{
  "description": "This CapabilityStatement describes the expected capabilities of an intermediary server that conforms to the conventions of the Hybrid / Intermediary Exchange FHIR implementation guide.",
  "_filename": "CapabilityStatement-exchange-routing-intermediary.json",
  "package_name": "hl7.fhir.us.exchange-routing",
  "format": [ "xml", "json" ],
  "date": "2022-05-17T00:00:00-05:00",
  "publisher": "HL7 International - FHIR Infrastructure",
  "patchFormat": [ "application/json-patch+json" ],
  "fhirVersion": "4.0.1",
  "jurisdiction": [ {
    "coding": [ {
      "code": "US",
      "system": "urn:iso:std:iso:3166",
      "display": "United States of America"
    } ]
  } ],
  "name": "ExchangeRoutingIntermediaryCapabilityStatement",
  "type": null,
  "experimental": "false",
  "resourceType": "CapabilityStatement",
  "title": "Exchange Routing Intermediary Capability Statement",
  "package_version": "1.0.0",
  "status": "active",
  "id": "f9375c5f-2936-4f3c-babd-f82d7820c07e",
  "kind": "requirements",
  "implementationGuide": [ "http://hl7.org/fhir/us/exchange-routing/ImplementationGuide/exchange-routing" ],
  "url": "http://hl7.org/fhir/us/exchange-routing/CapabilityStatement/exchange-routing-intermediary",
  "version": "1.0.0",
  "contact": [ {
    "name": "HL7 International - FHIR Infrastructure",
    "telecom": [ {
      "value": "http://www.hl7.org/Special/committees/fiwg",
      "system": "url"
    } ]
  }, {
    "name": "Frank McKinney",
    "telecom": [ {
      "value": "frank.mckinney@pocp.com",
      "system": "email"
    } ]
  } ],
  "rest": [ {
    "mode": "server",
    "security": {
      "description": "1. Communication security implemented by the intermediary server SHALL conform with the guidelines stated in [FHIR Security](https://www.hl7.org/fhir/security.html) for all exchanges covered in this IG. When using TLS: the inbound gateway intermediary SHALL hold the TLS certificate for the destination’s public FHIR service base URL the certificates exchanged by the destination system, and any delegated intermediaries SHALL reflect their servers’ private URLs. \n1. Security tokens generated by the destination for use by the originator SHALL be forwarded by the intermediary server to the originating client. \n1. The intermediary server MAY implement the [HL7 / UDAP Security for Scalable Registration, Authentication, and Authorization FHIR Implementation Guide](http://hl7.org/fhir/us/udap-security/2021Sep). 1. For general security considerations refer to [FHIR Security and Privacy Considerations](https://www.hl7.org/fhir/secpriv-module.html)."
    },
    "documentation": "When participating in exchanges described in the Hybrid / Intermediary FHIR IG, the intermediary server **SHALL** pass FHIR resources returned by the destination server to the originator unchanged. 1. Implement RESTful behavior according to the FHIR specification. 1. Support the JSON source format. \nWhen participating in exchanges described in the Hybrid / Intermediary FHIR IG, the intermediary server, the intermediary server **SHOULD**: 1. Support the XML source format."
  } ]
}