Booking

Booking hands a participant from the app to an outside booking service without sharing anything clinical.

1. The participant opens a booking (a booking item on the home header button or in Settings, or a webSso tab in Explore). The app asks the platform for a hand-off (createBookingHandoff): a one-time, short-lived token and the service's address, both from the tenant's configuration.
2. The service opens with the token, and redeems it from its own server with an API key whose role holds booking.redeem (resolveUserByToken). It gets back the participant's context for that one booking.
3. Afterwards the service can tag the participant by its own tag ids (see Tags), which a journey can then act on.

A token works once, for the participant it was made for, within its short life.