Skip to content

Commit

Permalink
Automated deployment: Tue Dec 19 17:37:47 UTC 2023 9ebe292
Browse files Browse the repository at this point in the history
  • Loading branch information
Kirsten-Hardern-Hippo-Digital committed Dec 19, 2023
1 parent 9745fae commit 69c376f
Show file tree
Hide file tree
Showing 2 changed files with 27 additions and 20 deletions.
2 changes: 1 addition & 1 deletion example-no-consent-content-other/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
<main class="nhsuk-main-wrapper app-main-wrapper" id="maincontent">

<h1>You cannot continue without sharing your information</h1>
<p>[Your service name] needs your NHS login information to verify your identity.</p>
<p>[Service name] needs your NHS login information to verify your identity.</p>
<p>Dynamic content.</p>
<p>If you need medical help, go to <a href="https://111.nhs.uk/">111.nhs.uk</a> or call <a href="tel:111">111</a> or your GP.</p>
<p>Call <a href="tel:999">999</a> if it's a life-threatening emergency.</p>
Expand Down
45 changes: 26 additions & 19 deletions no-consent-guidance/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -521,8 +521,8 @@ <h1 class="app-page-heading">
Sharing a user&#39;s NHS login information with your service
</h1>

<p>For users to access your service they need to agree to share their NHS login information with you. In order for user information to be received by your service, and ID token or autorisation code, containing the user information, must be passed from NHS login to your service. This can only be done with ther user's consent.</p>
<p>If a user does not agree to share their NHS login information, your service should display a clear message telling them what they can do to continue their journey, or that they will be unable to use your service.</p>
<p>For users to access your service they need to agree to share their NHS login information with you. An ID token or authorisation code, containing the user information, must be passed from NHS login to your service. This can only happen with the user's consent.</p>
<p>If a user does not agree to share their NHS login information, your service should display a clear message telling them they can either continue their journey or cannot use your service.</p>
<hr>
<h2 id="journey">User journey asking users to share their NHS login information</h2>
<a href="/nhslogin/images/Guidance-userjourney-consent.png" class="design-example__pop-out" target="_blank" rel="noopener noreferrer">
Expand All @@ -532,7 +532,7 @@ <h2 id="journey">User journey asking users to share their NHS login information<
<img class="nhsuk-image__img" src="/nhslogin/images/Guidance-userjourney-consent.png" alt="Diagram showing the flow that a user goes down from selecting the NHS button to being authorised by NHS login and back to the partner service.">
</div>
<br>
<p>We ask users to agree to share their NHS login information with your service when they use your service to:</p>
<p>We ask users to agree to share their NHS login information with your service when they:</p>
<ul>
<li>register a new level of verification</li>
<li>sign into NHS login for the first time</li>
Expand All @@ -542,18 +542,18 @@ <h3>Consent flow</h3>
<p>Their consent allows the ID token with their information to be securely passed from NHS login to your service.</p>
<h3>No-consent flow</h3>
<p>If a user does not agree to share their NHS login information, they can go back from the confirmation screen to amend their decision. They can then continue to your service.</p>
<p>If the user still does not agree to share their NHS login information, they will be redirected to your service without passing an ID token or authorisation code.</p>
<p>Their information is not passed to your service and you need to display a no-consent error screen.</p>
<p>If the user still does not agree to share their NHS login information, they are redirected to your service without passing an ID token or authorisation code.</p>
<p>Their information is not passed to your service, and you need to display a no-consent error screen.</p>
<p>How the user is able to continue to your website or app depends on how you handle them. For example, you may have a guest process or alternative authentication journey.</p>
