XUS GET VISITOR    ICR (5532)

Added 9/27/19

Added 6/21/23. CDSP is developing a CPRS COM extension
to capture user generated events to trigger clinical decision support
applications. CDSP is utilizing solutions based on FHIR, SMART on FHIR and CDS
Hooks standards. CDSP needs to validate BSE Token passed by COM object to
secure communication between COM object and backend API.

Temporary approval provided with the following contingencies: 1) Once an
appropriate solution is available in production, the CDSP application agrees
to transition to the appropriate solution within four months. Once CDSP has
transitioned, this approval will be removed.  2) When using BSE, CDSP agrees
to not create or provision VistA accounts.  3) When using BSE, CDSP agrees to
not create duplicate VistA accounts.  4) When using BSE, CDSP agrees to only
access VistA systems where a known user has a known VistA account.  5) This
temporary approval does not authorize CDSP to bypass any VA directive,
handbook or Identity Access Management policies.

If CDSP fails to comply with the contingencies then VA security officers will
be notified and CDSP's authority to operate could be suspended.