SMART on FHIR Best Practices

Guidelines for implementing SMART on FHIR to enable third-party applications to securely connect to EHR data.

Items marked with this icon are required by ONC certification criteria and must be implemented to maintain compliance.

SMART App Launch
Best practices for SMART app launch framework

Support SMART App Launch Framework v1.0.0

Implement the SMART App Launch Framework to enable third-party applications to be launched from within the EHR.

Support standalone launch

Enable applications to launch from outside the EHR context and connect to the EHR API.

Support EHR launch

Enable applications to be launched from within the EHR context, with patient context passed to the app.

SMART Scopes
Best practices for SMART authorization scopes

Support core SMART scopes

Implement support for core SMART scopes including patient/*.read, user/*.read, and launch scopes.

Support granular scopes

Enable applications to request access to specific resource types with granular scopes.

Document supported scopes

Clearly document all supported scopes and their functionality in your API documentation.