Finnish Implementation Guide for SMART App Launch, published by HL7 Finland ry. This guide is not an authorized publication; it is the continuous build for version 1.0.1-cibuild built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/fhir-fi/finnish-smart/ and changes regularly. See the Directory of published versions

Examples

CapabilityStatement

• Apotti CapabilityStatement, an example capability statement captured from Apotti's ecosystem environment.

Launch Sequence

• Apotti EHR Launch by a Practitioner, an example data flow when an app is launched from an EHR system. Note that the AuditEvent resource instance has minimal content. Most of the content of the example is in the human readable introductory part of the example page.

Please do not implement the SMART App Launch mechanism based on examples! Examples in this implementation guide are meant to offer additional clarity on how the SMART App Launch mechanism works in certain circumstances. However, to appreciate all the details of the security mechanisms involved, all implementers of the SMART App Launch mechanism really need to study and understand the main SMART App Launch specification, and the underlying OAuth2 and OpenID Connect specifications. Do give information security the attention it deserves!