Interoperable Digital Identity and Patient Matching
3.0.0-current - STU 3 United States of America flag

Interoperable Digital Identity and Patient Matching, published by HL7 International / Patient Administration. This guide is not an authorized publication; it is the continuous build for version 3.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-identity-matching-ig/ and changes regularly. See the Directory of published versions

Logical Model: OpenID Connect ID Token - Detailed Descriptions

Page standards status: Trial-use Maturity Level: 2

Definitions for the oidc-token logical model

See the documentation on how to interpret the contents of this table

0. oidc-token
Definition

A logical representation of common JWT registered claims, OpenID Connect ID Token claims, and the OIDC for Identity Assurance verified_claims object. It is not a JWT wire-format or signature model. See RFC 7519, OpenID Connect Core, and OpenID Connect for Identity Assurance.

ShortOpenID Connect ID Token
Control0..*
Is Modifierfalse
Logical ModelInstances of this logical model are not marked to be the target of a Reference
2. oidc-token.iss
Definition

Issuer

ShortIssuer
Control1..1
Typeuri
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
4. oidc-token.sub
Definition

Subject identifier

ShortSubject identifier
Control1..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
6. oidc-token.aud
Definition

Audience identifiers

ShortAudience identifiers
Control1..*
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
8. oidc-token.exp
Definition

Expiration time as a JWT NumericDate

ShortExpiration time as a JWT NumericDate
Control1..1
Typedecimal
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
10. oidc-token.iat
Definition

Issued-at time as a JWT NumericDate

ShortIssued-at time as a JWT NumericDate
Control1..1
Typedecimal
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
12. oidc-token.nbf
Definition

Not-before time as a JWT NumericDate

ShortNot-before time as a JWT NumericDate
Control0..1
Typedecimal
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
14. oidc-token.jti
Definition

JWT identifier

ShortJWT identifier
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
16. oidc-token.auth-time
Definition

Time of end-user authentication as a JWT NumericDate

ShortTime of end-user authentication as a JWT NumericDate
Control0..1
Typedecimal
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
18. oidc-token.nonce
Definition

Nonce supplied by the relying party

ShortNonce supplied by the relying party
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
20. oidc-token.acr
Definition

Authentication context class reference

ShortAuthentication context class reference
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
22. oidc-token.amr
Definition

Authentication methods used

ShortAuthentication methods used
Control0..*
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
24. oidc-token.azp
Definition

Authorized party

ShortAuthorized party
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
26. oidc-token.at-hash
Definition

Access token hash

ShortAccess token hash
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
28. oidc-token.c-hash
Definition

Authorization code hash

ShortAuthorization code hash
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
30. oidc-token.name
Definition

Full name

ShortFull name
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
32. oidc-token.given-name
Definition

Given name

ShortGiven name
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
34. oidc-token.middle-name
Definition

Middle name(s)

ShortMiddle name(s)
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
36. oidc-token.family-name
Definition

Family name

ShortFamily name
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
38. oidc-token.nickname
Definition

Casual name

ShortCasual name
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
40. oidc-token.preferred-username
Definition

Preferred username

ShortPreferred username
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
42. oidc-token.profile
Definition

Profile page URL

ShortProfile page URL
Control0..1
Typeuri
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
44. oidc-token.picture
Definition

Profile picture URL

ShortProfile picture URL
Control0..1
Typeuri
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
46. oidc-token.website
Definition

Web page URL

ShortWeb page URL
Control0..1
Typeuri
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
48. oidc-token.email
Definition

Email address

ShortEmail address
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
50. oidc-token.email-verified
Definition

Whether the email address was verified

ShortWhether the email address was verified
Control0..1
Typeboolean
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
52. oidc-token.gender
Definition

Gender

ShortGender
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
54. oidc-token.birthdate
Definition

Birth date

ShortBirth date
Control0..1
Typedate
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
56. oidc-token.zoneinfo
Definition

Time zone

ShortTime zone
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
58. oidc-token.locale
Definition

Locale

ShortLocale
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
60. oidc-token.phone-number
Definition

