<?xml version="1.0" encoding="UTF-8"?>

<CodeSystem xmlns="http://hl7.org/fhir">
  <id value="restful-security-service"/>
  <meta>
    <lastUpdated value="2026-03-31T18:55:04.283+00:00"/>
  </meta>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml">
      <p class="res-header-id">
        <b>Generated Narrative: CodeSystem restful-security-service</b>
      </p>
      <a name="restful-security-service"> </a>
      <a name="hcrestful-security-service"> </a>
      <p>This case-sensitive code system 
        <code>http://hl7.org/fhir/restful-security-service</code> defines the following codes:
      </p>
      <table class="codes">
        <tr>
          <td style="white-space:nowrap">
            <b>Code</b>
          </td>
          <td>
            <b>Definition</b>
          </td>
        </tr>
        <tr>
          <td style="white-space:nowrap">OAuth
            <a name="restful-security-service-OAuth"> </a>
          </td>
          <td>OAuth (unspecified version see oauth.net).</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">SMART-on-FHIR
            <a name="restful-security-service-SMART-on-FHIR"> </a>
          </td>
          <td>OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/).</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">NTLM
            <a name="restful-security-service-NTLM"> </a>
          </td>
          <td>Microsoft NTLM Authentication.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">Basic
            <a name="restful-security-service-Basic"> </a>
          </td>
          <td>Basic authentication defined in HTTP specification.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">Kerberos
            <a name="restful-security-service-Kerberos"> </a>
          </td>
          <td>see http://www.ietf.org/rfc/rfc4120.txt.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">Certificates
            <a name="restful-security-service-Certificates"> </a>
          </td>
          <td>SSL where client must have a certificate registered with the server.</td>
        </tr>
      </table>
    </div>
  </text>
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg">
    <valueCode value="fhir"/>
  </extension>
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status">
    <valueCode value="normative"/>
  </extension>
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm">
    <valueInteger value="5"/>
  </extension>
  <url value="http://hl7.org/fhir/restful-security-service"/>
  <identifier>
    <system value="urn:ietf:rfc:3986"/>
    <value value="urn:oid:2.16.840.1.113883.4.642.4.1079"/>
  </identifier>
  <version value="6.0.0-ballot4"/>
  <name value="RestfulSecurityService"/>
  <title value="Restful Security Service"/>
  <status value="active"/>
  <experimental value="false"/>
  <date value="2020-12-28T16:55:11+11:00"/>
  <publisher value="HL7 (FHIR Project)"/>
  <contact>
    <telecom>
      <system value="url"/>
      <value value="http://hl7.org/fhir"/>
    </telecom>
    <telecom>
      <system value="email"/>
      <value value="fhir@lists.hl7.org"/>
    </telecom>
  </contact>
  <description value="Types of security services used with FHIR."/>
  <jurisdiction>
    <coding>
      <system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/>
      <code value="001"/>
      <display value="World"/>
    </coding>
  </jurisdiction>
  <caseSensitive value="true"/>
  <valueSet value="http://hl7.org/fhir/ValueSet/restful-security-service"/>
  <content value="complete"/>
  <concept>
    <code value="OAuth"/>
    <display value="OAuth"/>
    <definition value="OAuth (unspecified version see oauth.net)."/>
  </concept>
  <concept>
    <code value="SMART-on-FHIR"/>
    <display value="SMART-on-FHIR"/>
    <definition value="OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/)."/>
  </concept>
  <concept>
    <code value="NTLM"/>
    <display value="NTLM"/>
    <definition value="Microsoft NTLM Authentication."/>
  </concept>
  <concept>
    <code value="Basic"/>
    <display value="Basic"/>
    <definition value="Basic authentication defined in HTTP specification."/>
  </concept>
  <concept>
    <code value="Kerberos"/>
    <display value="Kerberos"/>
    <definition value="see http://www.ietf.org/rfc/rfc4120.txt."/>
  </concept>
  <concept>
    <code value="Certificates"/>
    <display value="Certificates"/>
    <definition value="SSL where client must have a certificate registered with the server."/>
  </concept>
</CodeSystem>