cdaefa:EFA Identity Assertion SAML2 Binding - Versionsgeschichte

Jcaumanns: /* HCP Identity Attributes */

2016-02-14T20:28:28Z

‎HCP Identity Attributes

Jcaumanns: /* German Extensions */

2016-02-14T14:41:58Z

‎German Extensions

Jcaumanns: Markup-Fehler behoben

2015-01-26T16:08:47Z

Markup-Fehler behoben

Jcaumanns: Querverweise

2015-01-13T17:54:37Z

Querverweise

Jcaumanns: /* HCP Identity Attributes */ Added role "health record management"

2014-12-09T15:28:14Z

‎HCP Identity Attributes: Added role "health record management"

Jcaumanns: /* HCP Identity Attributes */

2014-12-09T14:29:24Z

‎HCP Identity Attributes

Jcaumanns: Seitentemplate an Konvention angepasst.

2014-09-09T13:53:04Z

Seitentemplate an Konvention angepasst.

Jcaumanns: /* German Profile */

2013-11-18T22:04:40Z

‎German Profile

Jcaumanns: /* German Profile */

2013-11-18T22:02:50Z

‎German Profile

Jcaumanns: /* SAML 2.0 Profile for ECR Identity Assertions */

2013-11-18T18:12:33Z

‎SAML 2.0 Profile for ECR Identity Assertions

@@ Zeile 198: / Zeile 198: @@
 |-
 |Values
-|URN encoded object identifier as defined in ISO/IEC 9834/1 of the healthcare professional.
+|person’s full name according to [http://www.ietf.org/rfc/rfc2256.txt http://www.ietf.org/rfc/rfc2256.txt chapter 5.4].
 |-
 |Type
@@ Zeile 207: / Zeile 207: @@
 |-
 |Description
-|This attribute MUST contain the full name of the HP.
+|This attribute SHALL contain the full name of the HP.
 |-
 |colspan="2"|

@@ Zeile 334: / Zeile 334: @@
 ===== German Extensions =====
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.03}</tt>
 {|class="wikitable" style="text-align: left; cellpadding: 10;"
@@ Zeile 339: / Zeile 340: @@
 |-
 |FriendlyName
-|Clinical Speciality
+|EFA HP Organization Specialty
 |-
 |Name
-|'''TO BE DEFINED'''
+|urn:efa:2-0:subject:organization:specialty
 |-
 |Values
-|'''HIER MUSS NOCH DIE PASSENDE KBV SCHLÜSSELTABELLE RAUSGESUCHT WERDEN'''
+|Values shall be taken from the value set [http://art-decor.org/art-decor/decor-valuesets--ihede-?valueSetRef=1.2.276.0.76.11.31 1.2.276.0.76.11.37] as defined by IHE Germany.
 |-
 |Type
-|URI
+|String
 |-
 |Optionality
@@ Zeile 354: / Zeile 355: @@
 |-
 |Description
-|Clinical speciality of the HP as expressed in her Health Professional Card (HBA)
+|EFA permissions are preferrably managed on the abstraction level of organizations. Therefore the respective clinical specialty of the identified EFA user's organization may be provided as an attribute to a HP Identity Assertion.
 |}
-{{AlertBox|HBA attributes will only be available with the Telematik-Infrastruktur. Before the final roll-out of the Telematik-Infrastruktur identifiers based on HBA SHOULD NOT be used.}}
+'''Example'''
 ==== Example Assertion ====

@@ Zeile 490: / Zeile 490: @@
 {{NoteBox|'''Referenzen und Querverweise'''
 * [[cdaefa:EFA_Spezifikation_v2.0|EFA-2.0-Spezifikation]]
 }}

@@ Zeile 4: / Zeile 4: @@
 ----
-== SAML 2.0 Profile for ECR Identity Assertions ==
+=== SAML 2.0 Profile for ECR Identity Assertions ===
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01}</tt>
@@ Zeile 121: / Zeile 121: @@
 |}
-=== German Profile ===
+==== German Profile ====
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.05}</tt>
@@ Zeile 150: / Zeile 150: @@
 {{AlertBox|Telematik ID and HBA certificates will only be available with the Telematik-Infrastruktur. Before the final roll-out of the Telematik-Infrastruktur identifiers based on Telematik ID and HBA SHOULD NOT be used.}}
-=== Assertion Signature ===
+==== Assertion Signature ====
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.01}</tt>
@@ Zeile 181: / Zeile 181: @@
 |}
-=== HCP Identity Attributes ===
+==== HCP Identity Attributes ====
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.02}</tt>
@@ Zeile 332: / Zeile 332: @@
 ECR regional networks MAY agree on further attributes. Any attributes not listed in this list MAY be ignored by the assertion consumer.
-==== German Extensions ====
+===== German Extensions =====
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.03}</tt>
@@ Zeile 359: / Zeile 359: @@
 {{AlertBox|HBA attributes will only be available with the Telematik-Infrastruktur. Before the final roll-out of the Telematik-Infrastruktur identifiers based on HBA SHOULD NOT be used.}}
-=== Example Assertion ===
+==== Example Assertion ====
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.04}</tt>
@@ Zeile 485: / Zeile 485: @@
-=== Querverweise und Referenzen ===
+----
 * [[cdaefa:EFA_Spezifikation_v2.0|EFA-2.0-Spezifikation]]

