copyright
             value="Copyright HL7 Europe. Licensed under Creative Commons public domain (CC0 1.0)."/>
  <type value="system"/>
</ActorDefinition>