# Member SSO
URL: https://developers.vsee.io/use-cases/mobile-sso

Get an SSO token and inject it into your mobile app. Your backend calls SSO, receives the token, and passes it to the mobile app to open a WebView.

## Step 1: Obtain patient access token
POST /users/sso (auth: API Key + Secret)
Your backend calls SSO with ?fields=vsee. Response includes the SSO token and VSee credentials.
headers:
- X-ApiKey (required) — API Key
- X-ApiSecret (required) — API Secret
- X-AccountCode (required) — Account code
queryParams:
- fields — Set to 'vsee' to include VSee ID and token
bodyFields:
- first_name (required) — Patient's first name
- last_name (required) — Patient's last name
- type (required) — User type: 200 = Patient
- email — Patient email address
- code (required) — Unique patient identifier on your end (max 128 chars)

## Step 2: Pass token to mobile app
Send the SSO token (data.token.token) from the response to your mobile app via your existing auth flow or internal API.

## Step 3: Open WebView with token
Redirect: https://{your_clinic}.vseepreview.com/auth?sso_token={sso_token}&next=/u/{room_slug}
In the mobile app, open a WebView pointing to the auth URL.