search

ehealthsuisse / ch-epr-fhir

Repository for the swiss implementation guide for the FHIR based profiles
3 stars 5 forks source link

ITI 71: scope claims #137

Closed msmock closed 6 months ago

msmock commented 6 months ago

Section 3.1.6.1:

The scopes (claims) group and group_id do not correspond to EPR specifications. In EPR, an assistant can serve only individual healthcare practitioners and not groups.

msmock commented 6 months ago

Won't fix.

A claim of the group or organisation is optional in CH: XUA, which is reproduced here. See E1A5

<<The following optional attributes MAY be used in the element of the Get X-User Asser- tion request in the assistant extension: a. There MAY be one or more elements with name "urn:oasis:names:tc:xspa:1.0:subject:organization". If present the child ele-ment MUST convey a plain text the subject’s organization is named by. b. There MAY be one or more elements with name "urn:oasis:names:tc:xspa:1.0:subject:organization-id". If present the child el-ement MUST convey the ID of the subject’s organization or group. The ID MUST be an OID in the format of an URN.>>