Finnish Implementation Guide for SMART App Launch
1.0.1-cibuild - ci-build
Finnish Implementation Guide for SMART App Launch
1.0.1-cibuild - ci-build
Finnish Implementation Guide for SMART App Launch, published by HL7 Finland ry. This guide is not an authorized publication; it is the continuous build for version 1.0.1-cibuild built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/fhir-fi/finnish-smart/ and changes regularly. See the Directory of published versions
| Official URL: https://hl7.fi/fhir/finnish-smart/ImplementationGuide/hl7.fhir.fi.smart | Version: 1.0.1-cibuild | |||
| Draft as of 2024-09-05 | Computable Name: FinnishSmart | |||
This is the Finnish implementation guide for the SMART App Launch mechanism.
This is an R4 IG. None of the features it uses are changed in R4B, so it can be used as is with R4B systems. Packages for both R4 (hl7.fhir.fi.smart.r4) and R4B (hl7.fhir.fi.smart.r4b) are available.
It builds on top of both the HL7 SMART App Launch and the HL7 International Patient Access specifications.
| IG | Package | FHIR | Comment |
|---|---|---|---|
  Finnish Implementation Guide for SMART App Launch | hl7.fhir.fi.smart#1.0.1-cibuild | R4 | |
 HL7 Terminology (THO) | hl7.terminology.r4#6.0.2 | R4 | Automatically added as a dependency - all IGs depend on HL7 Terminology |
| FHIR Extensions Pack | hl7.fhir.uv.extensions.r4#5.1.0 | R4 | Automatically added as a dependency - all IGs depend on the HL7 Extension Pack |
| International Patient Access | hl7.fhir.uv.ipa#1.0.0 | R4 | |
 SMART App Launch | hl7.fhir.uv.smart-app-launch#2.1.0 | R4 |
SMART App Launch is the mechanism through which third-party apps can be integrated with Electronic Health Record (EHR) systems. It specifies how apps gain knowledge of which practitioner or patient wants to access which patient's information, and how the app obtains the access token that can then be used to access further information.
You can think of it as a single-sign-on (SSO) mechanism, but it is actually a bit more and extends to communicating the context too.
When launched, the third party apps can either stand on their own or be embedded into the views of the EHR or a patient portal.
The SMART specification is suitable for both web based apps and native apps. It makes a distinction between public and confidential apps.
In addition to launching apps, the main SMART specification defines a profile for backend services.
There is a separate implementation guide for Finnish Base Profiles that defines the Finnish base profiles for some of the key FHIR resources.
The SMART App Launch specification is already a globally applicable specification. The International Patient Access specification adds some more constraints and details to it. Do we really need something more?
We have found out that there are still some places in both of these specifications that allow some implementation feedom but may be tricky for app developers to support. In this implementation guide, we aim to provide clarity on topics like how an app best learns the organization or organization unit the practitioner launching the app works for (when launching the app).
We believe we can get some of these details sorted out more efficiently in the local Finnish context. We still aim to feed our learnings and developments with the wider SMART community and help get parts of them adopted to the SMART and IPA specifications.
Both HL7 FHIR and the SMART App Launch mechanism are used in Finland by many implementations.
Apotti is a sizeable Epic installation in Finland. Epic is one of the biggest electronic health record system vendors globally. SMART App Launch is the primary mechanism through which third-party apps SHOULD be integrated with Apotti. See also the Apotti Ecosystem.
The Esko APTJ by Esko Systems is one of the prominent Finnish electronic health record systems. It uses both HL7 FHIR APIs and the SMART specification for internal communication between the components of the system. Esko also offers a SMART App Launch method to interact with third party systems.
The Kanta PHR is a personal health record platform for storing and exchanging health and wellbeing data produced and governed by citizens. It uses a security mechanism that is pretty close to SMART App Launch, but with some subtle differences.
Health Village is a publicly funded group of services. It has built in HL7 SMART App Launch capability for interacting with third party apps.
