Interoperable Digital Identity and Patient Matching
3.0.0-current - STU 3 United States of America flag

Interoperable Digital Identity and Patient Matching, published by HL7 International / Patient Administration. This guide is not an authorized publication; it is the continuous build for version 3.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-identity-matching-ig/ and changes regularly. See the Directory of published versions

Logical Model: Identity Assertion - Mappings

Page standards status: Trial-use Maturity Level: 2

Mappings for the identity-assertion logical model.

Mappings to Structures in this Implementation Guide

NameIdentity Assertion to OpenID Connect ID Tokendoco
identity-assertion
OIDCToken
identity-assertion / masterIdentifier
identity-assertion / masterIdentifier / @id
identity-assertion / masterIdentifier / extension
identity-assertion / masterIdentifier / @value
OIDCToken.sub
Use only when this is the subject identifier assigned for this issuer and relying-party context.
identity-assertion / masterIdentifier / system
identity-assertion / names
identity-assertion / names / @id
identity-assertion / names / extension
identity-assertion / names / modifierExtension
identity-assertion / names / first
OIDCToken.given_name
identity-assertion / names / middle
OIDCToken.middle_name
identity-assertion / names / last
OIDCToken.family_name
identity-assertion / names / prefix
identity-assertion / names / suffix
identity-assertion / names / validityPeriod
identity-assertion / addresses
OIDCToken.address
OIDC models one address object; select the applicable current address.
identity-assertion / addresses / @id
identity-assertion / addresses / extension
identity-assertion / addresses / use
identity-assertion / addresses / type
identity-assertion / addresses / text
identity-assertion / addresses / line
OIDCToken.address.street_address
identity-assertion / addresses / city
OIDCToken.address.locality
identity-assertion / addresses / district
identity-assertion / addresses / state
OIDCToken.address.region
identity-assertion / addresses / postalCode
OIDCToken.address.postal_code
identity-assertion / addresses / country
OIDCToken.address.country
identity-assertion / addresses / period
identity-assertion / phoneNumbers
identity-assertion / phoneNumbers / @id
identity-assertion / phoneNumbers / extension
identity-assertion / phoneNumbers / modifierExtension
identity-assertion / phoneNumbers / number
OIDCToken.phone_number
OIDC models one phone_number claim; select the applicable current number.
identity-assertion / phoneNumbers / validityPeriod
identity-assertion / phoneNumbers / type
identity-assertion / phoneNumbers / use
identity-assertion / phoneNumbers / rank
identity-assertion / emails
identity-assertion / emails / @id
identity-assertion / emails / extension
identity-assertion / emails / modifierExtension
identity-assertion / emails / address
OIDCToken.email
OIDC models one email claim; select the applicable current address.
identity-assertion / emails / validityPeriod
identity-assertion / emails / type
identity-assertion / ssn
OIDCToken.verified_claims.claims.ssn_last4
Only derive and disclose the last four digits when authorized; never map the full SSN. This is a proposal-specific claim, not a standard OIDC claim.
identity-assertion / identifiers
identity-assertion / identifiers / @id
identity-assertion / identifiers / extension
identity-assertion / identifiers / modifierExtension
identity-assertion / identifiers / value
identity-assertion / identifiers / system
identity-assertion / identifiers / type
identity-assertion / identifiers / validityPeriod
identity-assertion / identifiers / issuer
identity-assertion / birthDate
OIDCToken.birthdate
identity-assertion / photo
OIDCToken.picture
Convert to a retrievable image URL when available.
identity-assertion / gender
OIDCToken.gender
identity-assertion / maritalStatus
identity-assertion / race
identity-assertion / ethnicity
identity-assertion / tribalAffiliation
identity-assertion / religion
identity-assertion / placeOfBirth
identity-assertion / placeOfDeath
identity-assertion / deathDate
identity-assertion / causeOfDeath
identity-assertion / assuranceLevel
OIDCToken.verified_claims.verification.assurance_level
Map to the OIDC4IDA verification assurance level.
identity-assertion / verificationStatus
identity-assertion / assuranceDate
OIDCToken.verified_claims.verification.time
Map to the time of identity verification.
identity-assertion / assuranceMethod
identity-assertion / contact
identity-assertion / contact / @id
identity-assertion / contact / extension
identity-assertion / contact / modifierExtension
identity-assertion / contact / relationship
identity-assertion / contact / name
identity-assertion / contact / phone
identity-assertion / contact / email
identity-assertion / contact / address
identity-assertion / contact / gender
identity-assertion / contact / period
identity-assertion / communication
identity-assertion / communication / @id
identity-assertion / communication / extension
identity-assertion / communication / modifierExtension
identity-assertion / communication / language
identity-assertion / communication / preferred
identity-assertion / generalPractitioner
identity-assertion / managingOrganization

