<?xml version="1.0" encoding="UTF-8"?><CodeSystem xmlns="http://hl7.org/fhir"><id value="restful-security-service"/><meta><lastUpdated value="2026-03-31T18:55:04.283+00:00"/></meta><text><status value="generated"/><div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: CodeSystem restful-security-service</b></p><a name="restful-security-service"> </a><a name="hcrestful-security-service"> </a><p>This case-sensitive code system <code>http://hl7.org/fhir/restful-security-service</code> defines the following codes:</p><table class="codes"><tr><td style="white-space:nowrap"><b>Code</b></td><td><b>Definition</b></td></tr><tr><td style="white-space:nowrap">OAuth<a name="restful-security-service-OAuth"> </a></td><td>OAuth (unspecified version see oauth.net).</td></tr><tr><td style="white-space:nowrap">SMART-on-FHIR<a name="restful-security-service-SMART-on-FHIR"> </a></td><td>OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/).</td></tr><tr><td style="white-space:nowrap">NTLM<a name="restful-security-service-NTLM"> </a></td><td>Microsoft NTLM Authentication.</td></tr><tr><td style="white-space:nowrap">Basic<a name="restful-security-service-Basic"> </a></td><td>Basic authentication defined in HTTP specification.</td></tr><tr><td style="white-space:nowrap">Kerberos<a name="restful-security-service-Kerberos"> </a></td><td>see http://www.ietf.org/rfc/rfc4120.txt.</td></tr><tr><td style="white-space:nowrap">Certificates<a name="restful-security-service-Certificates"> </a></td><td>SSL where client must have a certificate registered with the server.</td></tr></table></div></text><extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"><valueCode value="fhir"/></extension><extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status"><valueCode value="normative"/></extension><extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm"><valueInteger value="5"/></extension><url value="http://hl7.org/fhir/restful-security-service"/><identifier><system value="urn:ietf:rfc:3986"/><value value="urn:oid:2.16.840.1.113883.4.642.4.1079"/></identifier><version value="6.0.0-ballot4"/><name value="RestfulSecurityService"/><title value="Restful Security Service"/><status value="active"/><experimental value="false"/><date value="2020-12-28T16:55:11+11:00"/><publisher value="HL7 (FHIR Project)"/><contact><telecom><system value="url"/><value value="http://hl7.org/fhir"/></telecom><telecom><system value="email"/><value value="fhir@lists.hl7.org"/></telecom></contact><description value="Types of security services used with FHIR."/><jurisdiction><coding><system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/><code value="001"/><display value="World"/></coding></jurisdiction><caseSensitive value="true"/><valueSet value="http://hl7.org/fhir/ValueSet/restful-security-service"/><content value="complete"/><concept><code value="OAuth"/><display value="OAuth"/><definition value="OAuth (unspecified version see oauth.net)."/></concept><concept><code value="SMART-on-FHIR"/><display value="SMART-on-FHIR"/><definition value="OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/)."/></concept><concept><code value="NTLM"/><display value="NTLM"/><definition value="Microsoft NTLM Authentication."/></concept><concept><code value="Basic"/><display value="Basic"/><definition value="Basic authentication defined in HTTP specification."/></concept><concept><code value="Kerberos"/><display value="Kerberos"/><definition value="see http://www.ietf.org/rfc/rfc4120.txt."/></concept><concept><code value="Certificates"/><display value="Certificates"/><definition value="SSL where client must have a certificate registered with the server."/></concept></CodeSystem>