Login from Web App Outside of Cerner

[Mark Hatoum]

Hi,

I have been able to successfully setup and load a couple of sample SMART on FHIR apps in Cerner's Code console.  One of them uses the Provider App Type configuration, and the other is a System App Type.

I would like to try to embed SMART on FHIR within a Web Application outside of Cerner.

How would I be able to authenticate the user (Cerner login) and/or the system prior to loading the applicable launch page? ( similar to the test environments where user=portal for the Provider Test App or the hardcoded client id and secret for the System Test App)

Is there any documentation or examples available for this scenario?

-Mark

[Mark Hatoum]

Are there any options to integration with Cerner Hosted Open ID Authorization?

-Mark

[Kevin Shekleton (Cerner)]

Mark,

When your SMART app launches as a standalone app outside of the EHR, our authorization server will automatically redirect to our OpenID provider to authenticate the user. So, you don't need to do anything. This is exactly what happens when you launch a SMART app from within the code Console.

-Kevin (Cerner)

[Mark Hatoum]

Hi Kevin,

Just to clarify for me, when the client app "launch" page is requested, in addition to authorizing, will the FHIR.oauth2.authorize call bring up a Cerner login form if the user does not have a valid existing session? Is that how it would work?

-Mark

[Kevin Shekleton (Cerner)]

Yes. When the SMART app requests authorization to launch from the Cerner Authorization Server (AS), the AS will ensure that an existing valid session exists in the browser. As a standalone app, there won't be a session so the AS will redirect to the client's OpenID provider to allow the user to authenticate. After authenticating an establishing a session, the OpenID provider redirects back to the AS and then ultimately back to your SMART app.

This workflow I just described is exactly how you're seeing things today when you launch your SMART app from the code Console.

If you haven't already, check out our documentation on authorization in a SMART on FHIR environment here:

https://fhir.cerner.com/authorization/

-Kevin (Cerner)

[Mark Hatoum]

Awesome - thanks Kevin. I just wanted to be sure that the FHIR.oauth2.authorize call would incorporate the authentication call (if needed) as well as authorization.

-Mark

[Kevin Maloy]

Mark --

I also have some simple code on repl.it and a short video about making a stand alone app (patient facing for the video) if you want to check it out ... 

It took me a while to figure out how to do stand alone so I thought I would contribute ... the github pages thing was hard for me to setup/understand ... 

https://www.youtube.com/watch?v=vs2wc01xz_A&feature=youtu.be

https://repl.it/@maloykr/AbleNippyKilobyte

k.

[Mark Hatoum]

Very nice. Thanks Kevin for the additional knowledge.

-Mark