Microsoft FHIR Server implementation

on YouTube ↗21m

" summary

Microsoft adds SMART on FHIR support to its Azure FHIR service to meet 21st Century Cures certification by passing Inferno tests: it uses Azure API Management to rewrite scopes (dot-for-slash) and inject FHIR-user context, puts a FHIR user claim in the access token so the server enforces patient-scoped queries, builds an expression-tree filter layer so data-layer queries return only allowed resources, implements ES384 signing for bulk-export tokens to match Inferno, and adds dataAbsentReason population (with measurable perf cost); samples and scripts live on GitHub and the managed service will absorb these features.

AI-written summary · about

" chapters (10)

1. 0:00Introduction and speaker background
2. 1:02Overview of US Core and G10 requirements
3. 3:08Solution architecture and components
4. 5:15Azure AD limitations with SMART on FHIR
5. 7:21Fine-grained access control implementation
6. 10:10Scope syntax translation challenges
7. 11:13Bulk data export encryption issues
8. 13:01Handling missing data requirements
9. 14:27Documentation and open-source samples
10. 15:27Q&A session

" related talks

• 16mExtending your FHIR Server with Proxy ServicesBenjamin Xue · FHIR DevDays Virtual Edition June 2021
• 45mSMART on FHIR: IntroductionJosh Mandel · HL7 FHIR DevDays International 2022
• 41mSMART on FHIRJosh Mandel · HL7 FHIR DevDays 2019 Redmond
• 37mSMART on FHIRMandel, Gottleib · HL7 FHIR DevDays Boston 2018
• 34mFHIR ProjectsBrian Kaney, Huff · HL7 FHIR DevDays Boston 2018
• 45mSMART on FHIR: what's new, what's next?Josh Mandel · HL7 FHIR DevDays International 2022
• 01h 48mSMART V1 +V2 Granular ControlsJosh Mandel · FHIR DevDays Virtual Edition June 2021
• 01h 04mApisecure, 14 & 15 March 2023 - Grahame Grieve, Principal at Health Intersections Pty Ltd.Grahame Grieve · APIsecure 2023