Switching from using a single tenant to multi tenant HelseID client towards SFM
When an organization already exist in SFM with Single tenant, the SFM-id may be reused as a Journal-id when switching to Multitenant. The new multit tenant token will now point to the initial instance and you will be able to continue to access all the existing data (instead of creating a new instance).
Here is an example of a multi tenancy token that provides access to the instance created initially:
{
"iss": "https://helseid-sts.test.nhn.no",
"nbf": 1716473563,
"iat": 1716473563,
"exp": 1716477163,
"aud": "e-helse:sfm.api",
"scope": [
"openid",
"profile",
"helseid://scopes/identity/pid",
"helseid://scopes/identity/security_level",
"helseid://scopes/hpr/hpr_number",
"helseid://scopes/identity/assurance_level",
"e-helse:sfm.api/sfm.api"
],
"amr": [
"pwd"
],
"client_id": "8cd7c619-92db-4d55-89e2-383b75efc758",
"client_amr": "private_key_jwt",
"helseid://claims/client/claims/orgnr_parent": "917897468",
"nhn:sfm:journal-id": "a99abfb4-2bea-4e0a-bb03-38e37febbd2c",
"sub": "tzto6gPhyTQw2bR/Wl0kgF/mTH+jdQoUBvaYSObfmlQ=",
"auth_time": 1716473563,
"idp": "testidp-oidc",
"helseid://claims/identity/pid": "17056600574",
"helseid://claims/identity/security_level": "4",
"helseid://claims/identity/assurance_level": "high",
"helseid://claims/hpr/hpr_number": "431001110",
"oldsub": "n57qJQXiVg8sRZRurRDMKiIm6LnWrSzENEcmOgYL/MI=",
"helseid://claims/client/amr": "rsa_private_key",
"helseid://claims/client/claims/orgnr_supplier": "994598759",
"e-helse:sfm.api/client/claims/sfm-id": "ce75db36-c57b-4592-9d47-5dfae8a34340",
"helseid://claims/client/client_tenancy": "multi-tenant",
"sid": "9E10C7DFEDC83C399DDBCD03B0907DBF",
"jti": "6745AAAE3691417B0139C645BA37F7F6"
}
Note that SFM-id have no meaning in this case