Australian Digital Health Agency · OAuth Scopes

Australian Digital Health Agency OAuth Scopes

OAuth 2.0 searched

Australian Digital Health Agency publishes 2 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Australian Digital Health Agency API on a user’s behalf.

Tokens are issued from https://api.healthterminologies.gov.au/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

HealthcareAustraliaNational Health SystemFHIRHL7InteroperabilitySMART on FHIRElectronic Health Recorde-PrescribingTerminologyGovernment

Scopes: 2 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://api.healthterminologies.gov.au/oauth2/login

Token URL
https://api.healthterminologies.gov.au/oauth2/token

Flows
authorizationCode

Scopes (2)

Scope	Description	Flows
openid	OpenID Connect authentication for the terminology server.	authorizationCode
profile	Access to basic OpenID Connect profile claims.	authorizationCode

📄 Provider scope reference: https://api.healthterminologies.gov.au/integration/R4/fhir/.well-known/smart-configuration

Source

OAuth Scopes

generated: '2026-07-24'
method: searched
source: well-known/australian-digital-health-agency-smart-configuration.json
docs: https://api.healthterminologies.gov.au/integration/R4/fhir/.well-known/smart-configuration
note: >-
  The NCTS FHIR terminology server authenticates with SMART-on-FHIR OAuth2. Its
  SMART discovery document advertises OpenID Connect scopes only (openid, profile);
  as a read-oriented terminology service it does not expose SMART clinical resource
  scopes. The national record systems (My Health Record, HI Service, e-prescribing)
  use NASH PKI mutual TLS rather than OAuth scopes.
schemes:
  - name: SMART-on-FHIR-OAuth2
    source: well-known/australian-digital-health-agency-smart-configuration.json
    flows:
      - flow: authorizationCode
        authorizationUrl: https://api.healthterminologies.gov.au/oauth2/login
        tokenUrl: https://api.healthterminologies.gov.au/oauth2/token
scopes:
  - scope: openid
    description: OpenID Connect authentication for the terminology server.
    flows: [authorizationCode]
    sources: [well-known/australian-digital-health-agency-smart-configuration.json]
  - scope: profile
    description: Access to basic OpenID Connect profile claims.
    flows: [authorizationCode]
    sources: [well-known/australian-digital-health-agency-smart-configuration.json]