@@ Zeile 220: / Zeile 220: @@
 |-
 |Values
-|See ASTM E1986-98 (2005). Only the ASTM structural roles “dentist”, “nurse” “pharmacist”, “physician”, “nurse midwife”, “admission clerk”, “ancillary services” and “clinical services” MUST be used.
+|See ASTM E1986-98 (2005). Only the ASTM structural roles “dentist”, “nurse”, “pharmacist”, “physician”, “nurse midwife”, “admission clerk”, “ancillary services”, “clinical services”, and “health records management” MUST be used.
 |-
 |Type
@@ Zeile 239: / Zeile 239: @@
 |-
 |Values
-|See ASTM E1986-98 (2005). Only the ASTM structural roles “dentist”, “pharmacist”, “physician” and “nurse midwife” MUST be used.
+|See ASTM E1986-98 (2005). Only the ASTM structural roles “dentist”, “pharmacist”, “physician”, “nurse midwife”, and “health record management” MUST be used.
 |-
 |Type
@@ Zeile 245: / Zeile 245: @@
 |-
 |Optionality
-|Mandatory if a structural role of “ancillary services” or “clinical services” is presented. For all other structural roles this attribute is optional
+|Mandatory if a structural role of “ancillary services”, or “clinical services” is presented. For all other structural roles this attribute is optional
 |-
 |Description
-|If a person is acting on behalf of another person the role of this person MAY be provided with this attribute. If this attribute is included with a HCP identity assertion, the issuer of the assertion MUST be able to track back the delefation to the two natural persons involved. Only valid roles as defined for HCP structural roles MUST be used.<br>An assertion consumer MAY decide not to accept delegated access rights by just ignoring this attribute.
+|If a person is acting on behalf of another person the role of this person MAY be provided with this attribute. If this attribute is included with a HCP identity assertion, the issuer of the assertion MUST be able to track back the delegation to the two natural persons involved. Only valid roles as defined for HCP structural roles MUST be used.<br>An assertion consumer MAY decide not to accept delegated access rights by just ignoring this attribute.
 |-
 |colspan="2"|

@@ Zeile 1: / Zeile 1: @@
-{{Infobox Dokument
+{{DocumentPart
 }}
 ''Anmerkung: Die unter den einzelnen Überschriften in geschweiften Klammern angegebenen Kürzel dienen der Unterstützung des Kommentierungsverfahrens. Bitte geben Sie bei einem Kommentar oder einem Verbesserungsvorschlag zu dieser Spezifikation immer das Kürzel des Abschnitts an, auf den sich Ihr Kommentar bezieht. Alle Kommentare werden in der Lasche "Diskussion" zu der kommentierten Seite gesammelt und gegenkommentiert.<br>Hinweise zum Kommentierungsverfahren einschließlich aller Formulare und Kontaktadressen finden Sie auf der Seite "[[cdaefa:Kommentierung EFAv2.0|Kommentierung EFAv2.0]]".''
 ----

@@ Zeile 161: / Zeile 161: @@
 |''local code system''
 |}
 === Assertion Signature ===

@@ Zeile 138: / Zeile 138: @@
 <tt>Bitte markieren Sie [[cdaefa:Kommentierung_EFAv2.0|Kommentare]] zu diesem Abschnitt mit dem Code {ItyAn.01.05}</tt>
-The subject must refer to a health professional. The subject identifier must be provided as an OID. Only the following identitification schemes must be used:
+The subject must refer to a health professional. The subject identifier must be provided as an OID. Only the following identitification schemes must be used. The order of the table denotes the order of preference.
 {|class="wikitable" style="text-align: left; cellpadding: 10;"
@@ Zeile 157: / Zeile 157: @@
 |1.2.276.0.76.4.16
 |-
-|Hospital&nbsp;Staff<br>Practice&nbsp;Staff
+|Physician<br>Hospital&nbsp;Staff<br>Practice&nbsp;Staff
 |Any internal identification scheme that guarantees a unique identification within the scope of the identified organization. The <representedOrganization> and an <id> for this organization MUST be recorded.
 |''local code system''

@@ Zeile 72: / Zeile 72: @@
 ''urn:oasis:names:tc:SAML:2.0:cm:holder-of-key'' or <br>
 ''urn:oasis:names:tc:SAML:2.0:cm:bearer''
-<br>If the bearer method is used, the EFA Identity Assertion SHALL only be exchanged over secure channels in order to maintain confidentiality and message integrity.
+<br>If the bearer method is used, the EFA Identity Assertion SHALL only be exchanged over secure channels with trusted endpoints in order to maintain confidentiality and message integrity.
 |-
+|