The industry more broadly is moving towards OAuth.

https://bluebutton.cms.gov/