Setup of Organizations and Journals
Enhetsregisteret (https://virksomhet.brreg.no/nb/oppslag/enheter) contains information about all organizations and sub-organizations in Norway, including information about Organisasjonsnummer (Org.nr) that identifies each organization and sub-organization.
HelseID is closely related to Enhetsregisteret. When users logg into the EPJ that represent their organization, it is the Org.nr from Enhetsregisteret that is communicated by HelseID to get access to SFM. HelseID also verifies, among other things, that the necessary rights are delegated from the organization based on the structure in Enhetsregisteret.
However, the structure of Enhetsregisteret is not necessarily representative of what "journals" that the organization needs. For example, multiple organizations can share a journal (Journalsamarbeid), or a municipality may have a sub-organization (i.e. Fengselstjenesten) where there is a need for a separate Journal that do not share data with other entities in the municipality.
The organizations themselves are responsible for ensuring the right setup of "journals" for their needs, as well as any legal documents that have to be in place to be able to share data.
Additionally, this is closely related to how the EPJ in general relates to the concept of "journal" and data sharing for different organizations/customers (tenants).
For complex organizations (such as Municipalities) we recommend a thorough assessment of the setup before starting to write organizations to SFM in test. As a small tool we offer an excelsheet for the organizations to fill inn, to start the thought process of establishing the right organizations and Journals in SFM. We strongly recommend to set up a similar structure in the test environment as you wish to have in production.
Below is a list of examples of organizations and possible setups.
Single Journal for a general practitioner's office
A very common case is a general practitioner's office that in most cases have a single separate journal.
"Journalsamarbeid"
In some cases more than one GP Office cooperate and have legal documents to share a Journal. In these cases the organizations are created in the same Journal (installation) and the data is shared between the organizations.
Complex organizational structures / Municipalities
In a municipality, there is often a more complex structure and different requirements/needs for the Journal.
A municipality may have several sub-organizations where there is a need for some of them to share a Journal, and for some of them to have a separat Journal. In the example below:
- The two "kommunale fastlegekontor" are sharing a Journal and they are therefore created in the same installation
- "Fengselstjenesten" has a need for a separat journal and is therefore created in its own installation.
- "Sykehjem" may also want their own Journal in some cases.
- "Hjemmetjenesten" may have several sub-organizations, where all should share data in a joint Journal.
The organizations themselves are responsible for ensuring the right setup of "journals" for their needs, as well as any legal documents that have to be in place to be able to share data.
When using multi tenant HelseID towards SFM, it is the provided Journal-id from the token that points to a Journal.
Note that when using multi tenant, HelseID verifies that the top level (Parent) has delegated rights to act on behalf of the organization in HelseID, to the organization that owns the HelseID client. Delegation must therefore always be done at the top level! (When the EPJ requests a token from HelseID for a sub-organization, both Parent and Child must be included in the request.)
When using Single tenant HelseID towards SFM, the HelseID client represent a Journal (SFM-id). At least one HelseID client therefore has to be created for each Journal. More that one HelseID client can point to the same Journal.