Implementing FHIR User Lookup via $fhirUser-lookup: Advanced Authentication Flow
FHIR User Lookup - $fhirUser-lookup — Firely Server documentation - Firely Docs
Summary
Firely Auth uses the $fhirUser-lookup custom operation to look up FHIR users (Patient or Practitioner) using claims from external identity providers or local information. This overcomes the limitations of traditional system-level searches, enabling more accurate user identification.
Details
This document details a technical mechanism for resolving the fhirUser claim during Single Sign-On (SSO) login within Firely Auth. Previously, versions before 4.6.0 were limited to executing basic system-level searches using parameters like name or email, which faced limitations in result distinctiveness and data utilization. The new approach utilizes a custom operation, `$fhirUser-lookup`, to delegate the lookup to Firely Server. This process converts relevant claims (from external identity providers) into FHIR search parameters and passes them via POST request. Whether for SSO users or locally created users, this mechanism significantly enhances user identification accuracy and flexibility during authentication. For advanced scenarios, custom plugins can be implemented (e.g., calling an MPI). Enabling the feature requires configuring the plugin path in `PipelineOptions` and verifying its presence in the server's CapabilityStatement. This represents a significant technical advancement for reliable user identity management in healthcare IT systems adhering to FHIR standards.
Original content copyright by respective publishers