Remote-access Guide

limits infocentre health bc org services remote access tokens

by Noemie Hansen Published 2 years ago Updated 1 year ago

Where can I get help with hearing loss in BC?

Ethics Service BC Autism Assessment Network BC Cancer BC Centre for Disease Control BC Children's Hospital and Sunny Hill Health Centre BC Early Hearing Program Hearing Testing Hearing Clinic Locations Resources & Support Privacy Communications Milestones BC Emergency Health Services BC Mental Health & Substance Use Services BC Renal

What services does the BC Department of Health offer?

Programs & Services Ethics Service BC Autism Assessment Network BC Cancer BC Centre for Disease Control BC Children's Hospital and Sunny Hill Health Centre BC Early Hearing Program Hearing Testing Hearing Clinic Locations Resources & Support Privacy Communications Milestones BC Emergency Health Services BC Mental Health & Substance Use Services

What kind of services does patient resources BC offer?

Patient Resources BC Virtual Visit Skype for Business FaceTime Email TELUS Home Health Monitoring Telephone Consults SRFax Signal News, Updates & Events Digital Health Week Video Conferencing Services

How do I access Cerner from home?

Go to https://citrixweb.health.unm.edu to access Cerner Remote Access and login. VPN: The VPN service is intended to connect your computer to the HSC network from off-site.

What is Citrix remote access?

Remote PC Access is a feature of Citrix Virtual Apps and Desktops that enables organizations to easily allow their employees to access corporate resources remotely in a secure manner. The Citrix platform makes this secure access possible by giving users access to their physical office PCs.

How do I access my PHSA email from home?

access PHSA email by going to https://webmail.healthbc.org. Login with your PHSA login credentials and the Microsoft Authenticator app on a personal or work phone or tablet (download Microsoft Authenticator instructions).

Can I remove Citrix from my computer?

You can uninstall Citrix Workspace app using the Windows Programs and Features utility (Add or Remove Programs). Note: During Citrix Workspace app installation, you get a prompt to uninstall the Citrix HDX RTME package. Click OK to continue the uninstallation.

What is the difference between Citrix and remote desktop?

The Remote Desktop Protocol (RDP) is a Microsoft-developed protocol that allows users to connect to software or virtual desktops hosted on a server. Citrix Systems offers technical solutions for virtualization with its virtual apps (XenApp) and virtual desktops (XenDesktop).

How do I change my PHSA password?

Note: If you have any issues, contact IMITS Service Desk at VCH 604-875-4334, PHC 604-806- 9333, PHSA 604-675-4299. 3 Enter your current password. 3 Click the settings button in the top right hand corner and select Change password. lower case letters and at least 1 special character.

How do I access VCH webmail from home?

VCH provides employees and physicians with a number of communication tools, including a newsletter and an interactive intranet.webmail.vch.ca – Access your VCH email remotely. ... one.vch.ca/myinfo [internal link] – Access your pay statements.More items...

What is special leave VCH?

Special leave is accrued based on 0.5 days every four weeks (prorated for part-time) and may be granted for marriage leave, additional compassionate leave, paternity leave etc.

How do I use Citrix remotely?

Create a Citrix Cloud account (if you don't have one already) Obtain a Citrix Virtual Desktops service account. Create a new Resource Location (your office) and install the Citrix Cloud Connectors in it. Install Citrix Virtual Delivery Agent on the Remote PC Access hosts.

Why is Citrix on my computer?

It is often used for cloud applications or for enabling remote desktop access to certain servers within the cloud. It is primarily used within enterprise but there are a few programs installed for end users that utilize it too. That's why you might see it on your computer.

Whats the difference between VPN and Citrix?

The primary difference is that on Citrix, users gain access to their virtual workstation and resources. Meanwhile, the VPN operates directly with the device used and all of its software and applications.

Is Citrix considered VPN?

Citrix Workspace provides a cloud- based, VPN-less solution to access all intranet web, SaaS, mobile, and virtual applications—whether using managed, unmanaged, or bring-your-own devices (BYOD) over any network.

How long does an access token last?

For example, continuous access evaluation (CAE) capable clients that negotiate CAE-aware sessions will see a long lived token lifetime (up to 28 hours). When the access token expires, the client must use the refresh token to (usually silently) acquire a new refresh token and access token.

What is an access token?

Access tokens enable clients to securely call protected web APIs, and are used by web APIs to perform authentication and authorization. Per the OAuth specification, access tokens are opaque strings without a set format - some identity providers (IDPs) use GUIDs, others use encrypted blobs. The Microsoft identity platform uses a variety of access token formats depending on the configuration of the API that accepts the token. Custom APIs registered by developers on the Microsoft identity platform can choose from two different formats of JSON Web Tokens (JWTs), called "v1" and "v2", and Microsoft-developed APIs like Microsoft Graph or APIs in Azure have additional proprietary token formats. These proprietary formats might be encrypted tokens, JWTs, or special JWT-like tokens that will not validate.

