<H3>Special Instructions</H3><p> <p>XDR Document Recipient and XDS Repository actors must complete test <b>     XUA_X-Service_Provider_Setup</b> before running this test.</p> </p><H3>Description</H3><p>This tests XUA with XDS or XDR when a Document Source actor submits a document with ITI-41 to    either an XDR Doc Recipient or XDS Doc Repository actor.</p><p>In this test, an XDR Document Recipient or XDS Doc Repository (X-Service Provider) verifies a    principal&rsquo;s assertions before accepting a    document submitted by a Document Source (X-Service User) .&nbsp; &nbsp;The Document    Recipient may optionally use an external X-Assertion Provider to validate the contents of the    assertion.</p><p>This test assumes the Document Source gets the assertion when the user logs in to the system    and then uses that one for the session (or until the assertion expires).</p><p>This tests the &lsquo;success&rsquo; case.&nbsp;&nbsp; Denial of access based    on assertions is tested in a different test -    <strong>XUA_Document_Recipient_Restrict_Access</strong>.</p><H3>Evaluation</H3><p>The <strong>X-Service User (Document Source);</strong> </p><ul>     <li>Will demonstrate that it was able to successfully submit the document.</li>     <li>Will demonstrate that it audited the document export event.&nbsp; This may need to be     checked on the Audit Record Repository.&nbsp; The audit event record will include the     identity provided in the XUA Identity Assertion. &nbsp;The ATNA Audit message      <strong>EventID</strong> element is "Export" and the <strong>UserName </strong>element shall     record the X-User Assertion using the following encoding: </li>     <ul>      <li>alias"&lt;"user"@"issuer"&gt;"      &nbsp;&nbsp;where: </li>      <li> <strong>alias </strong>is the optional string within the SAML Assertion's Subject element      SPProvidedID attribute </li>      <li> <strong>user </strong>is the required content of the SAML Assertion's Subject element </li>      <li> <strong>issuer </strong>is the X-Assertion Provider entity ID contained with the content of      SAML Assertion's Issuer element </li>     </ul> </ul><p>The <strong>X-Service Provider (Doc Recipient or Repository):</strong> </p><ul>     <li>Will demonstrate for the Connectathon Monitor, through log files or other means, that the     SAML assertion was received from the Document Source and that its contents were verified prior     to accepting the document from the Document Source system.</li> </ul> 