Access Management
Third-party Vendor Portal
- A new page called Bulletin Board has been added where communications to third party vendors can be posted including by not limited to release notes, planned upgrades, future enhancements etc.
- A new feature has been added call Dashboard Banner. This feature allows administrators to create time communications for third party vendors that will show at the top of the Dashboard page in the vendor portal. These communications will be used for alerts, such as planed system downtimes.
- Email remainders have been enabled for Vendors
Operations Admin Portal
- A new page called Bulletin Board & Dashboard Banner has been created to allow administrative users to add Bulletin board or Dashboard banner items to the Vendor portal to aid in communication with 3rd party vendors.
- Enabled the CSA group access where the CSA member can access only the member lookup menu.
- Email remainders have been enabled for Admin
Authorization Server
- Asymmetric token generation changes to remove PHI (Medicaid ID) information.
Accessibility Remediation:
Fixed High priority accessibility remediation updates:
Flex Portal:
- Added reading capability on the logos.
- Added the Extend Timeout button in the timeout popup and made it accessibility compliant.
- Updated contrast ratio on header, footer and side-menu from 3:9:1 to 4.5:1
Consent Flow:
- Updated accessibility requirements to read the labels with their corresponding checkboxes.
- Added Readout error message to enter complete name on Acknowledge page and opening of links in new windows.
- Shifted Consent text above Allow or Deny buttons.
Directory APIs
Public Provider Directory APIs
Implementation Guide: DaVinci PDEX Plan Net: http://hl7.org/fhir/us/davinci-pdex-plan-net/
Version: Davinci PDEX Plan Net, Release 1 - US Realm STU
Package: hl7.fhir.us.davinci-pdex-plan-net#1.0.0 based on FHIR 4.0.1. Generated 2020-12-20
1. Practitioner
a. Ability to call public URLs for Practitioner resource without any authorization token
2. Practitioner Role
a. Ability to call public URLs for Practitioner Role resource without any authorization token
3. Organization/Network
a. Ability to call public URLs for Organization/Network resource without any authorization token
4. Organization Affiliation
a. Ability to call public URLs for Organization Affiliation resource without any authorization token
5. Location
a. Ability to call public URLs for Location resource without any authorization token
6. Healthcare Service
a. Ability to call public URLs for Healthcare Service resource without any authorization token
7. Endpoint
a. Ability to call public URLs for Endpoint resource without any authorization token