Institution/organization ID

[Yunwei Wang]

I heard at the WGM that Cerner added (or will add) organization/institution information into the token. Can someone clarify that?

[Kevin Shekleton (Cerner)]

Yunwei,

I'm not sure if I was talking with you, but I know that I mentioned at the WGM last week in New Orleans that we provide the tenant identifier of the Millennium client as part of your SMART launch context. This is mentioned in passing in our documentation here: http://fhir.cerner.com/smart/#launch-context

Note that this tenant identifier is not in the OAuth 2 access token but rather alongside the token with the other launch context parameters.

Best,

Kevin (Cerner)

[Yunwei Wang]

Kevin:

How do I interpret that tenant id? Is that a Cerner's identifier for the institute/organization/billing group/etc hosting the user?

I am trying to figure out how to map that to our billing identifier.

Yunwei

[Kevin Shekleton (Cerner)]

The tenant identifier is a Cerner assigned identifier that represents the organization housing the data (hence, tenant). There are some Cerner clients that share logical space within an environment, thereby acting as tenants in a single physical database (though their data is logically separated). Each of these clients has their own tenant identifier.

The questions you are asking are very difficult to answer without getting into specific organizations/clients/customers/etc and seeing how we both identify these organizations. This is why this need has yet to be solved in SMART as part of the standard (and similarly, CDS Hooks). I've talked with app developers who bill at the Cerner tenant level (making the mapping an easy 1:1) but also talked to developers that bill at a more discrete facility/building level. Also, it is not just a billing discussion as many developers have the same questions you do but it is because they want to map the Cerner tenant to some proprietary data they hold.

-Kevin

[David Teirney]

We're interested in being able to obtain an organization identifier as well as we need that to appropriately enforce privacy rules for information we will show from our system to the SSO'ed user from Cerner after the OIDC dance.

In our case we need the Tax Identification Number (TIN) number for the organization.

In the Cerner Sandbox we can see the "tenant" provided within the /token response. Is there anyway to use that to link that back to an organization TIN number (potentially even out of band, if necessary, so we can do mapping during the SMART on FHIR launch)?

Regards,

David

[Benjamin Eichhorn (Cerner)]

Hi David,

For more visibility could you please create a new thread, that will help you receive a quicker response from those watching this group.

Thanks,

Ben (Cerner)