For AI agents: the documentation index is at /docs/aidbox/llms.txt. A Markdown version of this page is available at /docs/aidbox/access-control/authorization/smart-on-fhir.md or by requesting it with the Accept: text/markdown header.
Aidbox Docs

SMART on FHIR

This functionality is available starting from version 2411.

SMART on FHIR is a framework that describes a set of foundational patterns based on OAuth 2.0 for client applications to authorize, authenticate, and integrate with FHIR-based data systems.

Aidbox can take either side of it: it can be the authorization server that authenticates the user and issues the access token, or it can accept tokens issued by another server and enforce what they allow.

Client authorization

How an application obtains a token: App Launch for user-facing apps, Backend Services for server-to-server access.

Client authentication

How a confidential client proves its identity: a client secret or a signed JWT.

Scopes

What a token may do, down to search parameters and a single patient.

Examples

Aidbox and Keycloak

EHR and standalone launch with a demo launcher.

Smartbox and Keycloak

The same launch flows with Smartbox.

Inferno test kit

Pass the SMART App Launch Test Kit.

Patient Access API

Enable SMART on FHIR for patient-facing access.

Last updated: