---
schema_version: "1"
id: 61b73ee54273375f8b0c5b944946f6db0f1d7bc08ac9f7be4de0a0afc11dec42
title: SMART on FHIR with Okta
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/healthcare/latest/smart-fhir-okta.md
canonical_url: https://docs.mulesoft.com/healthcare/latest/smart-fhir-okta
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 7480e19618fcca90859a0d7f8ce2516d073dbfe539841d7097f54b3c9481eb68
description: MuleSoft Documentation Site
release: "2.24"
latest: true
---
---
product: Healthcare
version: 2.24
is-latest-version: true
---

# SMART on FHIR with Okta

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

See the
[Okta SMART on FHIR - Implementation Template](https://anypoint.mulesoft.com/exchange/org.mule.examples/hc-accelerator-okta-smartfhir/)
asset, which walks you through how to set up a reference SMART on FHIR implementation on Anypoint
Platform using Okta as the identity provider.

The **S**ubstitutable **M**edical **A**pplications and **R**eusable **T**echnology (SMART) is a
web/mobile app, which is typically embedded in EHR but can also serve as a standalone smartphone
app. SMART on FHIR provides a consistent approach to security and data requirements for health
applications. It also provides a workflow to securely request access to data, receive the data, and
use the data.

SMART on FHIR addresses the following three key aspects:

- Identity and access management by using the OpenID Connect identity management protocol with
  different categories of scopes

  - Clinical data (example, `patient/Observation.read`)

  - Contextual data (example, `launch/patient`)

  - Identity data (example, `openid fhirUser`)

- Access to the data using FHIR based APIs

- Launch workflow for different use cases such as:

  - Patient apps that launch standalone

  - Patient apps that launch from an EHR portal

  - Provider apps that launch standalone

  - Provider apps that launch from an EHR portal

Anypoint platform supports SMART on FHIR in the following ways:

- Identity and access management

  - Provisioning third-party
    [OIDC client provider](https://docs.mulesoft.com/access-management/configure-client-management-openid-task)
    like Okta for identity management

  - Out-of-the-box
    [OpenID Connect token enforcement policy](https://docs.mulesoft.com/gateway/latest/policies-included-openid-token-enforcement)

  - Leverage OAuth provider information in the `authentication` object for custom policy

- Access to the data using FHIR based APIs

  - MuleSoft Accelerator for Healthcare provides FHIR R4 specifications for all the FHIR resources

  - Out-of-the-box
    [cross origin resource sharing (CORS) policy](https://docs.mulesoft.com/gateway/latest/policies-included-cors)
    enables cross origin data exchange.

## See Also

- [Prerequisites](https://docs.mulesoft.com/healthcare/latest/prerequisites)

- [MuleSoft Accelerator for Healthcare](https://docs.mulesoft.com/healthcare/latest/)