General overview

1. What is HSID Aikyam EDA?
   EDA (Enterprise Digital Authentication) is a new version of the Aikyam Identity Platform that provides an improved authentication and registration user experience, together with security enhancements. It uses OpenID Connect (OIDC) 1.0 as a simple identity layer on top of the OAuth 2.0 protocol.
   Reference : Objective
2. What are the available environments for integration?
   HSID offers two environments:

   • Non-production: https://nonprod.identity.healthsafe-id.com/
   • Production: https://identity.healthsafe-id.com/
   Reference : Environment domains for integration
3. Where can I find the OpenID Connect configuration?
   The well-known configuration URL for non-production is: https://nonprod.identity.healthsafe-id.com/.well-known/openid-configuration.This endpoint provides all OIDC endpoints and supported features.
   Reference : OpenID Connect configurations

Account types & registration

1. What are the two types of HSID accounts?
   • Matched Account: Has an association with one EiMP Golden Record (GR). Used when portals need to authorize users based on EiMP identity data.
   • Unmatched Account: Has no association with any EiMP GR. Used when portals don't need authorization or as a temporary state before conversion to matched.
   Reference : HSID account types
2. What are the three HSID registration configuration types?
   • Matched registration: Asks for EiMP GR identifier and registers a matched account.
   • Unmatched registration: Doesn't ask for EiMP GR identifier and registers an unmatched account.
   • Hybrid registration: Asks for EiMP GR identifier but allows users to skip and register as unmatched.
   Reference : HSID registration portal / Application configuration types
3. How do I initiate a registration flow instead of login?
   Include prompt=create in the OIDC authorization request URL to direct users to the registration page instead of login.
   Reference : Registration
4. What phone number and OTP can I use for testing in non-prod?
   Use the "Magic Phone" number and "Magic Phone OTP" in non-production to avoid using real phones for testing. These values allow multiple account registrations without unique phone numbers.
   Reference : Non-prod registration test tips