Onboarding with Prior Authorization API
Prior Authorization Security and Authorization
Our APIs are compliant with the conventions defined in the OAuth 2.0 specification. Optum uses OAuth2 specification to create a secure connection with our API users, which requires a Bearer authorization token to obtain access. We will provide you a set of unique credentials specific to an API environment and to your organization to generate a Bearer token to securely access our APIs.
Access control through web tokens
All Optum Enterprise APIs on this platform are secured using JSON Web Tokens (JWT).
Security through TLS
All APIs calls are encrypted over HTTPS. Our APIs support connections using Transport Layer Security (TLS) version 1.2 or later.
Bearer token through OAuth2
Optum uses OAuth 2.0 specification to create a secure connection with our API users, which requires a bearer authorization token to obtain access.
UNIQUE CREDENTIALS
client_id: your client_id provided by Optumclient_secret: your client_secret provided by Optum
API environments
Sandbox environment
Request for a sandbox environment account to familiarize yourself with our APIs before signing a contract to integrate our APIs for real-time API testing in your production environment.
- Sandbox URL:
https://sandbox-apigw.optum.com/rcm/prior-authorization/v1- Base URL:
sandbox-apigw.optum.com - Endpoint:
/apip/auth/v2/token
- Base URL:
Subscribe to Production environment
After successful sandbox testing, you can integrate our APIs for real-time usage in your production environment. To contract with us for a production environment, contact your Optum representative.
- To request for a production environment account, reach out to sales @ Prior Autorization team and for the following:
- To either start a new contract
- To have your contract-related questions answered
- If you have an existing account and want to add additional products to it
- Add/remove a product
Prerequisites to use our APIs
Our APIs are private and secure, and require unique credentials to gain access. You can sign up and request for API credentials.
- Production URL:
https://apigw.optum.com/rcm/prior-authorization/v1- Base URL:
apigw.optum.com - Endpoint:
/apip/auth/v2/token
- Base URL:
The /apip/auth/v2/token/ endpoint generates a Bearer token that must be transmitted with the API requests.
BEARER TOKEN LIFESPAN
The lifespan of a Bearer token is one hour (3600 seconds) for both sandbox and production environments.
We recommend automating transactions to use the tokens generated over the token lifespan. Obtaining tokens for each transaction is less efficient and does not improve the security criteria for any transactions.
NEED HELP?
If you have a specific question and need a separate call:
- reach out to sales @ Prior Autorization team
or
- send us a message Here
or
- for other modes of communication, review our support and escalation guide
or
- visit our interactive developer community and sign up to access several learning resources
Updated about 17 hours ago