History

Detailed proposal

Role-Based-Access Control: Need to specify a fuller vocabulary of attributes needed for access control decisions.
Consent/Authorization: Need to carry an indicator of BPPC document that is relevant to the transaction
Level Of Assurance for (a) the authentication event, and/or (b) the provisioning of the account
Extended Audit Logging: Support descriptive identifiers to support environments where post-processing doesn’t have access to directory for id translation into description.
Purpose-of-Use: Carry in the assertion purpose-of-use, including support for Break-Glass / Emergency-Mode-Access
Relationship-to-Patient: Carry the indicator of the patient, relationship to patient, location of patient