We are now successfully asserting the below at runtime, which is very
much like the SAML/XACML interop of past. Since that is working
correctly now it would be a good time to configure your STSs to provide
following.
Duane
Values unique to each drbob user
User
|
AttributeNamespace
|
AttributeName
|
Values
|
drbob
|
urn:oasis:names:tc:xacml:1.0:subject
|
subject-id
|
Doctor,Bob
|
drbob
|
urn:oasis:names:tc:xspa:1.0:subject
|
npi
|
100035
|
drbobibm
|
urn:oasis:names:tc:xacml:1.0:subject |
subject-id
|
DoctorIBM,Bob
|
drbobibm
|
urn:oasis:names:tc:xspa:1.0:subject |
npi
|
100036
|
drbobsun
|
urn:oasis:names:tc:xacml:1.0:subject |
subject-id
|
DoctorSUN,Bob
|
drbobsun
|
urn:oasis:names:tc:xspa:1.0:subject |
npi
|
100037
|
drbobjericho
|
urn:oasis:names:tc:xacml:1.0:subject |
subject-id
|
DoctorJericho,Bob
|
drbobjericho
|
urn:oasis:names:tc:xspa:1.0:subject |
npi
|
100038
|
Values common to all doctor Bobs
AttributeNamespace
|
AttributeName
|
Value(s)
|
urn:oasis:names:tc:xspa:1.0:subject
|
organization
|
Healthcare Domain A
|
urn:oasis:names:tc:xspa:1.0:subject
|
organization-id
|
1.0.0.0.0.1
|
urn:oasis:names:tc:xspa:1.0:subject:hl7
|
permissions
|
PRD-003
PRD-005
PRD-006
PRD-009
PRD-010
PRD-012
PRD-017
|
urn:oasis:names:tc:xacml:2.0:subject
|
role
|
MD/Allopath
|
Values unique to nurse alice
User
|
AttributeNamespace
|
AttributeName
|
Value
|
nursealice
|
urn:oasis:names:tc:xacml:1.0:subject |
subject-id
|
Nurse,Alice
|
nursealice
|
urn:oasis:names:tc:xspa:1.0:subject |
npi
|
100040
|
nursealiceibm
|
urn:oasis:names:tc:xacml:1.0:subject |
subject-id
|
NurseIBM,Alice
|
nursealiceibm
|
urn:oasis:names:tc:xspa:1.0:subject |
npi
|
100041
|
nursealicesun
|
urn:oasis:names:tc:xacml:1.0:subject
|
subject-id
|
NurseSUN,Alice
|
nursealicesun
|
urn:oasis:name:tc:xspa:1.0:subject
|
npi
|
100042
|
nursealicejericho
|
urn:oasis:names:tc:xacml:1.0:subject
|
subject-id
|
NurseJericho,Alice
|
nursealicejericho
|
urn:oasis:names:tc:xspa:1.0:subject
|
npi
|
100043
|
Values common to all nurse Alices
AttributeNamespace
|
AttributeName
|
Value(s)
|
urn:oasis:names:tc:xspa:1.0:subject
|
organization
|
Healthcare Domain A
|
urn:oasis:names:tc:xspa:1.0:subject
|
organization-id
|
1.0.0.0.0.1
|
urn:oasis:names:tc:xspa:1.0:subject:hl7
|
permissions
|
PEA-001
PRD-006
|
urn:oasis:names:tc:xacml:2.0:subject
|
role
|
Registered Nurse (RN)
|