Jessica, Would this additional background help with your question?
In UDAP, the Redirect URI is used during OAuth 2.0 / OpenID Connect authorization flows to tell the Authorization Server
where to send the user (or authorization response) back to after authentication and authorization are completed.
More specifically:
-
The client application (such as a SMART app, patient app, provider portal, or backend service using interactive authorization) registers one or more Redirect URIs with the UDAP-enabled Authorization Server.
-
During the authorization request, the client includes a
redirect_uri parameter.
-
After login/consent, the Authorization Server redirects the browser to that URI and includes:
-
an authorization code,
-
tokens,
-
or an error response,
depending on the OAuth flow being used.
Regards,
Lisa