Short Description

This track will focus on testing proposed updates to the SMART on FHIR Implementation Guide (IG).  SMART v2 will add support for granular scopes (e.g., a the data category level) and will clarify SMART's capabilities model. 

Long Description

The SMART on FHIR v1 IG has been widely adopted for clinician- and patient-facing app integration into EHRs and other FHIR data systems. Based on community feedback, the Argonaut Project has undertaken a 2020 effort to revise and improve the SMART App Launch IG. A key area of focus in adding support for "granular permissions," e.g. to provide access to resources at the category level in addition to the type level. This would allow apps to request narrower access, like "all vital signs" rather than "all observations." In this connectathon track, we'll focus on testing support for an emerging set of improvements to the SMART scope language, allowing access at the category level; allowing access based on tags/labels; and allowing access to FHIR operations beyond create/read/update/delete/search.

Type

Submitting Work Group/Project/Accelerator/Affiliate/Implementer Group

Proposed Track Lead

Related tracks

Provide links to other tracks that are likely to have overlap of use-cases and/or participants (used to help guide seating arrangements and possibly drive track consolidation)


FHIR Version

Specification(s) this track uses

Clinical input requested (if any)

N/A


Patient input requested (if any)

N/A


Expected participants

Sign Up Sheet


Zulip stream

#smart


Track Orientation

TBD


Track details

System Roles

SMART Server: SMART server supporting granular scopes from the draft SMART IG v2.

SMART Client: SMART client requesting access using granular scopes from the draft SMART IG v2.


Scenarios

Scenario 1: Share access to data by category

SMART Client requests scopes and SMART Servers grant scopes at the category level. Specifically we'll test support for

After being granted this scope, a client can query for all vital signs via:

And the following queries should be rejected or results should be redacted (if no other scopes have been granted):


Scenario 2: Share access to data by tag

SMART Client requests scopes and SMART Servers grant scopes at the tag level. Specifically we'll test support for

After being granted this scope, a client can query for all vital signs via:

And the following queries should be rejected or results should be redacted (if no other scopes have been granted):


Scenario 3: Share access to operations

SMART Client requests scopes and SMART Servers grant scopes for FHIR $-operations. TODO: decide which to test on. Possibly Patient/:id/$everything or GET [base]/DocumentReference/$docref?{parameters} (see ?

Scenario 4: Share access to custom web services

SMART Client requests scopes and SMART Servers grant scopes for RESTful or webservices outside of FHIR (e.g. NCPDP or IHE or v3 or v2 over HTTP) . TODO: decide which to test on. Possibly __

Security and Privacy Considerations

This track focused on a new set of core security capabilities for fine-grained authorization of SMART clients.