FHIR Azure API Authentication Issue with Postman

[swapnilbjadhav]

{
"resourceType": "OperationOutcome",
"id": "b1620bc940fca840a69fd351f4e8e2e4",
"issue": [
{
"severity": "error",
"code": "login",
"diagnostics": "Authentication failed."
}
]
}

the above result is from Postman when trying to do get on Patient resource. I believe there is some change in the authentication workflow. Hence, even after following the documentation the authentication fails. Anyone facing this similar issue for Azure FHIR Api?

I am facing the issue of 403 Forbidden through postman tutorial when trying to access /Patient resource.
In my audience i have added a valid URI and Allowed Object IDs is disabled. Token is also getting generated successfully through postman.

Below is the Authentication Setting

Authority: https://login.microsoftonline.com/XXXXXXXXXXXXXXXX
Audience: https://XXXXXXXX.azurehealthcareapis.com
Allowed Object IDs: diabled
note: Use Azure Access Control (IAM) to grant access your FHIR service when using the subscription tenant for data plane RBAC.
SMART on FHIR proxy: unchecked

{
"resourceType": "OperationOutcome",
"id": "ee7e49d7d4cf234381f938e8d1570f5b",
"issue": [
{
"severity": "error",
"code": "forbidden",
"diagnostics": "Authorization failed."
}
]
}

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: a9d1459d-b21b-7a56-d484-50c20a95c628
• Version Independent ID: 9adb2b55-d08f-aa34-7d6f-5fa87e1603ae
• Content: Postman FHIR server in Azure - Azure API for FHIR
• Content Source: articles/healthcare-apis/access-fhir-postman-tutorial.md
• Service: healthcare-apis
• Sub-service: fhir
• GitHub Login: @hansenms
• Microsoft Alias: mihansen

[AjayKumar-MSFT]

@swapnilbjadhav, Thanks for the question! We are taking a look into this and will get back to you soon.

[hansenms]

If you have allowed object ids disabled, you are using Azure RBAC, which means that the user or service principal that the token is issued for must be assigned a FHIR data plane role:

https://docs.microsoft.com/en-us/azure/healthcare-apis/configure-azure-rbac

[swapnilbjadhav]

Thanks it's working now. we can close this issue

[hansenms]

#please-close

[LaRiffle]

Hey!
I'm getting the same error, I have added the app to a Role following the advice of @hansenms but I still have the same error... Any advice?

[shahhussain88]

https://www.youtube.com/watch?v=1ORQGcPht5Q
watch this its easy to understand

[Wiiki0807]

we must add both "user" and "app" in FHIR IAM to resolve auth fail issue.