<p>The suggested content on the no-consent error screen differs,depending on the type of service you are.</p>
<p>The suggested content on the no-consent error screen differs, depending on if you are:</p>
<ul>
<li>a service that uses Wayfinder</li>
<li>a service that has alternative journeys or processes</li>
<li>any other type of service</li>
</ul>
<div class="nhsuk-inset-text">
<span class="nhsuk-u-visually-hidden">Information: </span>
<p>Though the no-consent error screen is the responsibility of your service, the solution does not require a technically complex implementation and only requires tailored content to adjust user expectations.</p>
<p>Although the no-consent error screen is the responsibility of your service, the solution does not need a complex implementation and only needs tailored content to adjust user expectations.</p>
</div>
<hr>
<h1 id="NHS-login-buttons">Guidance for no-consent error screen content</h1>
Expand Down Expand Up @@ -583,7 +583,10 @@ <h1 id="NHS-login-buttons">Guidance for no-consent error screen content</h1>
<h2>
Services that use Wayfinder
</h2>
<p class="nhsuk-card__description">Use this version of the no-consent error screen content guidance if your website or app uses Wayfinder, such as <a href="" target="_blank">Health Call</a>.</p>
<p class="nhsuk-card__description">Use this version of the no-consent error screen content guidance if your website or app uses Wayfinder, such as Health Call.</p>
<a href="/nhslogin/images/Guidance-example-wayfinder.png" target="_blank" rel="noopener noreferrer">
Open this example in new window
</a>
<hr>
</div>
<div class="nhsuk-grid-column-one-third">
Expand All @@ -599,18 +602,19 @@ <h2>
<div class="nhsuk-details__text nhsuk-grid-row">
<div class="nhsuk-grid-column-full width">
<ul class="nhsuk-inside-box-text" style="max-width:none;">
<li>This version of the no-consent error screen refers to your service as "The service provider". This should remain unchanged. Do not use the name of your service as it may not make sense to the user in their journey.</li>
<li>To align with all other services that use Wayfinder, only use the content provided and do not change it.</li>
<li>This version of the no-consent error screen refers to your service as 'The service provider'.
This should remain unchanged. Do not use the name of your service as it may not make sense to the user in their journey.</li>
<li>To align with other services that use Wayfinder, only use the content provided and do not change it.</li>
<li>To minimise clinical risk, make sure all anchor tags to emergency services are operational and implemented as suggested.</li>
<li>You can use your service font and styling on this page, but it must follow our styling suggestions.</li>
<li>You can use your service font, headers, footers and styling on this page, but it must follow our styling suggestions.</li>
</ul>
<hr>
<h3>How to display content for the no-consent error screen</h3>
<p>Here is an example of the Wayfinder no-consent error page. You can copy the content and code by selecting the HTML tab below this diagram.</p>
<p>You will need to apply your own CSS to the code. You should not add any other content to this screen.</p>
<div class="design-example">
<a href="/nhslogin/images/Guidance-example-wayfinder.png" class="design-example__pop-out" target="_blank" rel="noopener noreferrer">
Open this image in new window
<a href="/nhslogin/example-no-consent-content-wayfinder" class="design-example__pop-out" target="_blank" rel="noopener noreferrer">
Open this example in new window
</a>
<div class="code-embed">
<iframe title="default" src="/nhslogin/example-no-consent-content-wayfinder" class="design-example-frame" id="iFrameResizer0" scrolling="no" style="overflow: hidden; height: 156px;"></iframe>
Expand Down Expand Up @@ -691,7 +695,7 @@ <h3>How to display content for the no-consent error screen</h3>
<h2>
Services that have alternative user verification processes
</h2>
<p class="nhsuk-card__description">Use this version of the no-consent error screen content guidance if your website or app can send obtain the user information for verification in an alternative manner, such as <a href="" target="_blank">111 online</a>.</p>
