No 'Best Way' for FHIR: Considerations on Access Control Implementation

Summary

The author points out that discussions around authentication and authorization (AuthN/AuthZ) in FHIR tend to focus heavily on Smart-on-FHIR. However, the article argues that this is not necessarily the optimal solution for system-to-system integration or Role-Based Access Control (RBAC), especially when the patient is not a user.