Invalid request to authentication endpoint

[Gašper Andrejc (PARSEK)]

Hello,

I've registered a smart on FHIR application (type: provider) and am trying to obtain an access token for the FHIR server.

I'm using Client Id (3a3ee28f-26fe-4ce2-9785-127d5dc0dca2) as seen in the smart-on-fhir dashboard and client secret as I see it for my system account.

The error i get back is 'invalid request'.

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/personas/provider/authorize

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token

Client authentication: 'Client secret sent as basic auth'

Scopes:  launch profile fhirUser openid online_access user/Account.read

aud: aud=https://fhir-ehr-code.cerner.com/r4/ec2458f2-1e24-41c8-b71b-0e701af7583d/

The main issue I see may be that I'm using either wrong clientId or (probably this one?) wrong client secret? Is it alright to use system account client secret as the client secret for this provider app? If not, where do I get the client secret?

Best, Gasper

[Fenil Desani (Cerner)]

Provider Applications do not use Basic Auth. Basic Auth is used for system Apps.

Please refer our documentation for Authorization workflows: http://fhir.cerner.com/authorization/#requesting-authorization-on-behalf-of-a-user