A Practical Guide to Using Auth0 as an Identity Broker for Epic SMART on FHIR

Auth0 can broker Epic SMART on FHIR logins, but requires treating it as three separate relationships: app↔Auth0, Auth0↔Epic, and Epic-token↔FHIR API. This involves making explicit the SMART-specific pieces that ride along for free in a standard OIDC connection. The architecture is simple, but the design decision to keep these three boundaries separate is crucial for a successful integration.