Integration with user management

[sergiooncode]

Hello,

First of all thanks for the great support the IHTSDO team provides, my company needs a terminology server and we're going to use Snowstorm since it's the reference terminology server implementation.

My company is getting ready to request a data security certification and it's required to have basically external but also internal applications behind a authentication/authorization/user mgmt system so a user has to login and then actions, even read only ones, can be traced back to the user.

We are thinking about how to integrate SCT browser with the system that we use which is AWS Cognito.

Do you know of any companies that use SCT browser + Snowstorm and had to integrate with one of those systems? Has that been a requirement considered for SCT browser + Snowstorm at any point? Can you share any recommendations about how to do an integration like that?

[kaicode]

@sergiooncode
We have not done this at SNOMED International. I hoped that someone in the community might respond to your request but it's been a long time now so that seems unlikely. Maybe no one else has done exactly this.

Perhaps this would be possible by putting the Snowstorm API behind Amazon API Gateway and then using CloudWatch logging? It seems to have access to authenticated user identifier via the $context.identity variables.

Did the AWS Cognito integration go ahead? Any high level insights for the SNOMED Browser / Snowstorm GitHub knowledge base!?