Phone number

ShortPhone number
Control0..1
Typestring
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
62. oidc-token.phone-number-verified
Definition

Whether the phone number was verified

ShortWhether the phone number was verified
Control0..1
Typeboolean
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
64. oidc-token.address
Definition

Postal address

ShortPostal address
Control0..1
TypeBackboneElement
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
66. oidc-token.address.id
Definition

Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

ShortUnique id for inter-element referencing
Control0..1
Typestring
Is Modifierfalse
XML FormatIn the XML format, this property is represented as an attribute.
Summaryfalse
68. oidc-token.address.extension
Definition

May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

ShortAdditional content defined by implementations
Comments

There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

Control0..*
TypeExtension
Is Modifierfalse
Summaryfalse
Alternate Namesextensions, user content
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
SlicingThis element introduces a set of slices on oidc-token.address.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
  • value @ url
  • 70. oidc-token.address.modifierExtension
    Definition

    May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

    Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

    ShortExtensions that cannot be ignored even if unrecognized
    Comments

    There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

    Control0..*
    TypeExtension
    Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
    Summarytrue
    Requirements

    Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

    Alternate Namesextensions, user content, modifiers
    Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
    ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
    72. oidc-token.address.formatted
    Definition

    Full formatted address

    ShortFull formatted address
    Control0..1
    Typestring
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    74. oidc-token.address.street-address
    Definition

    Street address

    ShortStreet address
    Control0..1
    Typestring
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    76. oidc-token.address.locality
    Definition

    City or locality

    ShortCity or locality
    Control0..1
    Typestring
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    78. oidc-token.address.region
    Definition

    State, province, or region

    ShortState, province, or region
    Control0..1
    Typestring
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    80. oidc-token.address.postal-code
    Definition

    Postal code

    ShortPostal code
    Control0..1
    Typestring
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    82. oidc-token.address.country
    Definition

    Country

    ShortCountry
    Control0..1
    Typestring
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    84. oidc-token.updated-at
    Definition

    Time the end-user information was last updated as a JWT NumericDate

    ShortTime the end-user information was last updated as a JWT NumericDate
    Control0..1
    Typedecimal
    Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
    86. oidc-token.verified-claims
    Definition

    Verified claims with their verification context

    ShortVerified claims with their verification context
    Control0..*
    TypeBackboneElement
    Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
    88. oidc-token.verified-claims.id
    Definition

    Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

    ShortUnique id for inter-element referencing
    Control0..1
    Typestring
    Is Modifierfalse
    XML FormatIn the XML format, this property is represented as an attribute.
    Summaryfalse
    90. oidc-token.verified-claims.extension
    Definition

    May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

    ShortAdditional content defined by implementations
    Comments

    There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

    Control0..*
    TypeExtension
    Is Modifierfalse
    Summaryfalse
    Alternate Namesextensions, user content
    Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
    ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
    SlicingThis element introduces a set of slices on oidc-token.verified_claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
    • value @ url
    • 92. oidc-token.verified-claims.modifierExtension
      Definition

      May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

      Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

      ShortExtensions that cannot be ignored even if unrecognized
      Comments

      There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

      Control0..*
      TypeExtension
      Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
      Summarytrue
      Requirements

      Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

      Alternate Namesextensions, user content, modifiers
      Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
      ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
      94. oidc-token.verified-claims.verification
      Definition

      Verification context

      ShortVerification context
      Control0..1
      TypeBackboneElement
      Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
      96. oidc-token.verified-claims.verification.id
      Definition

      Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

      ShortUnique id for inter-element referencing
      Control0..1
      Typestring
      Is Modifierfalse
      XML FormatIn the XML format, this property is represented as an attribute.
      Summaryfalse
      98. oidc-token.verified-claims.verification.extension
      Definition

      May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

      ShortAdditional content defined by implementations
      Comments

      There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

      Control0..*
      TypeExtension
      Is Modifierfalse
      Summaryfalse
      Alternate Namesextensions, user content
      Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
      ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
      SlicingThis element introduces a set of slices on oidc-token.verified_claims.verification.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
      • value @ url
      • 100. oidc-token.verified-claims.verification.modifierExtension
        Definition

