Smart on FHIR for Athena Health - Policy Configuration Error

Bartosz Michalak

unread,

Mar 10, 2025, 3:40:15 AMMar 10

to SMART on FHIR

Hello,

I'm facing an issue with Smart on FHIR OAuth configuration for Sandbox in AthenaHealth and don't know where the problem could be.

The URL where the user is redirected looks like this:

https://api.preview.platform.athenahealth.com/oauth2/v1/authorize?aud=https%3A%2F%2Fapi.preview.platform.athenahealth.com%2Ffhir%2Fr4&client_id=filtered&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fauth%2Fcallback&response_type=code&scope=patient%2FPatient.read+patient%2FEncounter.read+patient%2FDocumentReference.read+openid+fhirUser&state=athena%3A6b0b58b79a3e8275ce0b9bdd5a848667

For user credentials I use those provided in their documentation (https://docs.athenahealth.com/api/guides/onboarding-overview)

After patient's authorization I see the following information:

Screenshot at Mar 10 08-35-17.png

My callback receives these params after user authorization:

Parameters: {"state"=>"athena:79f2d00ac13dfd06f29afe5069add0b1", "error"=>"access_denied", "error_description"=>"Policy evaluation failed for this request, please check the policy configurations."}

Scopes:
Screenshot at Mar 10 08-39-53.png

What could be the reason? I've double-checked the oAuth configuration and everything seems to look fine.

Thanks!

Christopher Schultz

unread,

Mar 10, 2025, 10:12:07 AMMar 10

to SMART on FHIR

Bartoz,

On 3/10/25 3:40 AM, 'Bartosz Michalak' via SMART on FHIR wrote:
> Hello,
> I'm facing an issue with Smart on FHIR OAuth configuration for Sandbox
> in AthenaHealth and don't know where the problem could be.
>
> The URL where the user is redirected looks like this:
>
> https://api.preview.platform.athenahealth.com/oauth2/v1/authorize?
> aud=https%3A%2F%2Fapi.preview.platform.athenahealth.com%2Ffhir%2Fr4&client_id=filtered&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fauth%2Fcallback&response_type=code&scope=patient%2FPatient.read+patient%2FEncounter.read+patient%2FDocumentReference.read+openid+fhirUser&state=athena%3A6b0b58b79a3e8275ce0b9bdd5a848667
>
> For user credentials I use those provided in their documentation

> (https://docs.athenahealth.com/api/guides/onboarding-overview <https://
> docs.athenahealth.com/api/guides/onboarding-overview>)

>
> After patient's authorization I see the following information:
>

> Screenshot at Mar 10 08-35-17.png
>
> My callback receives these params after user authorization:
>
> Parameters: {"state"=>"athena:79f2d00ac13dfd06f29afe5069add0b1",
> "error"=>"access_denied", "error_description"=>"Policy evaluation failed
> for this request, please check the policy configurations."}
>
> Scopes:

> Screenshot at Mar 10 08-39-53.png
>
> What could be the reason? I've double-checked the oAuth configuration
> and everything seems to look fine.

Maybe they don't like redirecting to "localhost"?

-chris

Ashok Sharma

unread,

Mar 13, 2025, 2:03:32 PMMar 13

to SMART on FHIR

I am having similar issue and so far not able to resolve it. I feel AthenaHealth has made it very difficult to test FHIR api interface. I never had an issue with either CERNER or EPIC.

Ashok

Kadambari Beelwar

unread,

Apr 2, 2025, 9:42:31 PMApr 2

to FHIR SMART on

Hi

I am looking for developer to do epic integration for our app
Can someone reach out to me pls.

Thank you.

Kind Regards,
Kadambari Beelwar

> On Mar 10, 2025, at 9:12 AM, Christopher Schultz <csch...@chadis.com> wrote:
>
> Bartoz,

> --
> You received this message because you are subscribed to the Google Groups "SMART on FHIR" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to smart-on-fhi...@googlegroups.com.
> To view this discussion visit https://groups.google.com/d/msgid/smart-on-fhir/a133e09c-4f89-47a7-9de7-8063e31b65dc%40chadis.com.

Alexander Lebedev

unread,

Aug 15, 2025, 10:53:46 AMAug 15

to SMART on FHIR

Hello. We’ve encountered the same issue. Could you please tell us if you’ve managed to find a solution?

Reply all

Reply to author

Forward