Portal initiated step-up login_hint specification (caregiver)

If caregivers have HSID unmatched accounts, the same portal initiated step-up flow can step-up unmatched account to matched account by using login_hint. However, caregivers do not always have identification numbers, therefore, this use case uses a different set of identity attributes (this is similar to Personal representative/caregiver (PR/CG)) using a different set of identity attributes for Aikyam Invitation API call).

The only difference is JWE Ciphertext part of Portal Initiated Step-up login_hint specification above. It requires email, full_phone_number, eid (EiMP enterprise ID), instead of identifier claim. The decoded JWS (before encryption) should look like: