Authorizing application access to the API is the responsibility of each Patient First Patient Portal participant. Authorization is granted by the 'Settings' dialog within a participant's account under the 'Authorize API's' setting. The user must check the 'Allow 3rd party API's to access your medical records' block AND click the 'UPDATE' button..