The Epic driver requires an Epic user for username token authentication (Basic Auth) to the Epic database. This user is used by Interconnect to authenticate the driver’s web service calls. Communicate to your Interconnect Admin the ID (EMP .1) and Password (EMP 40) of this user after you create it. Note that both the ID and Password fields are case-sensitive.
This should be an active foreground user and should have a password set to not expire.
It is recommended to create new security classes or to use static security classes (see relevant EMP security points below), as changes to this user’s security impacts the Epic driver’s functionality, and then add this security class to this user record.
The security points for the user must be set using the default security class for a given Epic application. Note that the user’s security will not inherit security class overrides by service area or location.
Epic requires each customer to have a unique Epic identifier to hold the SER record ID for the Epic Driver, similar to an NPI identifier. If a desired type does not already exist, a new Epic type will need to be created.
Ensure that a HL7 assigning authority is configured in the settings for this ID type such that the Type.text is available when reading Provider records.
The Epic driver is scoped for the following web services:
|
Web Service Name |
Web Service Category |
Web Service Class |
|---|---|---|
|
ActivateUser |
Security |
PersonnelManagement |
|
CreateUser (2014) |
Security |
PersonnelManagement |
|
DeleteUser |
Security |
PersonnelManagement |
|
GetImportDataLog |
Core |
DataUtility |
|
GetInternalIdentifier |
Common |
Utility |
|
GetUserPagerID |
Security |
PersonnelManagement |
|
ImportData (2019) |
Core |
DataUtility |
|
InactivateUser |
Security |
PersonnelManagement |
|
Practitioner.Read (R4) |
FHIR |
R4 |
|
Practitioner.Search (R4) |
FHIR |
R4 |
|
PractitionerRole.Read (R4) |
FHIR |
R4 |
|
PractitionerRole.Search (R4) |
FHIR |
R4 |
|
SetReportSelectionCriteria |
Security |
PersonnelManagement |
|
SerUserExternalPasswords |
Security |
PersonnelManagement |
|
SetUserPagerID |
Security |
PersonnelManagement |
|
SetUserPassword |
Security |
PersonnelManagement |
|
UpdateAuthorizedServiceAreas |
Security |
PersonnelManagement |
|
UpdateBIDefaultUser |
Security |
PersonnelManagement |
|
UpdateCommunityUser |
Security |
PersonnelManagement |
|
UpdateFacilityDepartmentList |
Security |
PersonnelManagement |
|
UpdateLoginDepartments |
Security |
PersonnelManagement |
|
UpdateUser (2014) |
Security |
PersonnelManagement |
|
UpdateUserDemographics |
Common |
User |
|
UpdateUserGroups |
Security |
PersonnelManagement |
|
ViewAuthorizedServiceAreas |
Security |
PersonnelManagement |
|
ViewBIDefaultUser |
Security |
PersonnelManagement |
|
ViewCommunityUser |
Security |
PersonnelManagement |
|
ViewCurrentReportSelectionCriteria |
Security |
PersonnelManagement |
|
ViewFacilityDepartmentList |
Security |
PersonnelManagement |
|
ViewLoginDepartments |
Security |
PersonnelManagement |
|
ViewUser (2014) |
Security |
PersonnelManagement |
|
ViewUserGroups |
Security |
PersonnelManagement |
Epic Interconnect needs to be set up to allow the Epic driver to access data in Epic.
|
Recommended Location |
Server: Background Instance: Web Service Host |
|
Role |
General Web Service Host |
|
Cache Listeners |
N/A |
|
Business Services |
Integration-specific web services
See Web Service Information for the full list of web services user by the Epic driver. |
|
Security Policy |
Policy Name: EpicDriverBasicAuth
|
|
Reverse Proxy Pattern(s) |
Be sure you have configured your reverse proxy (see the Configure ARR Manually section in Epic’s Interconnect Setup & Support Guide). Create a rewrite rule for each pattern below using Wildcards instead of the default Regular Expressions:
Each rule should use Wildcards and rewrite to: https://[hostname]/[instance]/{R:0} NOTE:: These Reverse Proxy rules are related to Microsoft’s Application Request Routing (ARR) for IIS. If you use another reverse proxy solution, check with your Client Systems Web and Service Server TS for assistance. |