MicrosoftMicrosoftlivaz, you mentioned the fhir-proxy with Azure AD supports the standalone limited access scenario for ONC g10 certification. I'm trying to implement this now, and have hit a snag:
The Azure AD consent prompt is an all or nothing question (app asks user to consent to a list of permissions, user can either accept or deny all). The limited access scenario (g)(10)(v)(A)(10,11,12) seems to require that the user is presented a list of permissions with the ability to accept or deny each one. To my knowledge this is not possible using Azure AD.
Has anyone successfully used this architecture to fully pass the certification tests for SMART on FHIR? Any suggestions?
