generated: '2026-09-04'
method: probed
source: >-
  https://app.vytalizehealth.com/static/js/main.2d65df30.js (partner portal bundle) and
  https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/v2.0/.well-known/openid-configuration
scope_of_this_record: >-
  THIS IS NOT A DOCUMENTED API AUTHENTICATION PROFILE. Vytalize Health publishes no API reference and
  no authentication documentation. What is recorded below is the identity layer of its partner web
  portal, observed by reading the portal's own public JavaScript bundle and then fetching the
  resulting (publicly served) OpenID Connect discovery document. It describes how a human practice
  partner signs in to app.vytalizehealth.com, not how a machine client would authenticate to an API.
  No `Authentication` pointer is wired into apis.yml for this file, because doing so would credit the
  company with documented API authentication it does not publish.
summary:
  types:
  - openIdConnect
  api_key_in: []
  oauth2_flows:
  - authorizationCode
  documented_by_provider: false
schemes:
- name: microsoft-entra-id
  type: openIdConnect
  openIdConnectUrl: https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/v2.0/.well-known/openid-configuration
  provider: Microsoft Entra ID (Azure AD), single-tenant
  tenant_id: f44e254b-1755-4e18-b889-77701573aa22
  issuer: https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/v2.0
  authorization_endpoint: https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/oauth2/v2.0/authorize
  token_endpoint: https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/oauth2/v2.0/token
  jwks_uri: https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/discovery/v2.0/keys
  scopes_supported:
  - openid
  - profile
  - email
  - offline_access
  client_library: '@azure/msal-browser (MSAL.js), bundled in the portal SPA'
  applies_to: https://app.vytalizehealth.com/
  sources:
  - https://app.vytalizehealth.com/static/js/main.2d65df30.js
x-evidence:
- url: https://login.microsoftonline.com/f44e254b-1755-4e18-b889-77701573aa22/v2.0/.well-known/openid-configuration
  status: 200
  content_type: application/json
- url: https://app.vytalizehealth.com/
  status: 200
  note: create-react-app shell titled "Vytalize Health - Login"