Skip to content

Commit 9a0c26e

Browse files
authored
Update smart-on-fhir.md
1 parent 4e2b5f3 commit 9a0c26e

File tree

1 file changed

+21
-30
lines changed

1 file changed

+21
-30
lines changed

articles/healthcare-apis/fhir/smart-on-fhir.md

Lines changed: 21 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -27,31 +27,24 @@ One of the main purposes of the specifications is to describe how an application
2727

2828
Below tutorial describes steps to enable SMART on FHIR applications with FHIR Service.
2929

30-
<!--- ## Pre-requisite
31-
Below are pre-requisite on enabling the SMART on FHIR:
32-
<b>Prerequisites</b>
33-
1. An instance of the Azure API for FHIR
34-
2. Client application registration. Follow the instructions for configuring a [public client application in Azure AD](register-public-azure-ad-client-app.md)
35-
3. Test Data : To test the Azure API for FHIR and the SMART on FHIR, you'll need to have at least one patient in the database. If you've not interacted with the API yet, and you don't have data in the database, see [Access the FHIR service using Postman](./../fhir/use-postman.md) to load a patient. Make a note of the ID of a specific patient. --->
36-
3730
## Prerequisites
3831

3932
- An instance of the FHIR Service
4033
- .NET SDK 6.0
4134
- [Enable cross-origin resource sharing (CORS)](configure-cross-origin-resource-sharing.md)
35+
- [Register public client application in AAD ](/register-public-azure-ad-client-app.md)
36+
- After registering the application, make note of the applicationId for client application.
37+
38+
<!--- Tutorial : To enable SMART on FHIR using APIM, follow below steps
39+
Step 1 : Set up FHIR SMART user role
40+
Follow the steps listed under section [Manage Users: Assign Users to Role](https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). Any user added to this role will be able to access the FHIR Service if their requests comply with the SMART on FHIR implementation Guide, such as request having access token which includes a fhirUser claim and a clinical scopes claim. The access granted to the users in this role will then be limited by the resources associated to their fhirUser compartment and the restrictions in the clinical scopes.
4241
43-
## Configure Azure AD registrations
44-
45-
SMART on FHIR requires that `Audience` has an identifier URI equal to the URI of the FHIR service. The standard configuration of the FHIR service uses an `Audience` value of `https://azurehealthcareapis.com`. However, you can also set a value matching the specific URL of your FHIR service (for example `https://MYFHIRAPI.fhir.azurehealthcareapis.com`). This is required when working with the SMART on FHIR proxy.
46-
47-
You'll also need a client application registration. Most SMART on FHIR applications are single-page JavaScript applications. So you should follow the instructions for configuring a [public client application in Azure AD](register-public-azure-ad-client-app.md).
48-
49-
After you complete these steps, you should have:
50-
51-
- A FHIR server with the audience set to `https://MYFHIRAPI.fhir.azurehealthcareapis.com`, where `MYFHIRAPI` is the name of your FHIR service instance.
52-
- A public client application registration. Make a note of the application ID for this client application.
42+
Step 2 : Deploy the necessary components to set up the FHIR server integrated with APIM in production. Follow ReadMe
43+
Step 3 : Load US Core profiles
44+
Step 4 : Create AAD custom policy using this README --->
5345

54-
### Set admin consent for your app
46+
Lets go over individual steps to enable SMART on FHIR
47+
### Step 1 : Set admin consent for your client application
5548

5649
To use SMART on FHIR, you must first authenticate and authorize the app. The first time you use SMART on FHIR, you also must get administrative consent to let the app access your FHIR resources.
5750

@@ -66,21 +59,18 @@ To add yourself or another user as owner of an app:
6659
3. Search for the app registration you created, and then select it.
6760
4. In the left menu, under **Manage**, select **Owners**.
6861
5. Select **Add owners**, and then add yourself or the user you want to have admin consent.
69-
6. Select **Save**.
62+
6. Select **Save**
63+
7064

71-
<!--- Tutorial : To enable SMART on FHIR using APIM, follow below steps
72-
Step 1 : Set up FHIR SMART user role
73-
Follow the steps listed under section [Manage Users: Assign Users to Role](https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). Any user added to this role will be able to access the FHIR Service if their requests comply with the SMART on FHIR implementation Guide, such as request having access token which includes a fhirUser claim and a clinical scopes claim. The access granted to the users in this role will then be limited by the resources associated to their fhirUser compartment and the restrictions in the clinical scopes.
65+
### Step 2 : Configure Azure AD registrations
7466

75-
Step 2 : Deploy the necessary components to set up the FHIR server integrated with APIM in production. Follow ReadMe
76-
Step 3 : Load US Core profiles
77-
Step 4 : Create AAD custom policy using this README --->
67+
SMART on FHIR requires that `Audience` has an identifier URI equal to the URI of the FHIR service. The standard configuration of the FHIR service uses an `Audience` value of `https://azurehealthcareapis.com`. However, you can also set a value matching the specific URL of your FHIR service (for example `https://MYFHIRAPI.fhir.azurehealthcareapis.com`). This is required when working with the SMART on FHIR proxy.
7868

79-
## Enable the SMART on FHIR proxy
69+
### Step 3: Enable the SMART on FHIR proxy
8070

8171
Enable the SMART on FHIR proxy in the **Authentication** settings for your FHIR instance by selecting the **SMART on FHIR proxy** check box.
8272

83-
Configure the reply URL: The SMART on FHIR proxy acts as an intermediary between the SMART on FHIR app and Azure AD. The authentication reply (the authentication code) must go to the SMART on FHIR proxy instead of the app itself. The proxy then forwards the reply to the app.
73+
The SMART on FHIR proxy acts as an intermediary between the SMART on FHIR app and Azure AD. The authentication reply (the authentication code) must go to the SMART on FHIR proxy instead of the app itself. The proxy then forwards the reply to the app.
8474

8575
Because of this two-step relay of the authentication code, you need to set the reply URL (callback) for your Azure AD client application to a URL that is a combination of the reply URL for the SMART on FHIR proxy and the reply URL for the SMART on FHIR app. The combined reply URL takes this form:
8676

@@ -108,11 +98,12 @@ Add the reply URL to the public client application that you created earlier for
10898

10999
<!---![Reply URL configured for the public client](media/tutorial-smart-on-fhir/configure-reply-url.png)--->
110100

111-
## Get a test patient
101+
102+
### Step 4 : Get a test patient
112103

113104
To test the FHIR service and the SMART on FHIR proxy, you'll need to have at least one patient in the database. If you've not interacted with the API yet, and you don't have data in the database, see [Access the FHIR service using Postman](./../fhir/use-postman.md) to load a patient. Make a note of the ID of a specific patient.
114105

115-
## Download the SMART on FHIR app launcher
106+
### Step 5 : Download the SMART on FHIR app launcher
116107

117108
The open-source [FHIR Server for Azure repository](https://github.com/Microsoft/fhir-server) includes a simple SMART on FHIR app launcher and a sample SMART on FHIR app. In this tutorial, use this SMART on FHIR launcher locally to test the setup.
118109

@@ -146,7 +137,7 @@ Use this command to run the application:
146137
dotnet run
147138
```
148139

149-
## Test the SMART on FHIR proxy
140+
## Step 6 : Test the SMART on FHIR proxy
150141

151142
After you start the SMART on FHIR app launcher, you can point your browser to `https://localhost:5001`, where you should see the following screen:
152143

0 commit comments

Comments
 (0)