58.135    SMART Login Terms of Service 58.137    SMART Definitions Seeding   

58.145.1SMART Authorization

 

The SMART Authorization configuration category includes the following configurable options:

  • Allowed Audience List

  • Email From Address

  • Enforce Approved Scopes to Restrict Permissions

  • Smart Granular Scope Selection

  • Scopes Supported

58.145.2Property: Allowed Audience List

 
Property Name Allowed Audience List
Property Key
Property Type STRING
Description Space-separated list of allowed resource URLs as the 'audience' parameter during authentication flow. If left empty, no validation is performed.
Applies to Modules
  • SMART Outbound Security
Default Value (no default)
Example Property
module.[MODULE_ID].config.allowed_audience_list = 

58.145.3Property: Email From Address

 
Property Name Email From Address
Property Key
Property Type STRING
Description Forgotten password related emails will be sent from this email address.
Applies to Modules
  • SMART Outbound Security
  • appSphere
Default Value noreply@unknown.com
Example Property
module.[MODULE_ID].config.email.from_address = noreply@unknown.com

58.145.4Property: Enforce Approved Scopes to Restrict Permissions

 
Property Name Enforce Approved Scopes to Restrict Permissions
Property Key
Property Type BOOLEAN
Description When enabled, permission will be stripped from a user's session if they are not supported by an approved SMART on FHIR scope. For example, any FHIR write permissions will be removed from a session if the user has not approved (or a client is set to auto-approve) a scope such as Patient/*.write.
Applies to Modules
  • SMART Inbound Security
  • SMART Outbound Security
Default Value true
Example Property
module.[MODULE_ID].config.enforce_approved_scopes_to_restrict_permissions = true

58.145.5Property: Smart Granular Scope Selection

 
Property Name Smart Granular Scope Selection
Property Key
Property Type BOOLEAN
Description Enables support for SMART granular scope selection as required for ONC certification. See SMART Granular Scope Selection for Condition and Observation Resources for more information.
Applies to Modules
  • SMART Outbound Security
Default Value false
Example Property
module.[MODULE_ID].config.smart_configuration.granular_scope_selection = false

58.145.6Property: Scopes Supported

 
Property Name Scopes Supported
Property Key
Property Type STRING
Description A space separated list of scopes to advertise as supported in the .well-known/smart-configuration
Applies to Modules
  • FHIR Gateway REST Endpoint
  • FHIR REST Endpoint (All FHIR Versions)
  • Hybrid Providers REST Endpoint
  • SMART Inbound Security
  • SMART Outbound Security
Default Value openid fhirUser
Example Property
module.[MODULE_ID].config.smart_configuration.scopes_supported = openid fhirUser
   58.135    SMART Login Terms of Service 58.137    SMART Definitions Seeding