Set up SSO with Auth0

This guide expands Set up SMARTbox.

Create an application in Auth0

To create an application:

• Login to the Auth0
• Open the Applications page
• Press the Create Application button
• Give the name of the application
• Choose the type of application. Consider, Native type
• Press the Create button

After the app is created add the details:

• Application callback URLs: http://localhost:8888/tenant/my-clinic/patient/auth/callback/?
• Press the Save Changes button

Open the Advanced settings of the application and copy:

• OAuth Authorization URL
• OAuth Token URL
• OAuth User Info URL

Create a user in Auth0

To create a new user:

• Open the Users page
• Press the Create User button
• Provide email and password
• Press the Create button

Copy the user_id. It looks like auth0|6310e2d143b66b669906d775

Create a Tenant in Aidbox Portal

As the administrator of the Portal create an Tenant resource. Please, see What is Tenant for more details.

id: my-clinic
resourceType: Tenant
name: My Clinic Name
logoUrl: https://example.com/my-clinic-logo.png
identityProvider:
  scopes:
    - user
    - read:org
    - openid
    - profile
  system: aidbox:tenant:my-clinic
  userinfo_endpoint: https://dev-nei1uq73.us.auth0.com/userinfo
  authorize_endpoint: https://dev-nei1uq73.us.auth0.com/authorize
  token_endpoint: https://dev-nei1uq73.us.auth0.com/oauth/token
  client:
    id: ziW...lv0
    secret: 7HoQ...gvb

Create a user in Aidbox Portal

The user should be linked to a Patient to be able to launch SMART Apps. And at the same time, it should be related to the Auth0 user. Please, see What is Tenant for more details.

id: test-user-1
resourceType: User
identifier:
  - value: auth0|6310e2d143b66b669906d775
    system: aidbox:tenant:my-clinic
fhirUser:
  id: test-pt-1
  resourceType: Patient
roles:
  - type: patient
active: true
meta:
  tenant:
    id: my-clinic
    resourceType: Tenant

Checking it works together

• Open the link https://f81a-5-161-99-84.ngrok.io/tenant/my-clinic/patient/portal in the Invisible (Stealth) mode
• Click the Sign In link
• Enter email and password of the user, we created in the Auth0
• Press the Login button

Launch the Growth Chart

• On the SMARTbox page Applications
• Press the Launch button against the Growth Chart application
• Press the Allow button on the consent screen
• Get the Growth Chart works