Glossary · Security & identity
SMART Backend Services
SMART Backend Services authorization
SMART Backend Services is the part of the SMART App Launch specification for server-to-server access with no user present: the client registers a public key, signs a short-lived JWT and exchanges it for an access token with system/ scopes.
It is the usual way to authorise bulk data export, population-level jobs and system integrations, and it avoids shared passwords because the private key never leaves the client.
Official source
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →