Static Attributes for WS-Trust Claims

We are now successfully asserting the below at runtime, which is very
much like the SAML/XACML interop of past.  Since that is working
correctly now it would be a good time to configure your STSs to provide
following.


Duane




Values unique to each drbob user



  
    
      User
  
      AttributeNamespace
  
      AttributeName
  
      Values
  
    
    
      drbob
  
      urn:oasis:names:tc:xacml:1.0:subject
  
      subject-id
  
      Doctor,Bob
  
    
    
      drbob
  
      urn:oasis:names:tc:xspa:1.0:subject
  
      npi
  
      100035
  
    
    
      drbobibm
  
      urn:oasis:names:tc:xacml:1.0:subject
      subject-id
  
      DoctorIBM,Bob
  
    
    
      drbobibm
  
      urn:oasis:names:tc:xspa:1.0:subject
      npi
  
      100036
  
    
    
      drbobsun
  
      urn:oasis:names:tc:xacml:1.0:subject
      subject-id
  
      DoctorSUN,Bob
  
    
    
      drbobsun
  
      urn:oasis:names:tc:xspa:1.0:subject
      npi
  
      100037
  
    
    
      drbobjericho
  
      urn:oasis:names:tc:xacml:1.0:subject
      subject-id
  
      DoctorJericho,Bob
  
    
    
      drbobjericho
  
      urn:oasis:names:tc:xspa:1.0:subject
      npi
  
      100038
  
    
  


Values common to all doctor Bobs



  
    
      AttributeNamespace
  
      AttributeName
  
      Value(s)
  
    
    
      urn:oasis:names:tc:xspa:1.0:subject
  
      organization
  
      Healthcare Domain A
  
    
    
      urn:oasis:names:tc:xspa:1.0:subject
  
      organization-id
  
      1.0.0.0.0.1
  
    
    
      urn:oasis:names:tc:xspa:1.0:subject:hl7
  
      permissions
  
      PRD-003

PRD-005

PRD-006

PRD-009

PRD-010

PRD-012

PRD-017
  
    
    
      urn:oasis:names:tc:xacml:2.0:subject
  
      role
  
      MD/Allopath
  
    
  



Values unique to nurse alice


  
    
      User
  
      AttributeNamespace
  
      AttributeName
  
      Value
  
    
    
      nursealice
  
      urn:oasis:names:tc:xacml:1.0:subject
      subject-id
  
      Nurse,Alice
  
    
    
      nursealice
  
      urn:oasis:names:tc:xspa:1.0:subject
      npi
  
      100040
  
    
    
      nursealiceibm
  
      urn:oasis:names:tc:xacml:1.0:subject
      subject-id
  
      NurseIBM,Alice
  
    
    
      nursealiceibm
  
      urn:oasis:names:tc:xspa:1.0:subject
      npi
  
      100041
  
    
    
      nursealicesun
  
      urn:oasis:names:tc:xacml:1.0:subject
  
      subject-id
  
      NurseSUN,Alice
  
    
    
      nursealicesun
  
      urn:oasis:name:tc:xspa:1.0:subject
  
      npi
  
      100042
  
    
    
      nursealicejericho
  
      urn:oasis:names:tc:xacml:1.0:subject
  
      subject-id
  
      NurseJericho,Alice
  
    
    
      nursealicejericho
  
      urn:oasis:names:tc:xspa:1.0:subject
  
      npi
  
      100043
  
    
  


Values common to all nurse Alices



  
    
      AttributeNamespace
  
      AttributeName
  
      Value(s)
  
    
    
      urn:oasis:names:tc:xspa:1.0:subject
  
      organization
  
      Healthcare Domain A
  
    
    
      urn:oasis:names:tc:xspa:1.0:subject
  
      organization-id
  
      1.0.0.0.0.1
  
    
    
      urn:oasis:names:tc:xspa:1.0:subject:hl7
  
      permissions
  
      PEA-001

PRD-006
  
    
    
      urn:oasis:names:tc:xacml:2.0:subject
  
      role
  
      Registered Nurse (RN)