Search Criteria : 17 assertions found for this search Review filtered assertions

Assertion

Applies to

Applied to
Not applied to

Coverage

Covered by
Not covered by
Id scheme
Assertion id
Status
Testable?
#Coverage
#Applies to
Comment
Predicate
Page
Tags
Last changed
Actions
XUAXUA-001reviewedTestable 2 2 XUA specifies that when a Cross-Enterprise User Assertion is needed, these Web-Services transactions (ie those based on ITI TF-2x: Appendix V) will additionally use the Web-Services Security header with a SAML 2.0 Token containing the identity Assertion.136Section 13.22/15/17 6:00:12 PM by ceoche
XUAXUA-002reviewedTestable 0 2 The X-Service User shall be able to authenticate a user. The means by which this is done is not constrained by the XUA profile. The authenticated user shall be 137Section 13.42/15/17 6:00:12 PM by ceoche
XUAXUA-003reviewedTestable 0 2 ceoche: I disagree with this assertion. The way X-User get the assertion is outside of the scope of XUA. The assertion could be generated by the X-User itself.The X-Service User shall be able to get the X-User Assertion from an X-Assertion Provider.137Section 13.42/15/17 6:00:12 PM by ceoche
XUAXUA-004reviewedTestable 1 2 X-Service User shall support [ITI-40]137Section 13.4-12/15/17 6:00:12 PM by ceoche
XUAXUA-005reviewedTestable 1 2 X-Service Provider shall support [ITI-40]137Section 13.4-12/15/17 6:00:12 PM by ceoche
XUAXUA-006reviewedTestable 0 2 X-Service User that supports the Subject-Role option shall support the transaction requirements in ITI TF-2b:3.40.4.1.2.1138Section 13.5.12/15/17 6:00:12 PM by ceoche
XUAXUA-007reviewedTestable 0 2 X-Service Provider that supports the Subject-Role option shall support the transaction requirements in ITI TF-2b:3.40.4.1.3.1138Section 13.5.12/15/17 6:00:12 PM by ceoche
XUAXUA-008reviewedTestable 0 2 X-Service User that supports the Authz-Consent option shall support the transaction requirements in ITI TF-2b:3.40.4.1.2.20Section 13.5.22/15/17 6:00:12 PM by ceoche
XUAXUA-009reviewedTestable 0 2 X-Service Provider that supports the Authz-Consent option shall support the transaction requirements in ITI TF-2b:3.40.4.1.3.20Section 13.5.22/15/17 6:00:12 PM by ceoche
XUAXUA-010reviewedTestable 0 2 X-Service User that supports the PurposeOfUse option shall support the transaction requirements in ITI TF-2b:3.40.4.1.2.3139Section 13.5.32/15/17 6:00:12 PM by ceoche
XUAXUA-011reviewedTestable 0 2 X-Service Provider that supports the PurposeOfUse option shall support the transaction requirements in ITI TF-2b:3.40.4.1.3.3139Section 13.5.32/15/17 6:00:12 PM by ceoche
XUAXUA-012reviewedTestable 1 2 The X-Service User shall protect the X-User Assertion. If the system supports ATNA, then TLS meets this requirement. If the system does not support ATNA, then it shall provide another mechanism to protect the X-User Assertion.139Section 13.6.12/15/17 6:00:12 PM by ceoche
XUAXUA-013reviewedTestable 1 2 The X-Service Provider shall protect the X-User Assertion. If the system supports ATNA, then TLS meets this requirement. If the system does not support ATNA, then it shall provide another mechanism to protect the X-User Assertion.139Section 13.6.12/15/17 6:00:12 PM by ceoche
XUAXUA-014reviewedTestable 1 2 The X-Service User shall represent the X-User Assertion in ATNA Audit Messages according the the encoding rules in ITI TF-2b: 3.40.4.2.139Section 13.6.12/15/17 6:00:12 PM by ceoche
XUAXUA-015reviewedTestable 1 2 The X-Service Provider shall represent the X-User Assertion in ATNA Audit Messages according the the encoding rules in ITI TF-2b: 3.40.4.2139Section 13.6.12/15/17 6:00:12 PM by ceoche
XUAXUA-016reviewedTestable 1 2 When an X-Service User also supports an actor that performs an IHE Transaction that uses web services according to ITI TF-2x: Appendix V, then that Requesting Actor shall conform to all of the requirements in [ITI-40].140Section 13.6.42/15/17 6:00:12 PM by ceoche
XUAXUA-017reviewedTestable 1 2 When an X-Service Provider also supports an actor that performs an IHE Transaction that uses web services according to ITI TF-2x: Appendix V, then that Responding Actor shall conform to all of the requirements in [ITI-40].140Section 13.6.42/15/17 6:00:12 PM by ceoche