A FHIR gateway sits in front of multiple EHR-side FHIR APIs and presents a single, unified surface to downstream applications. The gateway handles routing, authentication, response normalization, and the cross-EHR quirks that consumer applications would otherwise need to handle individually. In a multi-EHR deployment, the gateway is the layer that determines whether the applications stay portable or accumulate vendor-specific code. The four gateways below are the ones used most often in production multi-EHR scenarios. For broader context, see the FHIR architecture archive.
The FHIR integration platforms reference guide covers where a gateway fits in the broader integration stack.
The 4 Gateways to Evaluate
- HAPI FHIR Plain Server with routing interceptors. The DIY approach, where a HAPI server runs as a routing layer in front of multiple downstream FHIR APIs. Maximum control, full ownership of the routing logic.
- Smile Digital Health Cross-Server. The commercial cross-server option for teams that want a managed gateway with vendor support and routing-rule UI.
- Aidbox Federation. A federation feature in the Aidbox stack that lets a single API surface back several FHIR sources, used in healthcare SaaS deployments with multi-EHR customers.
- Custom Kong or Apigee deployment. A general-purpose API gateway configured for FHIR-specific routing, with the trade-off that the team owns all the FHIR-aware behavior at the gateway layer.
What Matters in Practice
Three operational factors drive the gateway choice.
The first is response normalization. Different EHR FHIR APIs return subtly different shapes for the same resource type: Cerner's Patient resource carries one set of extensions, Epic's carries another, and a gateway that does not normalize forces every consumer application to handle both. The second is authentication and SMART on FHIR support. The gateway has to mediate OAuth flows against multiple downstream identity providers without breaking the SMART on FHIR launch sequence for client applications. The third is observability. Multi-EHR routing produces multi-source failure modes; a gateway without per-route latency, error, and saturation metrics becomes a black box that nobody wants to debug at 2 a.m.
The top FHIR API tools for legacy system connectivity walkthrough covers the related case where the downstream systems are not yet FHIR-capable and need conversion in front of the gateway.
How to Approach the Choice
Selection turns on whether the gateway is the team's primary work or a means to an end. A team building a healthcare SaaS product around multi-EHR access usually owns the gateway as a core component and picks HAPI with custom interceptors or Aidbox Federation. A team that needs multi-EHR access to support an internal application typically picks Smile Cross-Server or stands up a Kong-based gateway with FHIR-aware plugins.
The DIY route on HAPI gives the team the most control over routing semantics and response normalization but demands ongoing engineering attention. The commercial routes trade control for a support contract and a faster path to production. Both work; the choice is mostly about staffing and operational appetite.
For EMR vendors thinking about embedding multi-EHR routing into their own product, the best FHIR integration engines for EMR vendors walkthrough covers the engine-level decisions that precede the gateway one. A defensible choice here is the one that ages well: the engine the team still wants to be running three years from now, not the one that wins the procurement spreadsheet. In 2026, that distinction is what keeps the team out of the procurement-after-procurement cycle that bleeds engineering quarters.
Sources
- SMART Backend Services Authorization - IG, HL7, 2025
- Subscriptions Backport Channels (WebSocket) - IG, HL7, 2024
- SMART on FHIR documentation - Docs, SMART Health IT, 2025

