49.4    Authentication Callback Scripts
  • Configuration Categories
  • 49.0 Web Admin Console Settings
  • 49.1 appSphere
  • 49.2 Payer Config
  • 49.3 Initial appSphere Seeding
  • 49.4 Authentication Callback Scripts
  • 49.5 Auth: General for APIs
  • 49.6 User Authentication
  • 49.7 Auth: HTTP Basic
  • 49.8 Auth: OpenID Connect
  • 49.9 Browser Syntax Highlighting
  • 49.10 Camel
  • 49.11 Capability Statement (metadata)
  • 49.12 Care Gaps
  • 49.13 CDA Generation
  • 49.14 CDA Import
  • 49.15 CDA Interceptors
  • 49.16 CDA JavaScript Execution Scripts
  • 49.17 CDA Terminology
  • 49.18 CDS Hooks Definitions
  • 49.19 CDS Hooks On FHIR
  • 49.20 Channel Import
  • 49.21 Channel Retry
  • 49.22 Kafka
  • 49.23 Cluster Manager Maintenance
  • 49.24 Message Broker
  • 49.25 Cluster Level Security
  • 49.26 CQL
  • 49.27 Credentials
  • 49.28 Cross-Origin Resource Sharing (CORS)
  • 49.29 Invoke Export
  • 49.30 Member Match
  • 49.31 Database
  • 49.32 Da Vinci Health Record Exchange
  • 49.33 DQM
  • 49.34 EasyShare SMART Health Links
  • 49.35 Email Configuration
  • 49.36 MDM UI
  • 49.37 ETL Import: CSV Properties
  • 49.38 ETL Import: Source
  • 49.39 FHIR Binary Storage
  • 49.40 FHIR Bulk Operations
  • 49.41 Capability Statement
  • 49.42 FHIR Configuration
  • 49.43 Consent Service
  • 49.44 FHIR Endpoint Conversion
  • 49.45 FHIR Endpoint HFQL Support
  • 49.46 FHIR Endpoint Partitioning
  • 49.47 Resource Providers
  • 49.48 FHIR Endpoint Security
  • 49.49 Endpoint Terminology
  • 49.50 FHIR Gateway Cache
  • 49.51 FHIR Gateway Configuration
  • 49.52 FHIR Interceptors
  • 49.53 LiveBundle Service
  • 49.54 FHIR MDM Server
  • 49.55 FHIR Performance
  • 49.56 FHIR Performance Tracing
  • 49.57 FHIR Realtime Export
  • 49.58 Repository Validation
  • 49.59 FHIR Resource Types
  • 49.60 FHIR REST Endpoint
  • 49.61 FHIR Search
  • 49.62 Custom Resource Types
  • 49.63 IG Support
  • 49.64 MegaScale
  • 49.65 FHIR Storage Module Conditional Updates
  • 49.66 FHIR Storage Module Scheduled Tasks
  • 49.67 FHIR Validation Services
  • 49.68 FHIR Storage Package Registry
  • 49.69 FHIR Storage Partitioning
  • 49.70 Versioned References
  • 49.71 FHIR Subscription Delivery
  • 49.72 FHIR Subscription Persistence
  • 49.73 Amazon HealthLake REST Endpoint
  • 49.74 HL7 v2.x Mapper - Contained Resource
  • 49.75 HL7 v2.x Mapper - DG1
  • 49.76 HL7 v2.x Mapper - Forced Namespace Mode
  • 49.77 HL7 v2.x Mapper - General
  • 49.78 HL7 v2.x Mapper - Medications
  • 49.79 HL7 v2.x Mapper - OBR
  • 49.80 HL7 v2.x to FHIR Mapper - OBSERVATION Group
  • 49.81 HL7 v2.x Mapper - ORC
  • 49.82 HL7 v2.x to FHIR Mapper - ORDER_OBSERVATION Group
  • 49.83 HL7 v2.x Mapper - PID
  • 49.84 HL7 v2.x Mapper - PV1
  • 49.85 Listener Interceptors
  • 49.86 HL7 v2.x Listener Script
  • 49.87 HL7 v2.x Listening Endpoint
  • 49.88 HL7 v2.x MLLP Listener
  • 49.89 HL7 v2.x MLLP Sender
  • 49.90 FHIR to HL7 v2.x Mapper Script
  • 49.91 HL7 v2.x Outbound Mapping
  • 49.92 HTTP Access Log
  • 49.93 HTTP Listener
  • 49.94 HTTP Request Pool
  • 49.95 HTTP Security
  • 49.96 Hybrid Providers Definitions
  • 49.97 IG Support
  • 49.98 Initial User Seeding
  • 49.99 JavaScript Execution Environment
  • 49.100 JSON Web KeySet (JWKS)
  • 49.101 LDAP Authentication
  • 49.102 Smile CDR License
  • 49.103 Lucene FullText Indexing
  • 49.104 MDM
  • 49.105 Narrative Generator
  • 49.106 OpenID Connect Token Validation
  • 49.107 OpenID Connect (OIDC)
  • 49.108 Payer to Payer
  • 49.109 Prior Authorization Coverage Requirement Discovery
  • 49.110 Prior Auth DTR
  • 49.111 Prior Authorization Support
  • 49.112 Privacy Security Notice
  • 49.113 Provenance Injection
  • 49.114 Quality Payment Program (QPP)
  • 49.115 Realtime Export
  • 49.116 Endpoint Validation: Request Validating
  • 49.117 Scheduler Configuration
  • 49.118 Search Parameter Seeding
  • 49.119 SAML Provider
  • 49.120 Security Inbound Script
  • 49.121 Inbound SMART on FHIR Authentication
  • 49.122 Inbound SMART on FHIR Endpoints
  • 49.123 OAuth2/OIDC Federation
  • 49.124 SMART Callback Script
  • 49.125 Cross-Organizational Data Access Profile
  • 49.126 SMART Login Skin
  • 49.127 SMART Login Terms of Service
  • 49.128 SMART Authorization
  • 49.129 SMART Definitions Seeding
  • 49.130 Sessions
  • 49.131 Two Factor Authentication
  • 49.132 TLS / SSL (Encryption)
  • 49.133 Transaction Log
  • 49.134 Trusted Client
  • 49.135 User Self Registration
    • 49.6    User Authentication   
       Table of Contents