Why are access tokens opaque?

Clients must treat access tokens as opaque strings because the contents of the token are intended for the resource (the API) only. For validation and debugging purposes only, developers can decode JWTs using a site like jwt.ms. Be aware, however, that the tokens you receive for a Microsoft API might not always be a JWT, and that you can't always decode them.

What does it mean to set accessTokenAcceptedVersion to 2?

This is why a resource setting accessTokenAcceptedVersion to 2 means that a client calling the v1.0 endpoint to get a token for that API will receive a v2.0 access token. Resources always own their tokens (those with their aud claim) and are the only applications that can change their token details. This is why changing the access token optional claims for your client does not change the access token received when a token is requested for user.read, which is owned by the Microsoft Graph resource.

Why are refresh tokens revoked?

Refresh tokens can be revoked by the server due to a change in credentials, or due to use or admin action. Refresh tokens fall into two classes - those issued to confidential clients (the rightmost column) and those issued to public clients (all other columns).

What is a header in a token?

Header - Provides information about how to validate the token including information about the type of token and how it was signed.

What is a thumbprint in a token?

Specifies the thumbprint for the public key that can be used to validate this token's signature. Emitted in both v1.0 and v2.0 access tokens.

What is PHSA in BC?

Provincial Health Services Authority (PHSA) improves the health of British Columbians by seeking province-wide solutions to specialized health care needs in collaboration with BC health authorities and other partners.

What is the role of PHSA?

For many roles across PHSA, it is essential that we work in the hospital/health-care environment delivering direct patient care. There are also a significant number of provincial roles and system supports that are essential as we support the COVID-19 work and many of these roles will need to continue in the workplace.

Do BC women get mammograms?

More BC women are due for their mammograms than ever before join the Mammolanche and get screened

Overview of Service

Purpose of Service

  • The service is available 24 hours, each day, and provides: 1. Name search capability for easier confirmation of patient/client identity and retrieval of PHNs; 2. A faster and more effective way to determine a patient's eligibility for publicly funded health care services; 3. A centralized method to verify and update patient demographics; 4. The abi...
See more on www2.gov.bc.ca

Prerequisites For Service

  • To qualify and register for these services: 1. Your computer must be running a web browser with a cipher strength of 128-bit. Internet Explorer (version 6.0, or higher) is the recommended Ministry standard for web-based services. 2. Read Eligibility, Demographic & PHN Assignment Overview (PDF, 89KB). 3. Register for services by sending an e-mail request to hlth.hnetconnection@gov.b…
See more on www2.gov.bc.ca

Supporting Documentation

Token Formats

  • There are two versions of access tokens available in the Microsoft identity platform: v1.0 and v2.0. These versions determine the claims that are in the token and make sure that a web API can control the contents of the token. Web APIs have one of the following versions selected as a default during registration: 1. v1.0 for Azure AD-only applications. The following example shows …
See more on docs.microsoft.com

Token Ownership

  • Two parties are involved in an access token request: the client, who requests the token, and the resource (Web API) that accepts the token. The aud claim in a token indicates the resource that the token is intended for (its audience). Clients use the token but shouldn't understand or attempt to parse it. Resources accept the token. The Microsoft identity platform supports issuing any to…
See more on docs.microsoft.com

Claims in Access Tokens

  • JWTs are split into three pieces: 1. Header- Provides information about how to validate the token including information about the type of token and how it was signed. 2. Payload- Contains all of the important data about the user or application that's attempting to call the service. 3. Signature- Is the raw material used to validate the token. Each ...
See more on docs.microsoft.com

Access Token Lifetime

  • The default lifetime of an access token is variable. When issued, the default lifetime of an access token is assigned a random value ranging between 60-90 minutes (75 minutes on average). The variation improves service resilience by spreading access token demand over a time, which prevents hourly spikes in traffic to Azure AD. Tenants that don’t use Conditional Access have a d…
See more on docs.microsoft.com

Validate Tokens

  • Not all applications should validate tokens. Only in specific scenarios should applications validate a token: 1. Web APIs must validate access tokens sent to them by a client. They must only accept tokens containing their audclaim. 2. Confidential web applications like ASP.NET Core must validate ID tokens sent to them by using the user's browser in the hybrid flow, before allowing ac…
See more on docs.microsoft.com

User and Application Tokens

  • An application may receive tokens for a user or directly from an application through the client credentials flow. These app-only tokens indicate that this call is coming from an application and doesn't have a user backing it. These tokens are handled largely the same: 1. Use rolesto see permissions that have been granted to the subject of the token. 2. Use oid or subto validate that …
See more on docs.microsoft.com

Token Revocation

  • Refresh tokens can be invalidated or revoked at any time, for different reasons. The reasons fall into the categories of timeouts and revocations.
See more on docs.microsoft.com

Next Steps

  1. Learn about id_tokens in Azure AD.
  2. Learn about permission and consent ( v1.0, v2.0).
See more on docs.microsoft.com

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9