Standalone launch sequence

Alternatively, in SMART's standalone launch flow (shown above), a user selects an app from outside the EHR, for example by tapping an app icon on a mobile phone home screen. This app will launch from its registered URL without a launch id.

In order to obtain launch context and request authorization to access FHIR resources, the app discovers the EHR authorization server's OAuth authorize and token endpoint URLs by querying the FHIR endpoint for the EHR's conformance statement.

The app then can declare its launch context requirements by adding specific scopes to the request it sends to the EHR's authorization server. The authorize endpoint will acquire the context the app needs and make it available.

For example:

If the app needs patient context, the EHR's authorization server may provide the end-user with a patient selection widget. For full details, see SMART launch context parameters.

• launch/patient - to indicate that the app needs to know a patient ID
• launch/encounter - to indicate the app needs an encounter