InterSystems Finland has built an adapter through which existing CCOW based systems can launch SMART apps. The adapter has been used at least by Vitec Acute and Lifecare EHRs.
Furthermore, both the FHIR Demo 2022 and the FHIR Demo 2023 showcases presented numerous integrations implemented between FHIR servers and apps, all based on HL7 FHIR and most utilizing the SMART specification.
Even those showcases did not cover the full extent to which the HL7 FHIR and the SMART App Launch specifications are being used in Finland. There's a lot going on!
To learn about the current status, please contact HL7 Finland. We're happy to give you an overview.
The base FHIR specification works on a global scope. It is hard to achieve consensus on many things globally. However, smaller regions and jurisdictions are in a better position to agree on tighter constraints. We take benefit of this and move faster with things that we can agree on on a local level.
We are also committed to sharing our learnings with the wider FHIR community and get parts of the definitions adopted in the international main specifications.
We hope that publishing examples gives new implementers a glance of how systems exchange information. However, implementers are strongly encouraged to read the main SMART specification and the relevant parts of the IPA specification. This implementation guide should not be used as a comprehensive specification on which to build implementations.
The profiling work is performed in a project driven by HL7 Finland. See the announcement (in Finnish), the running memo, and some more details. We warmly welcome new participants to the project. You may even be compensated for your efforts.
The team involved in creating the first version of the implementation guide includes
Each published major version of this implementation guide goes through the ballot and voting processes of HL7 Finland.
We want this implementation guide to be useful for you.
If you are implementing SMART App launch in a system or application that is meant to be used in Finland and are thinking of some implementation details, you are probably in the right place and this implementation guide should help you with those questions. If this implementation guide in any way fails to give you the answers you are looking for, we'd love to hear about it so we can make it better. Please do be in touch in one of the ways listed below.
The source code of this implementation guide is maintained in a publicly accessible repository in GitHub. Issues opened in that GitHub repo are very welcome. They help the team pick up any proposed changes or additions and to discuss them publicly.
Pull requests are even better. If you are in a position to suggest how exactly your proposal should be implemented in the specification, do it! It helps the team maintaining the implementation guide a great deal.
Please also consider joining the development effort. This is the best way to affect the outcome of the profiling work. You may even be compensated for your efforts. Please be in touch with HL7 Finland to discuss options, if this even remotely interesting for you.
The best implementation guide is the one that reflects the views and the consensus of the whole FHIR community!
This implementation guide defines data elements, resources, formats, and methods for exchanging healthcare data between different participants in the healthcare process. As such, clinical safety is a key concern. Additional guidance regarding safety for the specification’s many and various implementations is available at https://www.hl7.org/FHIR/safety.html.
Although the present specification does give users the opportunity to observe data protection and data security regulations, its use does not guarantee compliance with these regulations. Effective compliance must be ensured by appropriate measures during implementation projects and in daily operations. The corresponding implementation measures are explained in the standard. In addition, the present specification can only influence compliance with the security regulations in the technical area of standardisation. It cannot influence organisational and contractual matters.
This document is licensed under Creative Commons CC0 1.0 Universal Public Domain Dedication.
This implementation guide contains and references intellectual property owned by third parties ("Third Party IP"). Acceptance of these License Terms does not grant any rights with respect to Third Party IP. The licensee alone is responsible for identifying and obtaining any necessary licenses or authorizations to utilize Third Party IP in connection with the specification or otherwise.
HL7®, HEALTH LEVEL SEVEN®, FHIR® and the FHIR 
® are trademarks owned
by Health Level Seven International, registered with the United States Patent and Trademark Office.
See also http://hl7.org/fhir/license.html.
This publication includes IP covered under the following statements.
IG © 2022+ HL7 Finland ry. Package hl7.fhir.fi.smart#1.0.1-cibuild based on FHIR 4.0.1. Generated 2024-09-05
Links: Table of Contents
| QA Report| Version History
| 
| Source
| Propose a change