Louisiana: ReportStream to Ochsner

[sfradkin]

As Ochsner, so that I can review and provide patient care based on NBS findings, I need sample result messages sent by ReportStream staging to appear in my EHR test environment.

Pre-conditions

• Out of scope: Production connectivity

Acceptance Criteria

• [ ] A sample ORU message sent by ReportStream staging to the Ochsner receiver appears in their test EHR environment.
• [ ] Transmission uses TLS 1.2 or greater and a strong cipher

Tasks

• [x] Register a non-production certificate in fhir.epic.com (already done as we'll be using the shared ReportStream app registration)
• [ ] Obtain the API endpoint for Ochsner's non-production Epic environment
• [ ] Configure a receiver for Ochsner
• [ ] Notify Ochsner that we'll be sending sample results messages
• [ ] Test connection by sending messages manually
• [ ] Verify receipt of messages
• [ ] Testing staging connectivity via REST

Definition of Done

• [ ] Documentation tasks completed
  • [ ] Documentation and diagrams created or updated
  • [ ] Implementation guide (/ig folder)
  • [ ] ADRs (/adr folder)
  • [ ] Main README.md
  • [ ] Other READMEs in the repo
  • [ ] If applicable, update the ReportStream Setup section in README.md
  • [ ] Threat model updated
  • [ ] API documentation updated
• [ ] Code quality tasks completed
  • [ ] Code refactored for clarity and no design/technical debt
  • [ ] Adhere to separation of concerns; code is not tightly coupled, especially to 3rd party dependencies
  • [ ] Code is reviewed or developed by pair; 1 approval is needed but consider requiring an outside-the-pair reviewer
  • [ ] Code quality checks passed
• [ ] Security & Privacy tasks completed
  • [ ] Security & privacy gates passed
• [ ] Testing tasks completed
  • [ ] Load tests passed
  • [ ] Unit test coverage of our code >= 90%
• [ ] Build & Deploy tasks completed
  • [ ] Build process updated
  • [ ] API(s) are versioned
  • [ ] Feature toggles created and/or deleted. Document the feature toggle
  • [ ] Source code is merged to the main branch

[JohnNKing]

We've started the app registration on fhir.epic.com and have a staging certificate that we can use for the HCO.

[JohnNKing]

I've requested HL7v2 API access via email. Still waiting on that...

See next steps in https://www.notion.so/flexion-cdc-ti/Epic-EHR-Onboarding-Steps-9a4cd71b2e4b49558013eda9df87427a

[JohnNKing]

Hl7v2 API permissions granted!

[JohnNKing]

Prod and non-prod keys shared with Ochsner.

Next steps also sent via email:

1. Ochsner to request an app download via Epic for the non-production client ID above.
2. ReportStream should receive a notification and will approve your request.
3. ReportStream to upload a certificate to fhir.epic.com for authentication to your endpoint.
4. Ochsner will need to share the non-production authentication and results delivery endpoints (e.g. HOSTNAME.epichosted.com/FhirProxy/oauth2/token and HOSTNAME.epichosted.com/ENVIRONMENT/api/epic/VERSION/EDI/HTTP/HL7v2/NUMBER)

[JohnNKing]

Blocked waiting on Ochsner. See steps required in prior comment.

[JohnNKing]

Blocked pending a 3rd Party Organizational Risk Questionnaire

[JohnNKing]

Still blocked pending a 3rd Party Organizational Risk Questionnaire

[basiliskus]

Reviewed at Planning. @JohnNKing Could you provide an update?

[JohnNKing]

Reviewed at Planning. @JohnNKing Could you provide an update?

@basiliskus Still blocked -- the 3rd Party Organizational Risk Questionnaire is pending completion by ReportStream.

I've also updated the ticket description based on our experience with Epic connectivity from UCSD.