        May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

        Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

        ShortExtensions that cannot be ignored even if unrecognized
        Comments

        There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

        Control0..*
        TypeExtension
        Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
        Summarytrue
        Requirements

        Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

        Alternate Namesextensions, user content, modifiers
        Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
        ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
        102. oidc-token.verified-claims.verification.trust-framework
        Definition

        Trust framework

        ShortTrust framework
        Control0..1
        Typestring
        Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
        104. oidc-token.verified-claims.verification.time
        Definition

        Time of verification

        ShortTime of verification
        Control0..1
        TypedateTime
        Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
        106. oidc-token.verified-claims.verification.assurance-level
        Definition

        Assurance level

        ShortAssurance level
        Control0..1
        Typestring
        Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
        108. oidc-token.verified-claims.claims
        Definition

        Identity claims covered by the verification

        ShortIdentity claims covered by the verification
        Control0..1
        TypeBackboneElement
        Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
        110. oidc-token.verified-claims.claims.id
        Definition

        Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

        ShortUnique id for inter-element referencing
        Control0..1
        Typestring
        Is Modifierfalse
        XML FormatIn the XML format, this property is represented as an attribute.
        Summaryfalse
        112. oidc-token.verified-claims.claims.extension
        Definition

        May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

        ShortAdditional content defined by implementations
        Comments

        There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

        Control0..*
        TypeExtension
        Is Modifierfalse
        Summaryfalse
        Alternate Namesextensions, user content
        Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
        ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
        SlicingThis element introduces a set of slices on oidc-token.verified_claims.claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
        • value @ url
        • 114. oidc-token.verified-claims.claims.modifierExtension
          Definition

          May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

          Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

          ShortExtensions that cannot be ignored even if unrecognized
          Comments

          There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

          Control0..*
          TypeExtension
          Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
          Summarytrue
          Requirements

          Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

          Alternate Namesextensions, user content, modifiers
          Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
          ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
          116. oidc-token.verified-claims.claims.given-name
          Definition

          Verified given name

          ShortVerified given name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          118. oidc-token.verified-claims.claims.middle-name
          Definition

          Verified middle name(s)

          ShortVerified middle name(s)
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          120. oidc-token.verified-claims.claims.family-name
          Definition

          Verified family name

          ShortVerified family name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          122. oidc-token.verified-claims.claims.birthdate
          Definition

          Verified birth date

          ShortVerified birth date
          Control0..1
          Typedate
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          124. oidc-token.verified-claims.claims.email
          Definition

          Verified email address

          ShortVerified email address
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          126. oidc-token.verified-claims.claims.phone-number
          Definition

          Verified phone number

          ShortVerified phone number
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          128. oidc-token.verified-claims.claims.ssn-last4
          Definition

          Proposal-specific claim for the last four SSN digits

          ShortProposal-specific claim for the last four SSN digits
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension

          See the documentation on how to interpret the contents of this table

          0. oidc-token
          Definition

          A logical representation of common JWT registered claims, OpenID Connect ID Token claims, and the OIDC for Identity Assurance verified_claims object. It is not a JWT wire-format or signature model. See RFC 7519, OpenID Connect Core, and OpenID Connect for Identity Assurance.

          ShortOpenID Connect ID Token
          Logical ModelInstances of this logical model are not marked to be the target of a Reference
          2. oidc-token.iss
          Definition

          Issuer

          ShortIssuer
          Control1..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          4. oidc-token.sub
          Definition

          Subject identifier

          ShortSubject identifier
          Control1..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          6. oidc-token.aud
          Definition

          Audience identifiers

          ShortAudience identifiers
          Control1..*
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          8. oidc-token.exp
          Definition

          Expiration time as a JWT NumericDate

          ShortExpiration time as a JWT NumericDate
          Control1..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          10. oidc-token.iat
          Definition

          Issued-at time as a JWT NumericDate

          ShortIssued-at time as a JWT NumericDate
          Control1..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          12. oidc-token.nbf
          Definition

