Linking CVS/MinuteClinic just forwards to provider site about fasten-onprem HOT 5 CLOSED

CVS Health FHIR endpoint does not correctly implement Smart-on-Fhir (Redirect to Logout)

Hi,

I'm trying to connect to the CVS Health (Org ID: 1829) R4 FHIR Endpoint. However the OAuth flow is not working correctly. Unlike other organizations using Epic/MyChart, visiting the CVS OAuth2 authorize page will start a series of redirects that seems to reset/logout the oauth session and ends with the patient portal login page, at which point there is no prompt to provide permissions/access to my 3rd party application.

Here's the redirect order that I was able to determine:

https://retailepicfhir.cvshealth.com/FhirProxy/oauth2/authorize?redirect_uri=https%3A%2F%2Flighthouse.fastenhealth.com%2Fv1%2Fcallback%2Fepic&response_type=code&response_mode=fragment&state=XXXXXXXXXX&client_id=ZZZZZZZZZZZZZZZZZ&scope=fhirUser+openid+profile&aud=https%3A%2F%2Fretailepicfhir.cvshealth.com%2FFhirProxy%2Fapi%2Ffhir%2FR4&code_challenge=XXXXXXXXXX&code_challenge_method=S256


https://mychart.minuteclinic.com/MyChartPRD/Authentication/OAuth/Start?org=&redirect_uri=https%3A%2F%2Flighthouse.fastenhealth.com%2Fv1%2Fcallback%2Fepic&response_type=code&response_mode=fragment&state=XXXXXXXXXX&client_id=ZZZZZZZZZZZZZZZZZ&scope=fhirUser+openid+profile&aud=https%3A%2F%2Fretailepicfhir.cvshealth.com%2FFhirProxy%2Fapi%2Ffhir%2FR4&code_challenge=XXXXXXXXXX&code_challenge_method=S256

https://mychart.minuteclinic.com/MyChartPRD/Home/LogOut?postlogoutmode=oauthlogin&skipAbandonCurrent=1

https://mychart.minuteclinic.com/MyChartPRD/bye.asp?postlogoutmode=oauthlogin&skipAbandonCurrent=1&hideText=1

https://mychart.minuteclinic.com/MyChartPRD/default.asp?action=logout&mode=oauthlogin&liteMode=true

https://mychart.minuteclinic.com/MyChartPRD/Authentication/Login?action=logout&mode=oauthlogin&liteMode=true