doco Documentation for this format

Mappings to other Structures

NameIdentity Assertion to FHIR PatientIdentity Assertion to US Core Patientdoco
identity-assertion
identity-assertion / masterIdentifier
identity-assertion / masterIdentifier / @id
identity-assertion / masterIdentifier / extension
identity-assertion / masterIdentifier / @value
Patient.identifier.value
identity-assertion / masterIdentifier / system
Patient.identifier.system
identity-assertion / names
identity-assertion / names / @id
identity-assertion / names / extension
identity-assertion / names / modifierExtension
identity-assertion / names / first
Patient.name.given
Map as a given name.
Patient.name.given
Map as a given name.
identity-assertion / names / middle
Patient.name.given
Map additional given names in order.
Patient.name.given
Map additional given names in order.
identity-assertion / names / last
Patient.name.family
identity-assertion / names / prefix
Patient.name.prefix
identity-assertion / names / suffix
Patient.name.suffix
identity-assertion / names / validityPeriod
Patient.name.period
identity-assertion / addresses
identity-assertion / addresses / @id
identity-assertion / addresses / extension
identity-assertion / addresses / use
Patient.address.use
identity-assertion / addresses / type
Patient.address.type
identity-assertion / addresses / text
identity-assertion / addresses / line
Patient.address.line
identity-assertion / addresses / city
Patient.address.city
identity-assertion / addresses / district
identity-assertion / addresses / state
Patient.address.state
identity-assertion / addresses / postalCode
Patient.address.postalCode
identity-assertion / addresses / country
Patient.address.country
identity-assertion / addresses / period
Patient.address.period
identity-assertion / phoneNumbers
identity-assertion / phoneNumbers / @id
identity-assertion / phoneNumbers / extension
identity-assertion / phoneNumbers / modifierExtension
identity-assertion / phoneNumbers / number
Patient.telecom.value
identity-assertion / phoneNumbers / validityPeriod
Patient.telecom.period
identity-assertion / phoneNumbers / type
Patient.telecom.system
identity-assertion / phoneNumbers / use
Patient.telecom.use
identity-assertion / phoneNumbers / rank
Patient.telecom.rank
identity-assertion / emails
identity-assertion / emails / @id
identity-assertion / emails / extension
identity-assertion / emails / modifierExtension
identity-assertion / emails / address
Patient.telecom.value
identity-assertion / emails / validityPeriod
Patient.telecom.period
identity-assertion / emails / type
Patient.telecom.use
The personal code requires interpretation, such as mapping to home.
Patient.telecom.use
The personal code requires interpretation, such as mapping to home.
identity-assertion / ssn
Patient.identifier.value
Represent each value as an identifier and supply an appropriate system and type.
Patient.identifier.value
Represent each value as an identifier and supply an appropriate system and type.
identity-assertion / identifiers
identity-assertion / identifiers / @id
identity-assertion / identifiers / extension
identity-assertion / identifiers / modifierExtension
identity-assertion / identifiers / value
Patient.identifier.value
identity-assertion / identifiers / system
Patient.identifier.system
identity-assertion / identifiers / type
Patient.identifier.type
identity-assertion / identifiers / validityPeriod
Patient.identifier.period
identity-assertion / identifiers / issuer
Patient.identifier.assigner.display
Convert the issuer string to an Identifier.assigner reference when possible.
Patient.identifier.assigner.display
Convert the issuer string to an Identifier.assigner reference when possible.
identity-assertion / birthDate
identity-assertion / photo
identity-assertion / gender
identity-assertion / maritalStatus
identity-assertion / race
//hl7.org/fhir/us/core/StructureDefinition/us-core-race]
//hl7.org/fhir/us/core/StructureDefinition/us-core-race]
identity-assertion / ethnicity
//hl7.org/fhir/us/core/StructureDefinition/us-core-ethnicity]
//hl7.org/fhir/us/core/StructureDefinition/us-core-ethnicity]
identity-assertion / tribalAffiliation
identity-assertion / religion
identity-assertion / placeOfBirth
//hl7.org/fhir/StructureDefinition/patient-birthPlace]
Convert the string to the extension's valueAddress.
//hl7.org/fhir/StructureDefinition/patient-birthPlace]
Convert the string to the extension's valueAddress.
identity-assertion / placeOfDeath
identity-assertion / deathDate
Patient.deceasedDateTime
Patient.deceasedDateTime
identity-assertion / causeOfDeath
identity-assertion / assuranceLevel
identity-assertion / verificationStatus
identity-assertion / assuranceDate
identity-assertion / assuranceMethod
identity-assertion / contact
identity-assertion / contact / @id
identity-assertion / contact / extension
identity-assertion / contact / modifierExtension
identity-assertion / contact / relationship
identity-assertion / contact / name
Patient.contact.name.text
Patient.contact.name.text
identity-assertion / contact / phone
Patient.contact.telecom.value
Set ContactPoint.system to phone.
Patient.contact.telecom.value
Set ContactPoint.system to phone.
identity-assertion / contact / email
Patient.contact.telecom.value
Set ContactPoint.system to email.
Patient.contact.telecom.value
Set ContactPoint.system to email.
identity-assertion / contact / address
Patient.contact.address.text
Patient.contact.address.text
identity-assertion / contact / gender
identity-assertion / contact / period
identity-assertion / communication
identity-assertion / communication / @id
identity-assertion / communication / extension
identity-assertion / communication / modifierExtension
identity-assertion / communication / language
identity-assertion / communication / preferred
identity-assertion / generalPractitioner
identity-assertion / managingOrganization
Patient.managingOrganization
Convert the organization string to a Reference(Organization).
Patient.managingOrganization
Convert the organization string to a Reference(Organization).

