When submitting AEOB request to payer, the GFE submission occurs through the submitting provider/facility which would imply that the provider/facility would need to get an access token from the payer's server.

However, in the the diagram to get completed AEOB from payer, the patient is being shown as needing access token from the payer's server. This would mean that the patient or provider will need two separate portals to access their estimates/AEOBs. Change the the diagram to indicate that authentication and access token may be done by either parties requesting the AEOB, patient or the submitting provider/facility.