SSF Streams
Shared Signals Framework (RFC 9493) — real-time CAEP security event delivery.
Continuous Access Evaluation (CAEP)
When a user's session is revoked, credentials change, or access is suspended, subscribers receive signed Security Event Tokens (SETs) within seconds — enabling immediate enforcement without waiting for token expiry.
NHS Spine SIEM
https://siem.spine.nhs.uk/ssf/receiver · 10 Jul 2026
Trust PAS Integration
Poll-based delivery · 11 Jul 2026
Audit Compliance (paused)
https://compliance.trust.nhs.uk/events · 5 Jul 2026
Push Delivery
AuthHub POSTs signed SET JWTs to your endpoint in real-time. Content-Type: application/secevent+jwt. Uses the same retry/circuit-breaker infrastructure as webhooks.
Poll Delivery
Your service polls AuthHub for pending SETs (RFC 8936). Combined poll+acknowledge in a single POST request. At-least-once delivery with 60s visibility timeout.