Flexpa Portal
Flexpa Portal is an interface designed for developers to manage and provision their test and live mode applications.
You can use the portal to create and manage your applications, configure settings, monitor usage, and collaborate with your team.
#Home
Flexpa Portal's homepage guides you through the steps required to get up and running with Flexpa in Test Mode and then Live Mode. Each step includes additional documentation to reference, or pointers to the correct tabs in Portal to complete the step.
#Assistant
An AI-powered chat interface that can answer questions about your integration, help debug issues, and surface insights from your workspace data.
#Analytics
Track Flexpa Consent conversion rates, claims retrieval success, and endpoint usage over time. Analytics are available in both test and live mode and can be toggled between the two. Requires the analytics:read permission.
#Users
View all users that have connected via Flexpa Consent, monitor their connection health, and investigate issues. You can see data like the access token state, the connected endpoint, and any associated error messages.
Use the Report issue button on any user to send a support request to Flexpa with the relevant context pre-filled. Requires the phi:read permission.
#Errors
Investigate failed patient authorizations and data sync failures. Each entry shows the affected endpoint, error type, and associated sync job details. Use the Report issue button to escalate directly to Flexpa support with context attached. Requires the phi:read permission.
#Data views
Transform FHIR resources into flat, tabular data using ViewDefinition templates. Select a template to preview its columns or export the definition for use in your application. See the ViewDefinition/$run reference for details on using these definitions in your integration.
#API keys
Create and manage your test and live mode API keys. Test mode keys are available immediately and can be rotated at any time. Live mode keys are provisioned after completing the steps in Road to production. Requires the api-keys:read permission to view, and api-keys-test:manage or api-keys-live:manage to rotate.
#Application settings
Manage redirect URLs and webhooks for your application. Redirect URLs control where Flexpa Consent sends users after authorization. Webhooks let you receive real-time notifications of authorization events. Requires the settings:read permission to view, and settings:manage to edit.
#Destinations
Forward FHIR data to an S3 destination after every successful sync. Destinations are configured separately for test and live mode, and each specifies a bucket, region, IAM role ARN, and optional KMS key for encryption. Requires the s3-destinations:read permission to view, and s3-destinations:manage to create or edit.
#Payments & billing
Manage payment details and view invoices via Stripe. Requires the billing:manage permission (Admin only).
#SSO
Configure SAML-based single sign-on for your workspace. Once configured, team members can sign in via your identity provider. Requires the sso:manage permission (Admin only). Contact support@flexpa.com for assistance.
#Roles & permissions
Flexpa Portal uses role-based access control to manage what workspace members can do. Each member is assigned a role that determines their permissions across the workspace.
There are three roles:
- Admin — Full access to all workspace functionality including team management and live mode API keys.
- Member — Access to most workspace functionality except team management and live mode API key management.
- Support — Read-only access to Users, Errors, Analytics, team members, and workspace settings. Intended for customer-facing team members who need to investigate patient issues without access to API keys or configuration changes.
The user who creates a workspace is automatically assigned the admin role. New members invited to a workspace are assigned the member role by default.
Admins can change any member's role at any time from the Team page in Flexpa Portal.
#Permissions
| Permission | Code | Description | Admin | Member | Support |
|---|
| View team | team:read | View workspace members and their roles | ✓ | ✓ | ✓ |
| Team management | team:manage | Invite, remove, and change roles of workspace members | ✓ | | |
| Live mode API keys | api-keys-live:manage | Create, rotate, and manage live mode application keys | ✓ | | |
| Test mode API keys | api-keys-test:manage | Create, rotate, and manage test mode application keys | ✓ | ✓ | |
| View API keys | api-keys:read | View existing API keys for all applications | ✓ | ✓ | |
| SSO configuration | sso:manage | Configure SAML-based single sign-on for the workspace | ✓ | | |
| Analytics | analytics:read | View analytics and usage data | ✓ | ✓ | ✓ |
| PHI access | phi:read | View protected health information in Users and Errors | ✓ | ✓ | ✓ |
| Billing | billing:manage | Manage payment details and view invoices via Stripe | ✓ | | |
| View settings | settings:read | View workspace and application settings | ✓ | ✓ | ✓ |
| Manage settings | settings:manage | Update workspace and application settings | ✓ | ✓ | |
| View destinations | s3-destinations:read | View configured S3 delivery destinations | ✓ | ✓ | |
| Manage destinations | s3-destinations:manage | Create, edit, test, and delete S3 delivery destinations | ✓ | | |
The phi:read permission is granted to Admin, Member, and Support roles. Be mindful when inviting new members — all three roles have visibility into PHI present in Users and Errors.
#Managing team members
Admins can manage their team from the Team tab in Flexpa Portal.
Inviting members — Admins can invite new members by email. Invited users receive an email with a link to join the workspace. New members are assigned the member role by default.
Changing roles — Admins can promote a member to admin, demote an admin to member, or assign the support role from the team page.
Removing members — Admins can remove any member from the workspace except themselves.