2026.2 FHIR Highlight - Valid audience SMART Token Values
In v2026.2 (currently available as a Developer Preview), we are adding a feature that can help in a FHIR Endpoint SMART/OAuth authorization - more out-of-the-box flexibility in audience value validation.
Previously we only validated that the aud/audience value matched the FHIR Endpoint base URL, and if it didn't match we failed the request.
You could see in the FHIR Server log an entry such as this:
'Token aud failed validation'
One could override this default behavior but it required coding on the InterSystems IRIS for Health side (or a change on the OAuth server side).
Now in v2026.2 you can easily configure additional valid audience values we can validate against.
See sample screenshot here:
See also related Docs.
This feature could easily solve issues like the one @Shane M Elliott encountered here with Microsoft Entra.