Skip to main content

Create ABHA - Aadhaar IRIS

Creates an ABHA number by authenticating the Aadhaar holder's IRIS. The PID block is captured with a UIDAI-registered IRIS RD device.

POST/abha/api/v3/enrollment/enrol/byAadhaar

The response contains the ABHA profile and tokens.token (user X-token).

Endpoint: POST /abha/api/v3/enrollment/enrol/byAadhaar

Flow: Create ABHA - IRIS - step 1 of 7

  • Previous: none (first call of this flow)
  • Next: After ABHA creation - send OTP to verify mobile (optional)

Headers (plus Authorization: Bearer <gateway token>):

Header Required Description
TIMESTAMP yes Current UTC timestamp in ISO-8601 format.
REQUEST-ID yes Unique UUID for every request.
Benefit-Name no Applicable for user who is enrolling via Benefit Program.

Request body for this use case:

Field Value / Type Required Description
authData object yes Authentication payload for this use case.
authData.authMethods ["iris"] yes Authentication method used in this step.
authData.iris object yes IRIS authentication block.
authData.iris.aadhaar string yes Aadhaar number, RSA-encrypted.
authData.iris.pid string yes Base64 PID block captured from a registered IRIS RD device.
authData.iris.mobile string no Mobile number to be linked with the ABHA (plain, 10 digits).
consent object yes Consent captured from the user for ABHA enrolment.
consent.code string yes Consent code. Use ABHA-enrollment.
consent.version string yes Consent version. Use 1.4.

Responses

200

Success: Create ABHA via IRIS - Positive Flow

messagestring
tokensobject
tokens.tokenstring
tokens.expiresIninteger
tokens.refreshTokenstring
tokens.refreshExpiresIninteger
ABHAProfileobject
ABHAProfile.firstNamestring
ABHAProfile.middleNamestring
ABHAProfile.lastNamestring
ABHAProfile.dobstring
ABHAProfile.genderstring
ABHAProfile.mobilestring
ABHAProfile.phrAddressstring[]
ABHAProfile.districtCodestring
ABHAProfile.stateCodestring
ABHAProfile.abhaTypestring
ABHAProfile.stateNamestring
ABHAProfile.districtNamestring
ABHAProfile.ABHANumberstring
ABHAProfile.abhaStatusstring
isNewboolean
400

Bad Request (request validation failed).

Error codes for this module

txnIdstring
timestampstring
401

Unauthorized (invalid / expired gateway token, X-token or benefit access): Invalid Benefit Name (generic)

Everything returns 401

messagestring
timestampstring
422

Unprocessable Entity (business rule or UIDAI failure).

Error codes for this module

errorobject
error.codestring
error.messagestring
500

Internal Server Error.

Error codes for this module