Onboarding with Prior Authorization API

Prior Authorization Security and Authorization

Our APIs are compliant with the conventions defined in the OAuth 2.0 specification. Optum uses OAuth2 specification to create a secure connection with our API users, which requires a Bearer authorization token to obtain access. We will provide you a set of unique credentials specific to an API environment and to your organization to generate a Bearer token to securely access our APIs.

Access control through web tokens

All Optum Enterprise APIs on this platform are secured using JSON Web Tokens (JWT).

Security through TLS

All APIs calls are encrypted over HTTPS. Our APIs support connections using Transport Layer Security (TLS) version 1.2 or later.

Bearer token through OAuth2

Optum uses OAuth 2.0 specification to create a secure connection with our API users, which requires a bearer authorization token to obtain access.

📘

UNIQUE CREDENTIALS

  • client_id: your client_id provided by Optum
  • client_secret: your client_secret provided by Optum

API environments

Sandbox environment

Request for a sandbox environment account to familiarize yourself with our APIs before signing a contract to integrate our APIs for real-time API testing in your production environment.

  • Sandbox URL: https://sandbox-apigw.optum.com/rcm/prior-authorization/v1
    • Base URL: sandbox-apigw.optum.com
    • Endpoint: /apip/auth/v2/token

Subscribe to Production environment

After successful sandbox testing, you can integrate our APIs for real-time usage in your production environment. To contract with us for a production environment, contact your Optum representative.

  1. To request for a production environment account, reach out to sales @ Prior Autorization team and for the following:
  • To either start a new contract
  • To have your contract-related questions answered
  • If you have an existing account and want to add additional products to it
  • Add/remove a product

Prerequisites to use our APIs

Our APIs are private and secure, and require unique credentials to gain access. You can sign up and request for API credentials.

  • Production URL: https://apigw.optum.com/rcm/prior-authorization/v1
    • Base URL: apigw.optum.com
    • Endpoint: /apip/auth/v2/token

The /apip/auth/v2/token/ endpoint generates a Bearer token that must be transmitted with the API requests.

📘

BEARER TOKEN LIFESPAN

The lifespan of a Bearer token is one hour (3600 seconds) for both sandbox and production environments.

We recommend automating transactions to use the tokens generated over the token lifespan. Obtaining tokens for each transaction is less efficient and does not improve the security criteria for any transactions.



📘

NEED HELP?

If you have a specific question and need a separate call:

or

  • send us a message Here

or

or