Search Criteria : 17 assertions found for this search Review filtered assertions

Assertion

Applies to

Applied to
Not applied to

Coverage

Covered by
Not covered by
Id scheme
Assertion id
Status
Testable?
#Coverage
#Applies to
Comment
Predicate
Page
Tags
Last changed
Actions
XUAXUA-001reviewedTestable 0 0 XUA specifies that when a Cross-Enterprise User Assertion is needed, these Web-Services transactions (ie those based on ITI TF-2x: Appendix V) will additionally use the Web-Services Security header with a SAML 2.0 Token containing the identity Assertion.128Section 13.25/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-002reviewedTestable 0 0 The X-Service User shall be able to authenticate a user. The means by which this is done is not constrained by the XUA profile. The authenticated user shall be 128Section 13.45/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-003reviewedTestable 0 0 ceoche: I disagree with this assertion. The way X-User get the assertion is outside of the scope of XUA. The assertion could be generated by the X-User itself.The X-Service User shall be able to get the X-User Assertion from an X-Assertion Provider.128Section 13.45/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-004reviewedTestable 0 0 X-Service User shall support [ITI-40]129Section 13.4-15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-005reviewedTestable 0 0 X-Service Provider shall support [ITI-40]129Section 13.4-15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-006reviewedTestable 0 0 X-Service User that supports the Subject-Role option shall support the transaction requirements in ITI TF-2b:3.40.4.1.2.1130Section 13.5.15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-007reviewedTestable 0 0 X-Service Provider that supports the Subject-Role option shall support the transaction requirements in ITI TF-2b:3.40.4.1.3.1130Section 13.5.15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-008reviewedTestable 0 0 X-Service User that supports the Authz-Consent option shall support the transaction requirements in ITI TF-2b:3.40.4.1.2.2130Section 13.5.25/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-009reviewedTestable 0 0 X-Service Provider that supports the Authz-Consent option shall support the transaction requirements in ITI TF-2b:3.40.4.1.3.2130Section 13.5.25/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-010reviewedTestable 0 0 X-Service User that supports the PurposeOfUse option shall support the transaction requirements in ITI TF-2b:3.40.4.1.2.3131Section 13.5.35/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-011reviewedTestable 0 0 X-Service Provider that supports the PurposeOfUse option shall support the transaction requirements in ITI TF-2b:3.40.4.1.3.3131Section 13.5.35/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-012reviewedTestable 0 0 The X-Service User shall protect the X-User Assertion. If the system supports ATNA, then TLS meets this requirement. If the system does not support ATNA, then it shall provide another mechanism to protect the X-User Assertion.131Section 13.6.15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-013reviewedTestable 0 0 The X-Service Provider shall protect the X-User Assertion. If the system supports ATNA, then TLS meets this requirement. If the system does not support ATNA, then it shall provide another mechanism to protect the X-User Assertion.131Section 13.6.15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-014reviewedTestable 0 0 The X-Service User shall represent the X-User Assertion in ATNA Audit Messages according the the encoding rules in ITI TF-2b: 3.40.4.2.131Section 13.6.15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-015reviewedTestable 0 0 The X-Service Provider shall represent the X-User Assertion in ATNA Audit Messages according the the encoding rules in ITI TF-2b: 3.40.4.2131Section 13.6.15/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-016reviewedTestable 0 0 When an X-Service User also supports an actor that performs an IHE Transaction that uses web services according to ITI TF-2x: Appendix V, then that Requesting Actor shall conform to all of the requirements in [ITI-40].132Section 13.6.45/22/19 3:20:16 PM by NicolasBailliet
XUAXUA-017reviewedTestable 0 0 When an X-Service Provider also supports an actor that performs an IHE Transaction that uses web services according to ITI TF-2x: Appendix V, then that Responding Actor shall conform to all of the requirements in [ITI-40].132Section 13.6.45/22/19 3:20:16 PM by NicolasBailliet