Getting started

This guide helps you set up an effective integration from the start: aligned expectations, clear responsibilities, and no surprises. No prior OAuth experience is required; concepts are introduced step by step.

The 3 actors in an integration

Every integration involves three distinct roles:

Who	Role
GipoNext	Provides APIs, manages technical onboarding, approves OAuth applications
System Integrator (you)	Develops, tests, and maintains the integration
Medical centre (your client)	Defines objectives, authorizes access, introduces the integrator to GipoNext

💡 Key responsibilities

GipoNext provides platform and targeted support. The integration project (development, testing, go-live, maintenance) is entirely the integrator's responsibility.

Two separate identities: app and user

API access requires two distinct things:

Identity	What it is	How to obtain
Application (client_id + client_secret)	Identifies your software	OAuth registration on account.gipo.it
User (interactive login)	Determines tenant and permissions	End-user login on account.gipo.it

Application credentials do not grant data access; they only identify the software. Data access always depends on the user who logs in.

For a deeper understanding of this separation and why it matters, see OAuth flows and tokens.

What to do in practice

Step 1 — Accreditation

The medical centre introduces the integrator to GipoNext, which activates the developer account and approves the OAuth application registration.

Full operational detail is in Accreditation process.

Step 2 — Implement OAuth

Use one of the supported flows:

• Authorization Code (recommended) — for apps with browser or full UI (web, desktop, mobile).
• Device Code — for devices without a browser (user authorizes from another device).

Details: OAuth flows and tokens.

Step 3 — Call the APIs

• Base URL: https://api.giponext.it/v2/tenants/{tenantId}/...
• Get tenantId from the UserInfo endpoint after authentication.
• Include the Bearer token in the Authorization header of every request.

GET https://api.giponext.it/v2/tenants/{tenantId}/patients
Authorization: Bearer <access_token>
Accept: application/json

For the full list of endpoints and data models: Swagger UI and API reference.

Next steps

• Accreditation process — how to obtain developer account and OAuth credentials
• Register your application — application registration details
• Entities and operations — available resources, operations, and required OAuth scopes
• FAQ — quick answers to common questions