User-faced facing system

(Danish: Brugervendt system)

A system directly or indirectly An IT system that provides an access-controlled user interface,
accessed via a browser. That is, a system directly used by a user. Mostly if not always, this excludes KOMBIT services. enduser.

A user-faced facing system is registered in the KOMBIT STS Admin.

Concerning eHealth Infrastructure, these are:

admin enables it to user KOMBIT systems for access control of end-users.

For KOMBIT external test environment the following eHealth environments are registered as user-facing system, and thereby use KOMBIT systems for access control:

• “FUT - SAML Proxy (inttest)” for the eHealth Internal Test Environment (INTTEST)

• “FUT - SAML Proxy in (exttest)” for the eHealth External Test environment (EXTTEST)SAML Proxy in and devenvcgi.

• “FUT - SAML Proxy (test002) for the eHealth Education environment (TEST002)

• “FUT - SAML Proxy in eHealth External Development environment (DEVENVCGI)

• SAML Proxy in eHealth pre-production environment (PREPROD)

• (preprod)” for the eHealth pre-production environment

Similar registrations are made in KOMBIT STS Admin in KOMBIT production environment, only here the sole SAML Proxy is the one in eHealth Infrastructure production environment (PROD).

User system role

(Danish: Brugersystemrolle)

Grouping of rights or permissions that define access and access restrictions to a specific user-facing system

• For eHealth Infrastructure, these are KOMBIT-flavored versions of the eHealth Infrastructure OIO BPP system roles. See list of roles below

Data constraint

(Danish: Dataafgrænsning)

A configuration item for a User-faced system maintained in KOMBIT STS Admin.Restriction of a “user system role”, which narrows the system role's field of action

Concerning eHealth Infrastructure, these are:

System-specific data constraint

• CareTeam - CareTeam identifier (UUID) - optional for some user system roles, required for others (see below)

Cross-cutting (data constraint

• Organisation - Organisation identifier ( from KOMBIT FK Organisation)

User system role

(Danish: Brugersystemrolle)

• .

• Concerning eHealth Infrastructure, these are KOMBIT-flavored versions of the eHealth Infrastructure OIO BPP system roles

Job function role

(Danish: Jobfunktionsrolle)

A named role usable in municipal IdPs comprising a collection of user system roles and data constraints. Each municipality shall maintain a set in KOMBIT STS Admin.

Concerning eHealth Infrastructure, these comprise:

• a collection of KOMBIT-flavored user system roles

• A possible CareTeam identifier

• an Organisation identifier