          Not-before time as a JWT NumericDate

          ShortNot-before time as a JWT NumericDate
          Control0..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          14. oidc-token.jti
          Definition

          JWT identifier

          ShortJWT identifier
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          16. oidc-token.auth-time
          Definition

          Time of end-user authentication as a JWT NumericDate

          ShortTime of end-user authentication as a JWT NumericDate
          Control0..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          18. oidc-token.nonce
          Definition

          Nonce supplied by the relying party

          ShortNonce supplied by the relying party
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          20. oidc-token.acr
          Definition

          Authentication context class reference

          ShortAuthentication context class reference
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          22. oidc-token.amr
          Definition

          Authentication methods used

          ShortAuthentication methods used
          Control0..*
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          24. oidc-token.azp
          Definition

          Authorized party

          ShortAuthorized party
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          26. oidc-token.at-hash
          Definition

          Access token hash

          ShortAccess token hash
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          28. oidc-token.c-hash
          Definition

          Authorization code hash

          ShortAuthorization code hash
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          30. oidc-token.name
          Definition

          Full name

          ShortFull name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          32. oidc-token.given-name
          Definition

          Given name

          ShortGiven name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          34. oidc-token.middle-name
          Definition

          Middle name(s)

          ShortMiddle name(s)
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          36. oidc-token.family-name
          Definition

          Family name

          ShortFamily name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          38. oidc-token.nickname
          Definition

          Casual name

          ShortCasual name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          40. oidc-token.preferred-username
          Definition

          Preferred username

          ShortPreferred username
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          42. oidc-token.profile
          Definition

          Profile page URL

          ShortProfile page URL
          Control0..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          44. oidc-token.picture
          Definition

          Profile picture URL

          ShortProfile picture URL
          Control0..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          46. oidc-token.website
          Definition

          Web page URL

          ShortWeb page URL
          Control0..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          48. oidc-token.email
          Definition

          Email address

          ShortEmail address
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          50. oidc-token.email-verified
          Definition

          Whether the email address was verified

          ShortWhether the email address was verified
          Control0..1
          Typeboolean
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          52. oidc-token.gender
          Definition

          Gender

          ShortGender
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          54. oidc-token.birthdate
          Definition

          Birth date

          ShortBirth date
          Control0..1
          Typedate
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          56. oidc-token.zoneinfo
          Definition

          Time zone

          ShortTime zone
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          58. oidc-token.locale
          Definition

          Locale

          ShortLocale
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          60. oidc-token.phone-number
          Definition

          Phone number

          ShortPhone number
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          62. oidc-token.phone-number-verified
          Definition

          Whether the phone number was verified

          ShortWhether the phone number was verified
          Control0..1
          Typeboolean
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          64. oidc-token.address
          Definition

          Postal address

          ShortPostal address
          Control0..1
          TypeBackboneElement
          66. oidc-token.address.formatted
          Definition

          Full formatted address

          ShortFull formatted address
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          68. oidc-token.address.street-address
          Definition

          Street address

          ShortStreet address
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          70. oidc-token.address.locality
          Definition

          City or locality

          ShortCity or locality
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          72. oidc-token.address.region
          Definition

          State, province, or region

          ShortState, province, or region
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          74. oidc-token.address.postal-code
          Definition

          Postal code

          ShortPostal code
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          76. oidc-token.address.country
          Definition

          Country

          ShortCountry
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          78. oidc-token.updated-at
          Definition

          Time the end-user information was last updated as a JWT NumericDate

          ShortTime the end-user information was last updated as a JWT NumericDate
          Control0..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          80. oidc-token.verified-claims
          Definition

          Verified claims with their verification context

          ShortVerified claims with their verification context
          Control0..*
          TypeBackboneElement
          82. oidc-token.verified-claims.verification
          Definition

          Verification context

          ShortVerification context
          Control0..1
          TypeBackboneElement
          84. oidc-token.verified-claims.verification.trust-framework
          Definition

          Trust framework

          ShortTrust framework
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          86. oidc-token.verified-claims.verification.time
          Definition

          Time of verification

          ShortTime of verification
          Control0..1
          TypedateTime
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          88. oidc-token.verified-claims.verification.assurance-level
          Definition

