...
The eHealth Infrastructure provides an IdP for SSL (Service & Support Logistics - not depicted below) users that are not part of the clinical domain nor the citizen domain (not depicted below). For the clinical and citizen domain, the AS is federated with two services that provide the identity of the users:
...
The eHealth Infrastructure security model relevant for User application developers can be found on the pages Tokens, roles Roles and RBAC/ABAC, Switching Context and Key Service overview. These pages describes how the tokens are formed and when they should be exchanged for a more narrow and specific token.
...