Hello everyone,
I'm setting up a multi-tenant VNA system with dcm4chee-arc-light as the central archive and OHIF Viewer as the client.
My Setup:
- A single dcm4chee-arc-light instance receives data from multiple hospitals.
- Each hospital sends data to a unique Application Entity (AET) (e.g., AET_HOSPITAL_A, AET_HOSPITAL_B).
- OHIF Viewer is connected to the dcm4chee archive.
My Goal:
I want to implement user-based authorization. For example, a user belonging to Hospital A who logs into OHIF should only be able to query and view studies that were sent to the AET_HOSPITAL_A.
My Question:
What is the standard approach to achieve this? I am looking for a high-level overview of the necessary configuration steps, presumably involving Keycloak for authentication and specific dcm4chee settings to link a user to their corresponding AET's data.
Thank you.