Setting up OAuth2 Client for Epic on FHIR Interoperability
Setup OAuth2 Client for iris-http-calls to Epic on FHIR -
InterSystems demonstrated the setup of an OAuth2 client for making FHIR calls to Epic.
Summary
The author describes the technical process of setting up an OAuth2 client to achieve system interoperability with Epic using FHIR. This involved deploying iris-http-calls in a Docker environment on AWS and successfully implementing the access token acquisition process using JWT authentication and the Client Credentials Grant Type.
Key Players
Details
This article provides a detailed technical tutorial on establishing secure data connectivity between systems, specifically focusing on integrating InterSystems IRIS for Health with Epic via FHIR. The author first generated an X.509 key pair (private/public) and deployed these credentials within an AWS Docker container. The core process involves configuring the OAuth2 Client within IRIS: setting the Issuer Endpoint, defining the client configuration details (Application Name, Confidential Client Type), and critically selecting 'Client Credentials' grant type combined with 'private key JWT' authentication. The technical steps emphasize using RS384 for signing algorithms and correctly populating both the general client credentials and the specific JWT settings. This comprehensive setup allows an application to securely obtain access tokens required for making FHIR API calls, demonstrating a robust implementation of industry-standard security protocols in healthcare IT.
Technology Note
FHIR(Fast Healthcare Interoperability Resources)は医療データ交換の国際標準。このエントリの関連技術: FHIR
Original content copyright by respective publishers