doco Documentation for this format

Other Mappings

NameIdentity Assertion to Person-Bearing OOR/ECR vLEI Credentialdoco
identity-assertion
OOR/ECR credential attributes
identity-assertion / masterIdentifier
identity-assertion / masterIdentifier / @id
identity-assertion / masterIdentifier / extension
identity-assertion / masterIdentifier / @value
credential issuee AID
Map only when this is the same AID used as the credential issuee; the AID is the credential subject binding, not a personLegalName attribute.
identity-assertion / masterIdentifier / system
identity-assertion / names
personLegalName
Use the current legal name; the credential attribute is a single full-name string, not separate given and family name fields.
identity-assertion / names / @id
identity-assertion / names / extension
identity-assertion / names / modifierExtension
identity-assertion / names / first
identity-assertion / names / middle
identity-assertion / names / last
identity-assertion / names / prefix
identity-assertion / names / suffix
identity-assertion / names / validityPeriod
identity-assertion / addresses
identity-assertion / addresses / @id
identity-assertion / addresses / extension
identity-assertion / addresses / use
identity-assertion / addresses / type
identity-assertion / addresses / text
identity-assertion / addresses / line
identity-assertion / addresses / city
identity-assertion / addresses / district
identity-assertion / addresses / state
identity-assertion / addresses / postalCode
identity-assertion / addresses / country
identity-assertion / addresses / period
identity-assertion / phoneNumbers
identity-assertion / phoneNumbers / @id
identity-assertion / phoneNumbers / extension
identity-assertion / phoneNumbers / modifierExtension
identity-assertion / phoneNumbers / number
identity-assertion / phoneNumbers / validityPeriod
identity-assertion / phoneNumbers / type
identity-assertion / phoneNumbers / use
identity-assertion / phoneNumbers / rank
identity-assertion / emails
identity-assertion / emails / @id
identity-assertion / emails / extension
identity-assertion / emails / modifierExtension
identity-assertion / emails / address
identity-assertion / emails / validityPeriod
identity-assertion / emails / type
identity-assertion / ssn
identity-assertion / identifiers
identity-assertion / identifiers / @id
identity-assertion / identifiers / extension
identity-assertion / identifiers / modifierExtension
identity-assertion / identifiers / value
LEI
Map only when this identifier is the represented organization's LEI, not an identifier of the individual.
identity-assertion / identifiers / system
identity-assertion / identifiers / type
identity-assertion / identifiers / validityPeriod
identity-assertion / identifiers / issuer
identity-assertion / birthDate
identity-assertion / photo
identity-assertion / gender
identity-assertion / maritalStatus
identity-assertion / race
identity-assertion / ethnicity
identity-assertion / tribalAffiliation
identity-assertion / religion
identity-assertion / placeOfBirth
identity-assertion / placeOfDeath
identity-assertion / deathDate
identity-assertion / causeOfDeath
identity-assertion / assuranceLevel
identity-assertion / verificationStatus
identity-assertion / assuranceDate
identity-assertion / assuranceMethod
identity-assertion / contact
identity-assertion / contact / @id
identity-assertion / contact / extension
identity-assertion / contact / modifierExtension
identity-assertion / contact / relationship
identity-assertion / contact / name
identity-assertion / contact / phone
identity-assertion / contact / email
identity-assertion / contact / address
identity-assertion / contact / gender
identity-assertion / contact / period
identity-assertion / communication
identity-assertion / communication / @id
identity-assertion / communication / extension
identity-assertion / communication / modifierExtension
identity-assertion / communication / language
identity-assertion / communication / preferred
identity-assertion / generalPractitioner
identity-assertion / managingOrganization

doco Documentation for this format