Healthcare

Patient login for telemedicine and digital health

One high-assurance patient login instead of one eID integration per country.

Use case
Authentication
Wallet data
PID
Authbound capability
Identity Verification
Flow
Verify
What changes

Before and after the wallet

Today

  1. Pick a national scheme
  2. Per-country integration
  3. Login
  4. The patient session

With the EUDI Wallet

  1. Wallet login
  2. Authbound verifies
  3. Verified subject
  4. The patient session

The wallet changes how the evidence is collected. The step at the end stays yours.

The problem

Why this is worth changing

For the business
Each new country means another national eID contract and integration before the first patient.
For the user
Patients from abroad often cannot log in with any scheme the service supports.
For operations
Several identity providers mean several outage patterns and support paths to maintain.

Why the wallet helps

The wallet is one high-assurance mechanism recognised across every member state. A single integration replaces the per-country stack and authenticates a patient from anywhere in the EU at the same level. Selective disclosure also means you can authenticate somebody without collecting attributes you have no clinical reason to hold.

  • One integration instead of one per member state
  • Patients from other countries authenticate without a workaround
  • Request only what is clinically necessary, which is the GDPR position anyway
User journey

What actually happens

  1. 01

    You request specific attributes

  2. 02

    The user gets the request by QR or deep link

  3. 03

    The wallet shows exactly what is asked

  4. 04

    The user approves on their device

  5. 05

    The wallet presents the signed credential

  6. 06

    Authbound verifies the presentation

  7. 07

    Your backend receives a structured result

  8. 08

    Your existing workflow continues

How it works

Three steps with Authbound

  1. Step 01

    Add wallet login

    Put it beside your existing national schemes and route holders through it.

  2. Step 02

    Authenticate on signed attributes

    The patient approves in their wallet and you receive verified attributes bound to their device.

  3. Step 03

    Bind the session

    Your session carries the verified subject, so record access rests on a high assurance identity.

Technical flow

  1. Your application
  2. Authbound API
  3. Wallet request
  4. Presentation
  5. Trust and revocation checks
  6. Your backend
Technical details
const verification = await authbound.verifications.create({
  policyId: 'pol_…',      // the claims this flow requests
  customerUserRef: user.id,
});

// Your webhook then receives verification.completed
// with the verified result and its audit record.
  • Request: an OpenID4VP presentation request built from your policy.
  • Hand-off: QR code on desktop, deep link on mobile.
  • Checks: issuer against the EU trust lists, status list revocation, device binding.
  • Result: structured claims plus an audit record, delivered by webhook.
Who does what

What Authbound handles, what you handle

Authbound handles

  • The wallet request, with QR on desktop and a deep link on mobile
  • Verifying the presentation the wallet returns
  • Checking the issuer against the EU trust lists
  • Revocation and device binding checks
  • A structured result delivered to your backend
  • An audit record of every verification

Your application handles

  • Choosing which attributes the flow requests
  • Your business logic and account creation
  • The patient session
  • Risk and fraud decisions
  • How long you keep the result
  • A path for users without a wallet
What's involved

Credentials, standards and rules

Wallet presents

  • PID

Regulatory context

eIDAS 2.0 high assurance level, GDPR Article 9 special category data

Access to health records requires high-assurance authentication, and eIDAS 2.0 places wallet authentication at level of assurance high. Health data is special category data under GDPR Article 9, so request only what the clinical purpose needs. Clinical consent and record access rules remain yours.

Tervion Etäklinikka demo
Live demo

See the complete flow in Tervion Etäklinikka

A telemedicine login surface that uses the EUDI Wallet instead of bank-ID sprawl.

What it asks the wallet for

  • given_name
  • family_name
  • kela_card_number

What the business gets back

Dr. Mäkelä
Video appointment
Prescription renewals
2 pending
Care records
Locked to you
Open the Tervion Etäklinikka demo

Tervion Etäklinikka is a fictional company built by Authbound. The wallet integration in it uses the real Authbound SDK.

Questions

What buyers ask

Is this strong enough for health records?

eIDAS 2.0 places wallet authentication at the high assurance level, which is the tier national health services already require for record access. Device binding and holder consent are part of the protocol rather than bolted on afterwards.

Can we keep our national eID login?

Yes, and you should during the transition. Run wallet login as an extra option and move traffic across as coverage grows in each market.

What about health-specific identifiers?

Sector credentials such as a national insurance or health card number can be requested alongside identity attributes where the issuer supports them, so the login can carry the entitlement your clinical system needs.

What does our backend receive?

A verified subject with the identity attributes you requested, bound to the patient’s device, plus a verification ID you can tie to the session.

What happens if a patient has no wallet?

They keep using your current login. Run the wallet as an extra option and move traffic over as coverage grows.

Does it work for patients from other member states?

Yes. One integration accepts wallets from every member state at the same assurance level, which is the main reason to add it.

How do we recognise a returning patient?

Match on the verified attributes you are allowed to use, or on a pseudonymous identifier where you do not need full identity.

Can someone log in on behalf of a child or relative?

Representation rules are national and only partly covered by wallets today. Keep your existing proxy process for those cases.

When can we rely on it?

Every member state has to offer a wallet by 24 December 2026. Private services that are legally or contractually required to use strong user authentication have to accept it from December 2027 when the user asks. Health services that already require strong authentication fall inside that acceptance duty.

What do we build ourselves?

The login button, the session handling after a verified result, and your record access rules. The wallet protocol and trust checks sit with Authbound.

Next step

Have a different wallet use case in mind?

Tell us what you are trying to build. We will map the user journey, the credentials and the wallet interaction to an implementation.