    Auth: General for APIs

    49.5.1Auth: General for APIs

     

    The Auth: General for APIs configuration category includes the following configurable options:

    • Anonymous Account Username

    • Allow Anonymous Access

    49.5.2Property: Anonymous Account Username

     
    Property Name Anonymous Account Username
    Property Key
    Property Type STRING
    Description The account name for the system account to use for anonymous requests.
    Applies to Modules
    • CDS Hooks REST Endpoint
    • EasyShare SHL Endpoint (Public)
    • FHIR Gateway REST Endpoint
    • FHIR REST Endpoint (All FHIR Versions)
    • FHIR REST Endpoint (DSTU2 - Deprecated)
    • FHIR REST Endpoint (R3 - Deprecated)
    • FHIR REST Endpoint (R4 - Deprecated)
    • FHIRWeb Console
    • HL7 v2.x Listening Endpoint
    • Hybrid Providers REST Endpoint
    • JSON Admin API
    • MDM UI
    • Package Registry Endpoint
    • Payer to Payer
    Default Value ANONYMOUS
    Example Property 
    module.[MODULE_ID].config.anonymous.access.account_username = ANONYMOUS

    49.5.3Property: Allow Anonymous Access

     
    Property Name Allow Anonymous Access
    Property Key
    Property Type BOOLEAN
    Description If enabled, anonymous requests (i.e. requests without credentials) will be allowed to proceed. This means that they will not be blocked by the security manager, and they will instead proceed under the authority of the designated anonymous user. Only roles and permissions that have been assigned to the anonymous user will be granted to these requests. See Anonymous Access for more information.
    Applies to Modules
    • CDS Hooks REST Endpoint
    • EasyShare SHL Endpoint (Public)
    • FHIR Gateway REST Endpoint
    • FHIR REST Endpoint (All FHIR Versions)
    • FHIR REST Endpoint (DSTU2 - Deprecated)
    • FHIR REST Endpoint (R3 - Deprecated)
    • FHIR REST Endpoint (R4 - Deprecated)
    • FHIRWeb Console
    • HL7 v2.x Listening Endpoint
    • Hybrid Providers REST Endpoint
    • JSON Admin API
    • MDM UI
    • Package Registry Endpoint
    • Payer to Payer
    Default Value false
    Example Property 
    module.[MODULE_ID].config.anonymous.access.enabled = false
       49.4    Authentication Callback Scripts
  • Configuration Categories
  • 49.0 Web Admin Console Settings
  • 49.1 appSphere
  • 49.2 Payer Config
  • 49.3 Initial appSphere Seeding
  • 49.4 Authentication Callback Scripts
  • 49.5 Auth: General for APIs
  • 49.6 User Authentication
  • 49.7 Auth: HTTP Basic
  • 49.8 Auth: OpenID Connect
  • 49.9 Browser Syntax Highlighting
  • 49.10 Camel
  • 49.11 Capability Statement (metadata)
  • 49.12 Care Gaps
  • 49.13 CDA Generation
  • 49.14 CDA Import
  • 49.15 CDA Interceptors
  • 49.16 CDA JavaScript Execution Scripts
  • 49.17 CDA Terminology
  • 49.18 CDS Hooks Definitions
  • 49.19 CDS Hooks On FHIR
  • 49.20 Channel Import
  • 49.21 Channel Retry
  • 49.22 Kafka
  • 49.23 Cluster Manager Maintenance
  • 49.24 Message Broker
  • 49.25 Cluster Level Security
  • 49.26 CQL
  • 49.27 Credentials
  • 49.28 Cross-Origin Resource Sharing (CORS)
  • 49.29 Invoke Export
  • 49.30 Member Match
  • 49.31 Database
  • 49.32 Da Vinci Health Record Exchange
  • 49.33 DQM
  • 49.34 EasyShare SMART Health Links
  • 49.35 Email Configuration
  • 49.36 MDM UI
  • 49.37 ETL Import: CSV Properties
