Epic EMR Help Button SSO Integration

[Community Alums]

My Organization is looking to set up a help button in EPIC EMR to launch into ServiceNow to Create Incidents using values from epic to autofill Incident variables and perform routing to the correct support groups based on their workstation duty and logged in user ect.

One thing I haven't seem to have figured out is how to authenticate into SN through epic through some kind of SSO. Has anyone does this previously?

Any insight onto how this is achieved would be great thanks!

[Mike B_ Fisher]

Hi Jacob. Sounds like you are building this solution from scratch? As a ServiceNow Solutions Consultant, I would advise you to look at our EMR Help solution (if you haven't already). It provides the functionality you describe, but with some distinct advantages:
1. Our solution is supported by ServiceNow, which means we perform all the testing for new versions of both ServiceNow and Epic and we provide ongoing support.

2. Pass-through authentication is supported OOTB.
3. Instead of launching ServiceNow in a separate browser window, EMR Help opens a frame within Epic Hyperspace that allows clinicians to create and submit an Incident without leaving Epic.

EMR Help on the ServiceNow Store

High level overview

If you're interested, talk to your ServiceNow Account Executive or Solution Consultant who can provide more information and demonstrate the capabilities.

Mike Fisher

Healthcare Solutions Consultant

ServiceNow

[Community Alums]

We have looked into this as an option due to the support offered and have received demos from partners and will likely go this route.
Looking for more of a technical explanation of how authentication is achieved from someone that has previously implemented this to address internal questions. The documentation from ServiceNow that I have been able to find does not cover this topic.

[Mike B_ Fisher]

Check out this KB article "How to Configure Digest Token Authentication for EMR Help with Epic Hyperspace": https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1002504

[Community Alums]

Awesome thanks!

I figured it was achieved via digest token. Looks like it uses Epics Crypt String Method to Encrypt the User Name attribute then on the ServiceNow Side it decrypts it with a custom Digest token SSO Script to authenticate using the encryption key to check if the username matches the decrypted version. Very cool solution! Definitely not something that epic talks about being an authentication method for 3rd party applications. Looks like most take the approach of setting up SAML within epic for other applications if authentication is required. 

Much appreciated!