<p class="nhsuk-card__description">Use this version of the no-consent error screen content guidance if your website or app can get user information for verification in an alternative way, such as 111 online.</p>
</div>
</div>
<hr>
Expand Down Expand Up @@ -738,6 +742,9 @@ <h2>
All other services
</h2>
<p class="nhsuk-card__description">Use this version of the no-consent error screen content guidance if the previous options did not describe your service.</p>
<a href="/nhslogin/images/Guidance-example-other.png" target="_blank" rel="noopener noreferrer">
Open this example in new window
</a>
<hr>
</div>
<div class="nhsuk-grid-column-one-third">
Expand All @@ -753,18 +760,18 @@ <h2>
<div class="nhsuk-details__text nhsuk-grid-row">
<div class="nhsuk-grid-column-full width">
<ul class="nhsuk-inside-box-text" style="max-width:none;">
<li>TIn this version we recommend that you insert the name of your service in the [Your service name] placeholder.</li>
<li>In this version we recommend that you insert the name of your service in the [Service name] placeholder.</li>
<li>The "dynamic content" placeholder text indicates variable text where you may insert your own copy.</li>
<li>To minimise clinical risk, make sure all anchor tags to emergency services are operational and implemented as suggested.</li>
<li>You can use your service font and styling on this page, but it must follow our styling suggestions.</li>
<li>You can use your service font, headers, footers and styling on this page, but it must follow our styling suggestions.</li>
</ul>
<hr>
<h3>How to display content for the no-consent error screen</h3>
<p>Here is an example of the no-consent error page. You can copy the content and code by selecting the HTML tab below this diagram.</p>
<p>You will need to apply your own CSS to the code.</p>
<div class="design-example">
<a href="/nhslogin/images/Guidance-example-other.png" class="design-example__pop-out" target="_blank" rel="noopener noreferrer">
Open this image in new window
<a href="/nhslogin/example-no-consent-content-other" class="design-example__pop-out" target="_blank" rel="noopener noreferrer">
Open this example in new window
</a>
<div class="code-embed">
<iframe title="default" src="/nhslogin/example-no-consent-content-other" class="design-example-frame" id="iFrameResizer1" scrolling="no" style="overflow: hidden; height: 156px;"></iframe>
Expand All @@ -788,7 +795,7 @@ <h3>How to display content for the no-consent error screen</h3>
<div class="app-code-snippet__container">
<a class="app-link--copy" href="javascript:void(0);" aria-live="assertive">Copy code</a>
<pre><code class=""><span class="hljs-tag">&lt;h1&gt;</span>You cannot continue without sharing your information <span class="hljs-tag">&lt;/h1&gt;</span>
<span class="hljs-tag">&lt;p&gt;</span>[Your service name] needs your NHS login information to verify your identity.<span class="hljs-tag">&lt;/p&gt;</span>
<span class="hljs-tag">&lt;p&gt;</span>[Service name] needs your NHS login information to verify your identity.<span class="hljs-tag">&lt;/p&gt;</span>
<span class="hljs-tag">&lt;p&gt;</span>Dynamic content.<span class="hljs-tag">&lt;/p&gt;</span>
<span class="hljs-tag">&lt;p&gt;</span>If you need medical help, go to <span class="hljs-tag">&lt;a <span class="hljs-attr">href</span>=<span class="hljs-string">&quot;https://111.nhs.uk/&quot;</span>&gt;</span>111.nhs.uk<span class="hljs-tag">&lt;/a&gt;</span> or call<span class="hljs-tag">&lt;a <span class="hljs-attr">href</span>=<span class="hljs-string">&quot;tel:111</span><span class="hljs-string">&quot;</span>&gt;</span>111<span class="hljs-tag">&lt;/a&gt;</span> or your GP.<span class="hljs-tag">&lt;/p&gt;</span>
<span class="hljs-tag">&lt;p&gt;</span>Call <span class="hljs-tag">&lt;a <span class="hljs-attr">href</span>=<span class="hljs-string">&quot;tel:999</span><span class="hljs-string">&quot;</span>&gt;</span>999<span class="hljs-tag">&lt;/a&gt;</span> if it's a life-threatening emergency.<span class="hljs-tag">&lt;/p&gt;</span>
Expand Down

0 comments on commit 69c376f

Please sign in to comment.