---
title: "Login"
method: POST
path: "/api/v1/auth/login"
tags: ["/api/v1/auth"]
---

# Login

`POST /api/v1/auth/login`

Authenticates a registered provider and returns a Suki access token (`suki_token`). Use that token as `sdp_suki_token` on all subsequent API calls. Tokens expire after one hour.

## Request body

- ControllersAuthenticationRequest — Partner credentials from onboarding. Bearer partners and Single Auth Token authentication must also include `provider_id`.
  - `partner_id` string, required — Unique identifier for the partner. This will be shared securely by Suki to the partner through a separate partner registration process.
  - `partner_token` string, required — JWT token issued by trusted authorization server. The token must include Provider Email.
  - `provider_id` string — **Optional** for standard partners. **Required** for: - **Bearer authentication.** Send `provider_id` so Suki can identify the provider during Login or Register. - **Single Auth Token authentication.** Send `provider_id` so Suki can identify the clinician during Login or Register.

## Response `200`

Request succeeded.

- ControllersAuthenticationResponse — Suki access token returned after successful Login.
  - `suki_token` string — JWT access token for the authenticated provider. Pass this value as `sdp_suki_token` on subsequent requests. Expires after one hour.

## Other responses

- `401` — Unauthorized. The Suki access token is missing, expired, or invalid.
- `403` — Forbidden. The authenticated user cannot access this resource.
- `404` — Not found. The session, encounter, or resource ID does not exist.
- `500` — Internal server error.

---

[API](https://skmtc.dev/suki/apis/suki-developer-platform.md) · [All operations](https://skmtc.dev/suki/apis/suki-developer-platform/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/suki/suki-developer-platform/revisions/5f420a18fb68/schema)