Live — OAuth 2.0 Connected

CaseFlow + athenahealth

REST API + FHIR R4 · athenaNet Marketplace Certified

athenahealth's cloud-native architecture means every practice runs on the same API endpoints — no per-site configuration. We connect via OAuth 2.0, pull appointment and patient data, and send automated SMS confirmations. Replies and confirmations write back to the athenaNet patient record. Most practices connect same-day.

Start $49 pilot → Get a setup walkthrough

What's synced — and what stays in athenaNet

Synced to CaseFlow

✓ Scheduled appointments
✓ Patient demographics (name, phone, DOB)
✓ Provider assignments
✓ Visit types
✓ Appointment cancellations
✓ Waitlist flag triggers

Not accessed

✗ Clinical documentation
✗ PHI beyond messaging scope
✗ Billing records
✗ E-prescribing data
✗ Revenue cycle data

Most athenahealth practices connect same-day

We handle the OAuth connection — you approve CaseFlow in your athenaNet admin panel. The cloud-native single-instance API means there's no per-practice configuration: the same endpoint pattern works for every athenaNet subscriber. No middleware, no IT involvement needed.

Security & Compliance

HIPAA BAA is signed before any connection is made. OAuth 2.0 access is scoped to appointment and patient demographics only. Data is encrypted at rest (AES-256) and in transit (TLS 1.3). CaseFlow is an athenaNet Marketplace certified partner.

✓

HIPAA BAA signed pre-connection

✓

AES-256 encryption at rest

✓

TLS 1.3 in transit

✓

View full security posture →

Frequently asked questions

Does this require IT involvement? +

No. The OAuth 2.0 connection is initiated by CaseFlow — you approve it from the athenaNet admin panel in minutes. No middleware, no interface servers, no IT involvement needed. If your practice has multiple athenaNet locations, each can be connected independently.

Will staff see double appointments in athenaNet? +

No. CaseFlow's writeback updates the existing athenaNet appointment record — it doesn't create a duplicate. Staff see the same single record they've always seen, now enriched with real-time confirmation status from patient SMS replies.

Can we turn off the sync? +

Yes — instantly. Disconnect the OAuth connection from the athenaNet admin panel or from the CaseFlow dashboard at any time. Sync pauses immediately and no new data is pulled. Reconnecting takes the same 5 minutes.

Does this work with multi-location athenahealth practices? +

Yes. Each athenaNet location can be connected separately — or all at once via the same OAuth app. You control which providers and locations are included in the SMS cadence from the CaseFlow dashboard.

Get a CaseFlow + athenahealth setup walkthrough

30-minute call — we'll walk through the OAuth setup, confirm your timeline, and answer every question before you commit.

✓ Request received — we'll be in touch within one business day.