[Source]: PointClickCare - 4k R4

[AnalogJ]

EHR/Platform Name

PointClickCare

CHPL Website

https://chpl.healthit.gov/#/listing/10246

Developer Documentation

https://fhir.pointclickcare.com/
https://fhir-qa.pcc-labs.com/PointClickCare.html

Endpoint List

https://fhir.pointclickcare.com/R4endpoints.json

Example Patient Portal Login Website

No response

Developer Portal

https://developer.pointclickcare.com/spa/register
https://developer.pointclickcare.com/spa/login?redirect=/

Sandbox Patient Credentials

None Provided

Fasten Sources Definition

{
  "custom_definition": true,
  "platform_type": "pointclickcare",
  "should_override_redirect": false,
  "cors_relay_required": false,
  "override_redirect": "",
  "authorization_endpoint": "https://connect.pointclickcare.com/fhir/oauth/authorize",
  "token_endpoint": "https://auth-usa.sbx.unify.chbase.com/api/token ",
  "url": "https://connect.pointclickcare.com/fhir/R4/3f41607b-38a3-40af-b291-bc5012f82026",
  "client_id": "xxxx",
  "redirect_uri": "https://lighthouse.fastenhealth.com/sandbox/callback/pointclickcare",
  "grant_types_supported": [
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "aud": "https://connect.pointclickcare.com/fhir/R4/3f41607b-38a3-40af-b291-bc5012f82026",
  "scopes_supported": [
    "fhirUser",
    "openid",
    "launch/patient",
    "patient/Patient.read"
  ],
  "confidential": false,
  "confidential_endpoint": "",
  "pkce": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "issuer": "https://connect.pointclickcare.com/fhir/R4/3f41607b-38a3-40af-b291-bc5012f82026"
}

Platform Developer Readiness Checklist

• developer documentation
• sandbox - endpoint published
• sandbox - client registration
• sandbox - test patient username & password
• sandbox - no fees
• sandbox - inferno testing passed
• production - client registration
• production - endpoint list published
• production - endpoint catalog/health system info published
• production - no fees
• production - automatic client distribution

Status:

• No sandbox user credentials available. Messaged support for advice. May 16, 2024
• 12/21/2024 - Emailed about HTI-1 Compliance timeframe - asked where Endpoint list is.
• 12/24/2024 - Endpoint list provided and published. However sandbox username/password credentials not availabile.
• 12/31/2024 - Had a conversation with the PointClickCare team. They provide a new USCDI developer experience. Have to register a new account and request approval.
  • Notes: They now require client certificate based authentication. Which is not part of the spec.
  • Notes: They do not publish branding information with their Organization catalog.
• 01/13/2025 - Working patient credentials working in portal. Next we need to integrate with Sandbox
• 01/18/2025 - Messaged PCC team, their API does not pass Inferno tests. They do not return a valid Patient ID in their token response or ID token. See comment below.

[AnalogJ]

Opened a Information Blocking Complaint against PointClickCare: CFS-5367

[AnalogJ]

had a conversation with PointClickCare. They do not have a sandbox but are working on revamping their developer registration process (which will include a new sandbox + USCDI endpoints).
Timeline: "couple of months"

[AnalogJ]

I think one of the big issue is that when provided with the launch/patient scope, your IDtoken returns a "RelatedPerson" instead of a Patient ID (and it looks to be hardcoded to an invalid ID "RelatedPerson/1") This means that apps do not have a Patient Identifier they can use to query your API. It seems like there might be some other issues, as well, but this is the big one.

Here's your ID Token payload

{
	...
  "iss": "https://connect.pointclickcare.com/fhir",
  "exp": 1737244606,
  "iat": 1737241006,
  "fhirUser": "https://connect2.pointclickcare.com/fhir/R4/6f931546-92c8-41d6-9da4-e59cc5926726/RelatedPerson/1",
}