Smart access token doesn't provide user and patient info

[Ravindra Kale]

I'm able to perform sso,  also able to get access token, refresh token, and id token.
but unable to get patient and logged-in user info.

Please help me with this issue 

I'm using 

1.authorize url -https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/personas/provider/authorize?response_type=code&client_id=<client id>&scope=launch%2Fpatient%2Copenid%2Cprofile%2Conline_access%2Cuser%2FPatient.read%2Cuser%2FPatient.write%2Cuser%2FObservation.read%2Cuser%2FObservation.write&aud=https://fhir-ehr-code.cerner.com/dstu2/ec2458f2-1e24-41c8-b71b-0e701af7583d&redirect_uri=<redirect-uri>&lanuch=<launch>
2. Token URL - https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token

[Ravindra Kale]

--
You received this message because you are subscribed to a topic in the Google Groups "Cerner FHIR Developers" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/cerner-fhir-developers/EUaGzbmqPsY/unsubscribe.
To unsubscribe from this group and all its topics, send an email to cerner-fhir-devel...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cerner-fhir-developers/af339dd6-1093-4e8f-baa2-62de202d52b0n%40googlegroups.com.

[Fenil Desani (Cerner)]

Hello,

The Patient context info should be available in the token response.
The user info should be fetched from id_token.

What is your App's clientID?

Thanks,

Fenil

[Ravindra Kale]

hello,

This is my client Id : 10f291f7-4510-4636-a0d2-38f7f7f15078 

Thanks

You received this message because you are subscribed to the Google Groups "Cerner FHIR Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cerner-fhir-devel...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cerner-fhir-developers/db4df313-0196-4ad1-9e88-836cdceb8152n%40googlegroups.com.

[Fenil Desani (Cerner)]

I was able to successfully launch your App against our public Sandbox and get the patient information and user information through Id_token.

Since this is a provider App you need to use 'launch' instead of 'launch/patient' scope.

Thanks,

Fenil

[Ravindra Kale]

Hi Fenil,
I tried with launch still not getting the patient information in id_token. Can you please share the full scope that you're using?

To view this discussion on the web visit https://groups.google.com/d/msgid/cerner-fhir-developers/30bc17ca-822c-434c-bbf9-321821d3f687n%40googlegroups.com.

[Fenil Desani (Cerner)]

Here is the list of scopes I used:

launch,openid,profile,online_access,user/Patient.read,user/Patient.write,user/Observation.read,user/Observation.write,user/Practitioner.read 

And the actual call:

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/personas/provider/authorize?response_type=code&client_id=10f291f7-4510-4636-a0d2-38f7f7f15078&scope=launch,openid,profile,online_access,user/Patient.read,user/Patient.write,user/Observation.read,user/Observation.write,user/Practitioner.read&aud=https://fhir-ehr-code.cerner.com/r4/ec2458f2-1e24-41c8-b71b-0e701af7583d&redirect_uri=<redirect_uri>&launch=<launchID>&state=<state>

[Ravindra Kale]

Thanks. We got the patient information by adding the above scope.

To view this discussion on the web visit https://groups.google.com/d/msgid/cerner-fhir-developers/4584db06-ee75-430f-b5d9-9ff0f41781fbn%40googlegroups.com.

[Ravindra Kale]

Hi,

We are launching the app from cerner console using below scope but we are not able to get "id_token"  before that we were getting.

scope : "launch,openid,profile,online_access,user/Patient.read,user/Patient.write,user/Observation.read,user/Observation.write,user/Practitioner.read"

[Fenil Desani (Cerner)]

Hello,

Are you still facing this issue? We wonder if it was due to an unexpected downtime that you were seeing this error!

Thanks,
Fenil