Qualifacts Configuration

[AnalogJ]

• [x] Qualifacts InSync - Cannot Login to Sandbox env to retrieve Client ID/Secret
• [x] Qualifacts CareLogic - Waiting
  • Does not support PKCE
• [x] Qualifacts Credible - Working
  • weird base64Binary contentType

---

CareLogic Config

{
  "custom_definition": true,
  "platform_type": "qualifacts-carelogic",
  "authorization_endpoint": "https://integration-cert.qualifacts.org/fhir/smart/authorize",
  "token_endpoint": "https://integration-cert.qualifacts.org/fhir/smart/token",
  "url": "https://api-cert.qualifacts.org/api/fhir/r4",
  "client_id": "aca2e695-ab7b-40c0-b17f-60aaf38d1765",
  "redirect_uri": "https://lighthouse.fastenhealth.com/sandbox/callback/qualifacts",
  "grant_types_supported": [
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "aud": "https://api-cert.qualifacts.org/api/fhir/r4",
  "scopes_supported": [
    "fhirUser",
    "openid",
    "profile",
    "offline_access",
    "patient/AllergyIntolerance.read",
    "patient/CarePlan.read",
    "patient/CareTeam.read",
    "patient/Condition.read",
    "patient/Device.read",
    "patient/DiagnosticReport.read",
    "patient/DocumentReference.read",
    "patient/Encounter.read",
    "patient/Goal.read",
    "patient/Immunization.read",
    "patient/Medication.read",
    "patient/MedicationRequest.read",
    "patient/Observation.read",
    "patient/Patient.read",
    "patient/Practitioner.read",
    "patient/Procedure.read",
    "patient/Provenance.read"
  ],
  "confidential": true,
  "code_challenge_methods_supported": [],
  "issuer": "https://api-cert.qualifacts.org/api/fhir/r4",
  "confidential_endpoint": "1c6f73df-6583-43a1-a64e-d4b37b01dae9",
  "should_override_redirect": true,
  "override_redirect": "qualifacts"
}

[AnalogJ]

Insync Config

{
  "custom_definition": true,
  "platform_type": "qualifacts-insync",
  "should_override_redirect": false,
  "cors_relay_required": false,
  "override_redirect": "",
  "authorization_endpoint": "https://api-cert-stage.insynchcs.com/smartauth/oauth/authorize",
  "token_endpoint": "https://api-cert-stage.insynchcs.com/smartauth/oauth/token",
  "url": "https://api-cert-stage.insynchcs.com/fhir-request",
  "client_id": "xxxxx",
  "redirect_uri": "https://lighthouse.fastenhealth.com/sandbox/callback/qualifacts-insync",
  "grant_types_supported": [
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "aud": "https://api-cert-stage.insynchcs.com/fhir-request/",
  "scopes_supported": [
    "fhirUser",
    "openid",
    "profile",
    "patient/*.read"
  ],
  "confidential": true,
  "confidential_endpoint": "6c6281cb-c7d7-426e-8b5e-12a3f1ce9e8d",
  "pkce": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "issuer": "https://api-cert-stage.insynchcs.com/fhir-request"
}

[AnalogJ]

Requested Production access April 8, 2024

[AnalogJ]

Got a response from Qualifacts:

• Need to confirm if Fasten Health has received patient consent or direction to access electronic health information from providers using Qualifacts software.
• Verification of a current need to access identifiable patient data rather than a future potential need.
• Once consent or direction is confirmed, discussion on how to authenticate and validate the individual's identity for accessing their electronic health information via FHIR APIs.
• Clarification if Fasten Health plans to offer its application as a service to healthcare providers using Qualifacts products.
• Requirement for a valid HIPAA Business Associate Agreement with one of Qualifacts' provider customers.