How to setup SMART on FHIR

Question

I am trying to configure SMART on FHIR on a Azure FHIR Store. I have created the SPA and working on the redirect URL. I need help configuring the API Management service. I need help configuring /launch /authorize for a patient which is a guest user in AD. I am getting the following error

AADSTS500011: The resource principal named https://jovyfhirworkspace-jovyfhirservice.fhir.azurehealthcareapis.com/launch was not found in the tenant named cf96a540-eb2f-430c-8134-e66cc75b0cba. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.

Answer 1

@Anil Kemisetti,

As per the error message/code: AADSTS500011, the resource principal was not found in the tenant. That means Microsoft Entra access token generated via https://login.microsoftonline.com/{{tenantid}}/oauth2/token was not matching with the tenant that FHIR is located.

1. Decode the token generated in the Postman via https://jwt.ms and check if tid value i.e., Tenant ID, is correct.
2. Compare the TID with tenant id of the subscription for the health care workspace in the azure portal and check if both the IDs matches.

You need to have the client application registration in the same tenant as FHIR resource and assign right permissions and roles for the application.