Versions Compared

Old Version 4

changes.mady.by.user Erik Nielsen

Saved on

compared with

New Version 5

changes.mady.by.user Nicolai Gjøderum

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

NemLogin provides a set of SAML attributes in a SAML assertion which is used to identify the citizen. Other attributes are also part of the SAML attribute; they are however not currently used. The table below lists the current attributes that are delivered by NemLogin:

Attribute

Description

dkhttps:gov:saml:attribute:CprNumberIdentifier//data.gov.dk/model/core/eid/cprNumber

Civil registration number (CPR)

dkhttps:gov:saml:attribute:PidNumberIdentifier

PID number from certificate

dk:gov:saml:attribute:AssuranceLevel

AssuranceLevel (must be 4)

urn:oid:2.5.4.3

Common name (full name)

urn:liberty:disco:2006-08:DiscoveryEPR

Bootstrap token that can be used on the NSP STS to exchange to an IDWS token.

dk:gov:saml:attribute:Privileges_intermediate

Optional. Can be used to express delegations (“digital fuldmagt”).//data.gov.dk/concept/core/nsis/loa

Level of assurance (must be Substantial)

https://data.gov.dk/model/core/eid/firstName

First name

https://data.gov.dk/model/core/eid/lastName

Last name

Citizens accessing the eHealth Infrastructure is handled a bit differently from other users accessing the platform. As citizens do not carry a context of roles and rules, it is limited to the citizen itself and scoped by the provided SAML attributes. This means that the citizen is not able to switch context and that the citizen can only access data being scoped to him/herself. The scope of access is determined by setting the citizen in context of him/herself and not allowing context switches.

...