49.132    SMART Login Terms of Service 49.134    SMART Definitions Seeding   

49.133.1SMART Authorization

 

The SMART Authorization configuration category includes the following configurable options:

  • Allowed Audience List

  • Email From Address

  • Enforce Approved Scopes to Restrict Permissions

  • Scopes Supported

49.133.2Property: Allowed Audience List

 
Property Name Allowed Audience List
Property Key
Property Type STRING
Description Space-separated list of allowed resource URLs as the 'audience' parameter during authentication flow. If left empty, no validation is performed.
Applies to Modules
  • SMART Outbound Security
Default Value (no default)
Example Property
module.[MODULE_ID].config.allowed_audience_list = 

49.133.3Property: Email From Address

 
Property Name Email From Address
Property Key
Property Type STRING
Description Forgotten password related emails will be sent from this email address.
Applies to Modules
  • Payer to Payer
  • SMART Outbound Security
  • appSphere
Default Value noreply@unknown.com
Example Property
module.[MODULE_ID].config.email.from_address = noreply@unknown.com

49.133.4Property: Enforce Approved Scopes to Restrict Permissions

 
Property Name Enforce Approved Scopes to Restrict Permissions
Property Key
Property Type BOOLEAN
Description When enabled, permission will be stripped from a user's session if they are not supported by an approved SMART on FHIR scope. For example, any FHIR write permissions will be removed from a session if the user has not approved (or a client is set to auto-approve) a scope such as Patient/*.write.
Applies to Modules
  • SMART Inbound Security
  • SMART Outbound Security
Default Value true
Example Property
module.[MODULE_ID].config.enforce_approved_scopes_to_restrict_permissions = true

49.133.5Property: Scopes Supported

 
Property Name Scopes Supported
Property Key
Property Type STRING
Description A space separated list of scopes to advertise as supported in the .well-known/smart-configuration
Applies to Modules
  • FHIR Gateway REST Endpoint
  • FHIR REST Endpoint (All FHIR Versions)
  • FHIR REST Endpoint (DSTU2 - Deprecated)
  • FHIR REST Endpoint (R3 - Deprecated)
  • FHIR REST Endpoint (R4 - Deprecated)
  • Hybrid Providers REST Endpoint
  • SMART Inbound Security
  • SMART Outbound Security
Default Value openid fhirUser
Example Property
module.[MODULE_ID].config.smart_configuration.scopes_supported = openid fhirUser
   49.132    SMART Login Terms of Service 49.134    SMART Definitions Seeding