FHIR Chat · SMART on FHIR end users

Stream: implementers

Topic: SMART on FHIR end users

Brian Gammon (Jun 17 2020 at 16:53):

The SMART on FHIR sample apps I’ve experimented with so far simply use the token set from the EHR’s Authorization Server to do everything. They typically sign in using claims from the ID token, and obtain FHIR resources using the access token. What if the SMART app is itself a fully standalone app that has a user store, an Authorization Server that issues access tokens, permissions model, etc? Is it expected that the SMART app treat the EHR AS as an external IDP and link accounts? Or, is it ok to expect/require the end user to be signed into the target app first, then perform the SMART on FHIR OAuth2 dance to get the tokens needed for the FHIR server?

Josh Mandel (Jun 17 2020 at 16:59):

In short, the answer to your question is yes. The smart app launch specification focuses on connecting an app to an EHR or other fhir data system. The app can of course be tightly bound to that relationship or have a rich personal life unto itself. We don't try to draw any boundaries around what an app can do. most of our example apps focus on their relationship with the EHR because that is the piece where our specification has something to say.

Brian Gammon (Jun 17 2020 at 17:29):

Thank you @Josh Mandel , I almost asked this during your Office Hours session yesterday, but didn't quite have the right wording ready to go. I have a couple of other SMART and CDS Hooks questions brewing that I'll post here in case it helps anyone else.

Josh Mandel (Jun 17 2020 at 18:10):

Sounds good -- keep in mind #smart and #cds hooks for specifics

PKumar (Jul 17 2020 at 15:51):

Hi Team, I tried a lot but not able to understand the concept of SMART on FHIR. Can someone explain in practical terms..more on business perspective will help

David Pyke (Jul 17 2020 at 15:51):

Can you be more precise on what you're having an issue with?

PKumar (Jul 17 2020 at 15:53):

We are having web application that has APIs and it has to be given access to various providers. I heard that SMART on FHIR will take care of authentication, so trying to understand what it is and how it helps

David Pyke (Jul 17 2020 at 15:54):

You may find the info you need here: https://docs.smarthealthit.org/

PKumar (Jul 17 2020 at 15:55):

Sure, THanks!
Is SMART concept is specific to EHR applications only? or can we use it for other applications as well?

David Pyke (Jul 17 2020 at 16:01):

It was designed around healthcare applications, but not specifically EHR

PKumar (Jul 23 2020 at 12:39):

Thanks @David Pyke

I went through the https://gallery.smarthealthit.org/

does the apps listed on this platform works only if I have FHIR APIs supported by my application. For ex: if I want to use one of the apps that create reports on vitals. I assume the workflow as: My system has FHIR APIs of observation resource and enable access to this app, authenticated in backend using SMART standards. Then the app will consume data from my system and show results .

Thanks in Advance!

David Pyke (Jul 23 2020 at 12:49):

Yes, this is SMART on FHIR. You need to have an exposed FHIR API for them to work.

PKumar (Jul 23 2020 at 13:10):