Pairwise identifier

When Client application is an external application which does not belong to UHG, Aikyam Identity Platform has an option to provide Pairwise identifier as a “sub” claim of ID token, instead of HSID UUID. This assures to prevent from external applications to correlate user’s data without involving HSID and/or UHG owned applications.

Pairwise Identifier follows OIDC specification, and it is configured by Aikyam Admin UI, which uses OIDC Dynamic Client Registration specification. From external application integration perspective, there is nothing to do, however, external application owner needs to be aware that “sub” claim of ID token is not a HSID UUID, therefore “sub” claim value cannot be used for UHG-owned data look up APIs if APIs require HSID UUID. “sub” claim value could be used only for differentiating an individual in this specific external application.