SMART on FHIR support

[FTK Davidson]

Hi team,

Does GCP Healthcare API FHIR support SMART on FHIR out-of-the-box? The information I was able to find about this publicly kind of confuses me. In some cases the answer was to use Apigee Health APIx (these answers are kind of old so maybe this isn't necessary anymore?). In other cases the answer was that SMART on FHIR is supported out-of-the-box, but if this is the case I am not able to get this working. I also found another answer stating SMART on FHIR functionality is in some kind of test phase. 

Kind regards

[Richard Braman]

Smart on FHIR is a profile of oAuth/OIDC.  You'll need a conformant IDP like Okta and you will need some sort of RP mechanism in front of the Google Health API to introspect the token.  Even with something like Okta, you 'll need a SoF conformant proxy in front of the IDP to handle the SOF specials.

Richard Braman

FHIRFLY

v: 252-947-1035

Fly Health, LLC

https://fly.health

[Paul Church]

The suggestion of Apigee Health APIx remains relevant as the generally available functionality.

There is additional functionality currently in private preview (alpha) that allows the Healthcare API to natively enforce SMART scopes attached to the request. This is currently in a testing phase. It does not remove the need for an identity provider and access control proxy, but it makes the integration with the resource server much easier as the entire API surface understands what scopes mean.

--
You received this message because you are subscribed to the Google Groups "GCP Healthcare Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gcp-healthcare-di...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gcp-healthcare-discuss/38a8e550-f369-4b43-90f4-7f204eb7e472n%40googlegroups.com.