Healthcare
Identity for healthcare.
Built for HIPAA.
SMART on FHIR authorization, patient consent management, HIPAA-ready audit trails. Built for EHR integration.
Available on Pro and above. See pricing
SMART on FHIR
SMART on FHIR launch flow
Doctor opens a patient chart in the EHR. AuthFI handles the SMART launch, consent, and token issuance.
Doctor opens patient chart in EHR
EHR: Dr. Smith opens Patient: John Doe (MRN: 12345) -> Launches "Lab Results" app from toolbar
SMART launch to AuthFI
GET /authorize? scope=launch/patient patient/Observation.read &launch=xyz789 &client_id=lab-results-app
Token issued with patient context
{
"sub": "usr_drsmith",
"fhirUser": "Practitioner/123",
"patient": "Patient/456",
"scope": "patient/Observation.read"
}App accesses FHIR resources
GET /fhir/r4/Patient/456/Observation Authorization: Bearer eyJhbG... -> 23 Observation resources returned
Consent
Patient consent management
Patients control who sees their data. Granular scope-level consent.
Lab Results App
requests access to your health data
HIPAA audit
HIPAA-ready audit trail
Immutable logs
Every access to patient data is logged. Who, what, when, from where. Cannot be modified or deleted.
FHIR scope tracking
Every scope grant, every resource access, every consent decision tracked with full context.
Exportable reports
Generate audit reports by patient, by provider, by time range. CSV, JSON, or direct SIEM integration.
SMART scopes
Supported SMART scopes
| Scope | Description | Category |
|---|---|---|
| patient/*.read | Read any FHIR resource for the patient in context | Patient |
| patient/*.write | Write FHIR resources for the patient | Patient |
| patient/Observation.read | Read only vital signs and lab results | Patient |
| launch/patient | Receive patient context during EHR launch | Launch |
| launch/encounter | Receive encounter context | Launch |
| openid fhirUser | FHIR resource reference for the user | Identity |
Get started
Ready to get started?
Free for 5,000 monthly active users. No credit card required.