SOVRON

Organisation

Sign-in, who sees what, and the record of everything Sam does.

Microsoft sign-in

Organisation name

Entra tenant ID

Work email domains

Use your own app registration

Application (client) ID

Client secret

Redirect URI (add this in Entra)

New people start as

Sign-in lasts (hours)

Let anyone in your tenant join

Off: new people wait for approval, unless a group below gives them a role.

Groups

Entra groups give people their role and wards at each sign-in. The first match wins. Groups must be added to the ID token in Entra (Token configuration → groups claim).

Group object ID	Role	Wards

Rules

Require Microsoft sign-in

The shared login can then only open this page.

Own modules only

Chats and tools never run on another customer's module.

Allow outside AI models

Off keeps every conversation on your own modules.

Modules needed (not counting a spare)

Alerts to (Teams webhook address)

Where data is kept (shown in the security report)

Switch off

Back to an ordinary SOVRON account. Staff signed in with Microsoft lose access at once. The audit log is kept. Your staff list and settings are removed.

Add someone

Work email

Role

Wards

Staff

Person	Role	Wards	Access

What each role can do

Wards and clinics

The code is what people are given in Staff. HL7 location is the ward code in the admissions feed (PV1-3). FHIR location is the ieMR Location ID.

Code	Name	HL7 location	FHIR location

These connections run on your modules, inside your network. They only read. Passwords and keys are saved on the modules, encrypted, and never kept by SOVRON.

ieMR (FHIR)

FHIR address

Sign-in

Token address

Client ID

Scope

MRN identifier system

Client secret

Token

Private key (PEM)

Key ID (kid)

Your internal certificate authority (PEM, if the FHIR server uses one)

Admissions feed (HL7)

Listen for HL7 ADT messages

Point your integration engine (MLLP) at each module, port below. Every message is acknowledged.

Port

Only from these addresses

On each module

Module	ieMR (FHIR)	Admissions feed (HL7)
Press Test.

Right now

Module	Status	Last seen	Working on

If a module drops, reads from clinical systems move to another one. Outages and low capacity are posted to your alert address.

When	Who	What	Detail