  • 49.38 ETL Import: Source
  • 49.39 FHIR Binary Storage
  • 49.40 FHIR Bulk Operations
  • 49.41 Capability Statement
  • 49.42 FHIR Configuration
  • 49.43 Consent Service
  • 49.44 FHIR Endpoint Conversion
  • 49.45 FHIR Endpoint HFQL Support
  • 49.46 FHIR Endpoint Partitioning
  • 49.47 Resource Providers
  • 49.48 FHIR Endpoint Security
  • 49.49 Endpoint Terminology
  • 49.50 FHIR Gateway Cache
  • 49.51 FHIR Gateway Configuration
  • 49.52 FHIR Interceptors
  • 49.53 LiveBundle Service
  • 49.54 FHIR MDM Server
  • 49.55 FHIR Performance
  • 49.56 FHIR Performance Tracing
  • 49.57 FHIR Realtime Export
  • 49.58 Repository Validation
  • 49.59 FHIR Resource Types
  • 49.60 FHIR REST Endpoint
  • 49.61 FHIR Search
  • 49.62 Custom Resource Types
  • 49.63 IG Support
  • 49.64 MegaScale
  • 49.65 FHIR Storage Module Conditional Updates
  • 49.66 FHIR Storage Module Scheduled Tasks
  • 49.67 FHIR Validation Services
  • 49.68 FHIR Storage Package Registry
  • 49.69 FHIR Storage Partitioning
  • 49.70 Versioned References
  • 49.71 FHIR Subscription Delivery
  • 49.72 FHIR Subscription Persistence
  • 49.73 Amazon HealthLake REST Endpoint
  • 49.74 HL7 v2.x Mapper - Contained Resource
  • 49.75 HL7 v2.x Mapper - DG1
  • 49.76 HL7 v2.x Mapper - Forced Namespace Mode
  • 49.77 HL7 v2.x Mapper - General
  • 49.78 HL7 v2.x Mapper - Medications
  • 49.79 HL7 v2.x Mapper - OBR
  • 49.80 HL7 v2.x to FHIR Mapper - OBSERVATION Group
  • 49.81 HL7 v2.x Mapper - ORC
  • 49.82 HL7 v2.x to FHIR Mapper - ORDER_OBSERVATION Group
  • 49.83 HL7 v2.x Mapper - PID
  • 49.84 HL7 v2.x Mapper - PV1
  • 49.85 Listener Interceptors
  • 49.86 HL7 v2.x Listener Script
  • 49.87 HL7 v2.x Listening Endpoint
  • 49.88 HL7 v2.x MLLP Listener
  • 49.89 HL7 v2.x MLLP Sender
  • 49.90 FHIR to HL7 v2.x Mapper Script
  • 49.91 HL7 v2.x Outbound Mapping
  • 49.92 HTTP Access Log
  • 49.93 HTTP Listener
  • 49.94 HTTP Request Pool
  • 49.95 HTTP Security
  • 49.96 Hybrid Providers Definitions
  • 49.97 IG Support
  • 49.98 Initial User Seeding
  • 49.99 JavaScript Execution Environment
  • 49.100 JSON Web KeySet (JWKS)
  • 49.101 LDAP Authentication
  • 49.102 Smile CDR License
  • 49.103 Lucene FullText Indexing
  • 49.104 MDM
  • 49.105 Narrative Generator
  • 49.106 OpenID Connect Token Validation
  • 49.107 OpenID Connect (OIDC)
  • 49.108 Payer to Payer
  • 49.109 Prior Authorization Coverage Requirement Discovery
  • 49.110 Prior Auth DTR
  • 49.111 Prior Authorization Support
  • 49.112 Privacy Security Notice
  • 49.113 Provenance Injection
  • 49.114 Quality Payment Program (QPP)
  • 49.115 Realtime Export
  • 49.116 Endpoint Validation: Request Validating
  • 49.117 Scheduler Configuration
  • 49.118 Search Parameter Seeding
  • 49.119 SAML Provider
  • 49.120 Security Inbound Script
  • 49.121 Inbound SMART on FHIR Authentication
  • 49.122 Inbound SMART on FHIR Endpoints
  • 49.123 OAuth2/OIDC Federation
  • 49.124 SMART Callback Script
  • 49.125 Cross-Organizational Data Access Profile
  • 49.126 SMART Login Skin
  • 49.127 SMART Login Terms of Service
  • 49.128 SMART Authorization
  • 49.129 SMART Definitions Seeding
  • 49.130 Sessions
  • 49.131 Two Factor Authentication
  • 49.132 TLS / SSL (Encryption)
  • 49.133 Transaction Log
  • 49.134 Trusted Client
  • 49.135 User Self Registration
    • 49.6    User Authentication