Public onboarding
GP Practice and Pharmacy Registration
This page sets out the expected route for a GP practice or pharmacy joining the Medication Shortage Hub.
Registration URL
Live public route: https://shortage.prosperhealthcare.co.uk/register.php.
Local testing may use http://localhost/register.php or the physical application route
/NHSShortages/website/medication-hub/register.php. AWS should use the clean shortage-host URL above.
Process
- The applicant selects GP practice or pharmacy, chooses their organisation from the directory, selects the standard public role, and submits their individual work email.
- The account is created inactive with a time-limited approval record. The applicant cannot use the portal until approval is completed.
- If the applicant email is
nhs.netor matches the organisation-approved email domain, the approval request goes to the organisation approval route. - If the applicant email does not match the policy, the request is held for Prosper manual review rather than sent for direct organisation approval.
- Once approved, the user signs in and completes the required authentication checks for their role.
Email Rules
- Applicants must use their own individual
@nhs.netemail. Shared mailbox accounts such asreception@,admin@,info@,pharmacy@, orprescriptions@cannot be used as personal login accounts. Controlled UAT may useyourname+shortage-uat-20260707@gmail.com. - The organisation preferred email is the approval destination held in
organisations.Email. It should be a controlled practice, pharmacy, or approved organisation mailbox. - If
organisations.Emailis missing, an activeorganisation_contactsapproval email is used as the fallback. - Personal consumer domains such as Gmail, Outlook, Hotmail, Yahoo, iCloud, and Proton are held for Prosper review.
Anti-Fake Profile Controls
- Only allowlisted public GP and pharmacy roles are exposed on the registration form.
- The applicant must select an existing organisation record rather than typing a free-text organisation profile.
- New registrations remain inactive until approved.
- Prosper receives an operational copy for every pending registration and can monitor pending, approved, expired, and domain-held requests in the admin queue.
- If approval has not happened after 48 hours, Prosper can run the pending-registration reminder process to notify operators again.
Support Path
If the organisation approval contact is wrong, missing, or stale, contact Prosper Healthcare support through the support and data-protection route or email info@prosperhealthcare.co.uk.