How does Phreesia handle cross-portal authentication with integrated EMRs?

• A. Uses token-based or SSO integration with EMR
• B. Uses username/password stored in browser
• C. Requires separate login for each portal
• D. Disables authentication across portals

Answer: (A)

Cross-portal authentication across Phreesia and integrated EMRs is handled through token-based authentication or single sign-on, creating a trusted session between systems. When you sign in, Phreesia issues a secure token (or your identity is asserted by an identity provider), which the EMR validates so you can access both platforms without re-entering credentials. This approach supports federated identity standards like SAML, OAuth, or OpenID Connect, enabling seamless navigation and centralized access control while maintaining security. The alternative of storing usernames and passwords in the browser is insecure and does not support a seamless cross-portal experience; requiring a separate login for each portal defeats the purpose of integration; and turning off authentication would leave patient data unprotected.