]> &ch_xua_get_assertion_common_ns; &ch_xua_get_assertion_common_rule; Error : The Get X-User Assertion Request MUST use the RequestSecurityToken WS-Trust 1.3 (SR 816.111_Ergaenzung 1 Anhang 5 - §Referenced Standard). Success : The Get X-User Assertion Request MUST use the RequestSecurityToken WS-Trust 1.3 (SR 816.111_Ergaenzung 1 Anhang 5 - §Referenced Standard). Warning : The Get X-User Assertion Request MUST contain a list of claims. Success : The Get X-User Assertion Request MUST contain a list of claims. Error : The claim dialect must be http://www.bag.admin.ch/epr/2017/annex/5/amendment/2. Success : The claim dialect must be http://www.bag.admin.ch/epr/2017/annex/5/amendment/2. Warning : The Get X-User Assertion Request MUST contain the SAML Attribute defining the role of the accessing person in the claims. Success : The Get X-User Assertion Request MUST contain the SAML Attribute defining the role of the accessing person in the claims. Error : The Get X-User Assertion Request MUST contain the SAML Attribute defining the requested resource id in the claims. Success : The Get X-User Assertion Request MUST contain the SAML Attribute defining the requested resource id in the claims. Error : The Get X-User Assertion Request MUST contain the SAML Attribute defining the purpose of use in the claims. Success : The Get X-User Assertion Request MUST contain the SAML Attribute defining the purpose of use in the claims. Error : The Get X-User Assertion Request for an healthcare professional MUST contain the SAML Identity Assertion in the Web Service security header. Success : The Get X-User Assertion Request for an healthcare professional MUST contain the SAML Identity Assertion in the Web Service security header. Warning : The presence of the SAML Identity Assertion in the header has been verified but not its content. Error : In the healthcare professional extension the role claim ("urn:oasis:names:tc:xacml:2.0:subject:role") attribute MUST be the code HCP from code system 2.16.756.5.30.1.127.3.10.6 of the CH:EPR value set. Success : In the healthcare professional extension the role claim ("urn:oasis:names:tc:xacml:2.0:subject:role") attribute MUST be the code HCP from code system 2.16.756.5.30.1.127.3.10.6 of the CH:EPR value set. Error : The Get X-User Assertion Request for a patient MUST contain the original SAML Identity Assertion in the Web Service Security header. Success : The Get X-User Assertion Request for a patient MUST contain the original SAML Identity Assertion in the Web Service Security header. Warning : The presence of the SAML Identity Assertion in the header has been verified but not its content. Error : The Get X-User Assertion Request for a patient MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Success : The Get X-User Assertion Request for a patient MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Error : There MAY be one Attribute element with name "urn:e-health-suisse:principal-id". If present, the AttributeValue child element MUST convey the EPR-SPID of the patient. Success : There MAY be one Attribute element with name "urn:e-health-suisse:principal-id". If present, the AttributeValue child element MUST convey the EPR-SPID of the patient. Error : The Get X-User Assertion Request for a representative MUST contain the original SAML Identity Assertion in the Web Service Security header. Success : The Get X-User Assertion Request for a representative MUST contain the original SAML Identity Assertion in the Web Service Security header. Error : The Get X-User Assertion Request for a representative MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Success : The Get X-User Assertion Request for a representative MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Error : The Get X-User Assertion Request for an assistant MUST contain the original SAML Identity Assertion in the Web Service Security header. Success : The Get X-User Assertion Request for an assistant MUST contain the original SAML Identity Assertion in the Web Service Security header. Error : There MUST be one Attribute element with name "urn:e-health-suisse:principal-id". The AttributeValue child element MUST convey the GLN of the healthcare professional an assistant is acting on behalf of. Success : There MUST be one Attribute element with name "urn:e-health-suisse:principal-id". The AttributeValue child element MUST convey the GLN of the healthcare professional an assistant is acting on behalf of. Error : There MUST be one Attribute element with the attribute name "urn:e-health-suisse:principal-name". The AttributeValue child element MUST convey the name of the healthcare pro-fessional an assistant is acting on behalf of. Success : There MUST be one Attribute element with the attribute name "urn:e-health-suisse:principal-name". The AttributeValue child element MUST convey the name of the healthcare pro-fessional an assistant is acting on behalf of. Error : There MAY be one or more Attribute elements with name "urn:oasis:names:tc:xspa:1.0:subject:organization-id". If present the AttributeValue child element MUST convey the ID of the subject’s organization or group. The ID MUST be an OID in the format of an URN. Success : There MAY be one or more Attribute elements with name "urn:oasis:names:tc:xspa:1.0:subject:organization-id". If present the AttributeValue child element MUST convey the ID of the subject’s organization or group. The ID MUST be an OID in the format of an URN. Error : The Get X-User Assertion Request for a technical user MUST contain the original SAML Identity Assertion in the Web Service Security header. Success : The Get X-User Assertion Request for a technical user MUST contain the original SAML Identity Assertion in the Web Service Security header. Error : There MUST be one Attribute element with name "urn:e-health-suisse:principal-id". The AttributeValue child element MUST convey the GLN of the healthcare professional an assistant is acting on behalf of. Success : There MUST be one Attribute element with name "urn:e-health-suisse:principal-id". The AttributeValue child element MUST convey the GLN of the healthcare professional an assistant is acting on behalf Error : There MUST be one or more Attribute elements with name attribute "urn:e-health-suisse:principal-name". The AttributeValue child element MUST convey the name of the legal responsible healthcare professional the technical user is acting on behalf of. Success : There MUST be one or more Attribute elements with name attribute "urn:e-health-suisse:principal-name". The AttributeValue child element MUST convey the name of the legal responsible healthcare professional the technical user is acting on behalf of. Error : The Get X-User Assertion Request for a technical user MUST contain the purpose of use claim attribute with the code AUTO from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Success : The Get X-User Assertion Request for a technical user MUST contain the purpose of use claim attribute with the code AUTO from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Error : The Get X-User Assertion Request for a document administrator MUST contain the original SAML Identity Assertion in the Web Service Security header. Success : The Get X-User Assertion Request for a document administrator MUST contain the original SAML Identity Assertion in the Web Service Security header. Error : The Get X-User Assertion Request for a document administrator MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Success : The Get X-User Assertion Request for a document administrator MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Error : The Get X-User Assertion Request for a policy administrator MUST contain the original SAML Identity Assertion in the Web Service Security header. Success : The Get X-User Assertion Request for a policy administrator MUST contain the original SAML Identity Assertion in the Web Service Security header. Error : The Get X-User Assertion Request for a policy administrator MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set. Success : The Get X-User Assertion Request for a policy administrator MUST contain the purpose of use claim attribute with the code NORM from the code system 2.16.756.5.30.1.127.3.10.5 of the CH:EPR value set.