<H3>Special Instructions</H3><p> <p>XDR Document Recipients should run test <strong>XUA_Doc_Source_ProvideandRegister</strong> before running this test, to ensure the success case works first.</p> </p> <p>Send your audit messages to the NIST Audit Record Repository.</p> <H3>Description</H3> <p>This test verifies that a X-Service Provider (XDR Document Recipient) will not accept a document from a X-Service User (XDR Document Source) when the assertions indicate that Doc Recipient should not grant access.</p> <H3>Evaluation</H3> <p>Verify that the Document Source was unsuccessful submitting the document because validation of the assertion failed.  The Document Source has no indication that the submit failed because of the validation failure.</p> <p>On the <strong>Audit Record Repository</strong>, verify: </p> <ul> <li>An Authentication Failure event was logged by the Document Recipient for each assertion validation failure. </li> </ul> 