cerner autherization

[sundara...@payoda.com]

My goal is to login as a provider and getting the access token.(Autherization will trigger from the client application instead of from the cerner console launch).

The reason i am doing the autherization in this way is because of the client application is a NON SMART application.

I have been trying to authenticate from the client application instead of launching the application from cerner's console.

Im doing the autherization in a new window in my client application, once the authentication is completed i will use the access token to retreive patient details.

I am following the procedure given in this page:

        http://fhir.cerner.com/authorization/#requesting-authorization-on-behalf-of-a-user

The above documentation suggests the below url as autherization url:

https://authorization.sandboxcerner.com/tenants/0b8a0111-e8e6-4c26-a91c-5069cbc6b1ca/protocols/oauth2/profiles/smart-v1/personas/patient/authorize?client_id=ed483332-dc6e-4683-bf28-f113492c00b7&response_type=code&redirect_uri=&scope=user%2FPatient.read%20user%2FObservation.read%20launch&launch=a17aba51-1395-48d3-b3a9-73f2baf784da&aud=https%3A%2F%2Ffhir-ehr.sandboxcerner.com%2Fdstu2%2F0b8a0111-e8e6-4c26-a91c-5069cbc6b1ca%2F&state=a4c16a46-2c46-482c-8d66-4cc4a2990bda

I have got this page 

Im stuck at this page. Do i need to enter a provider's credentials to login to the account?

i do not have any provider's credential as of now, I have been using open sandbox for development.

How do i need to proceed after this step?

Please point me towards right direction.

Awating for yout reply.

[Jenni Syed (Cerner)]

Hi, 

That is the wrong URL to use for provider access. See more information here: http://fhir.cerner.com/millennium/dstu2/#secure-sandbox

Your application must use the FHIR metadata endpoint to discover the authorization endpoint as mentioned here (we can change it as needed, and it's different per FHIR server). EG, in our sandbox, the correct token and authorization URLs can be found here: https://fhir-ehr.sandboxcerner.com/dstu2/0b8a0111-e8e6-4c26-a91c-5069cbc6b1ca/metadata?_format=json

Keep in mind, without SMART, your application will need a way to discover or configure the FHIR urls necessary for the provider to connect.

The credentials for a provider in sandbox are portal/portal (again, they won't work for the page above because that's looking for a patient login).

~ Jenni