---
title: "Begin browser authorization and choose fictional staff/role"
method: GET
path: "/cis2/authorize"
tags: ["Staff Identity"]
---

# Begin browser authorization and choose fictional staff/role

`GET /cis2/authorize`

## Request

- Base URL: `https://sim.animahealth.com`
- URL: `https://sim.animahealth.com/cis2/authorize`
- Auth: none required

Use a browser for consent, not a background HTTP client. Sets cis2_interaction cookie and displays CSRF-protected staff selection. /cis2/ provides a working demonstration; /cis2/callback completes it.

## Query parameters

- `client_id` string, required
- `redirect_uri` string, uri, required
- `response_type` 'code', required
- `scope` string
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `state` string, required
- `nonce` string, required
- `signin_method` 'smartcard' | 'security-key'

## Response `200`

HTML consent form; open in a browser to continue

## Other responses

- `400`: Invalid input or unsupported workflow
- `401`: Missing or invalid credentials
- `403`: Scope, origin or operator restriction
- `404`: Unknown resource
- `409`: Stale version, invalid transition or unavailable capacity
- `413`: Request exceeds this operation's body-size limit
- `429`: Deployment has reached its 5,000-team capacity
- `500`: Internal simulation error

---

[API](https://skmtc.dev/animahealth/apis/nhs-sim-api.md) - [All operations](https://skmtc.dev/animahealth/apis/nhs-sim-api/llms.txt) - [OpenAPI document](https://skmtc.dev/animahealth/apis/nhs-sim-api/revisions/c7803d7a3e58?raw)