Authentication Methods for VA Health and Veteran Verification APIs

[VA Lighthouse API Support for Developers]

VA Lighthouse uses the OpenID Connect standard to allow Veterans to authorize third-party applications to access data on their behalf. The Health and Veteran Verification APIs use this protocol.  This enables Veterans to authorize access, securely manage, and interact with their health care and benefits information through third-party apps.  View the video to see how Veterans will authorize access and sign in to mobile apps using the VA-approved authentication methods: My HealtheVet, ID.me and DS Logon.   

[Ryan Link (VA Lighthouse)]

Note that PKCE authentication is now supported for single-page apps.  You can obtain a key for sandbox development here.

For more information please visit the authorization flow documentation.