          Assurance level

          ShortAssurance level
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          90. oidc-token.verified-claims.claims
          Definition

          Identity claims covered by the verification

          ShortIdentity claims covered by the verification
          Control0..1
          TypeBackboneElement
          92. oidc-token.verified-claims.claims.given-name
          Definition

          Verified given name

          ShortVerified given name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          94. oidc-token.verified-claims.claims.middle-name
          Definition

          Verified middle name(s)

          ShortVerified middle name(s)
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          96. oidc-token.verified-claims.claims.family-name
          Definition

          Verified family name

          ShortVerified family name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          98. oidc-token.verified-claims.claims.birthdate
          Definition

          Verified birth date

          ShortVerified birth date
          Control0..1
          Typedate
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          100. oidc-token.verified-claims.claims.email
          Definition

          Verified email address

          ShortVerified email address
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          102. oidc-token.verified-claims.claims.phone-number
          Definition

          Verified phone number

          ShortVerified phone number
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          104. oidc-token.verified-claims.claims.ssn-last4
          Definition

          Proposal-specific claim for the last four SSN digits

          ShortProposal-specific claim for the last four SSN digits
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension

          See the documentation on how to interpret the contents of this table

          0. oidc-token
          Definition

          A logical representation of common JWT registered claims, OpenID Connect ID Token claims, and the OIDC for Identity Assurance verified_claims object. It is not a JWT wire-format or signature model. See RFC 7519, OpenID Connect Core, and OpenID Connect for Identity Assurance.

          ShortOpenID Connect ID Token
          Control0..*
          Is Modifierfalse
          Logical ModelInstances of this logical model are not marked to be the target of a Reference
          2. oidc-token.iss
          Definition

          Issuer

          ShortIssuer
          Control1..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          4. oidc-token.sub
          Definition

          Subject identifier

          ShortSubject identifier
          Control1..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          6. oidc-token.aud
          Definition

          Audience identifiers

          ShortAudience identifiers
          Control1..*
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          8. oidc-token.exp
          Definition

          Expiration time as a JWT NumericDate

          ShortExpiration time as a JWT NumericDate
          Control1..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          10. oidc-token.iat
          Definition

          Issued-at time as a JWT NumericDate

          ShortIssued-at time as a JWT NumericDate
          Control1..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          12. oidc-token.nbf
          Definition

          Not-before time as a JWT NumericDate

          ShortNot-before time as a JWT NumericDate
          Control0..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          14. oidc-token.jti
          Definition

          JWT identifier

          ShortJWT identifier
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          16. oidc-token.auth-time
          Definition

          Time of end-user authentication as a JWT NumericDate

          ShortTime of end-user authentication as a JWT NumericDate
          Control0..1
          Typedecimal
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          18. oidc-token.nonce
          Definition

          Nonce supplied by the relying party

          ShortNonce supplied by the relying party
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          20. oidc-token.acr
          Definition

          Authentication context class reference

          ShortAuthentication context class reference
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          22. oidc-token.amr
          Definition

          Authentication methods used

          ShortAuthentication methods used
          Control0..*
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          24. oidc-token.azp
          Definition

          Authorized party

          ShortAuthorized party
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          26. oidc-token.at-hash
          Definition

          Access token hash

          ShortAccess token hash
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          28. oidc-token.c-hash
          Definition

          Authorization code hash

          ShortAuthorization code hash
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          30. oidc-token.name
          Definition

          Full name

          ShortFull name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          32. oidc-token.given-name
          Definition

          Given name

          ShortGiven name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          34. oidc-token.middle-name
          Definition

          Middle name(s)

          ShortMiddle name(s)
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          36. oidc-token.family-name
          Definition

          Family name

          ShortFamily name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          38. oidc-token.nickname
          Definition

          Casual name

          ShortCasual name
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          40. oidc-token.preferred-username
          Definition

          Preferred username

          ShortPreferred username
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          42. oidc-token.profile
          Definition

          Profile page URL

          ShortProfile page URL
          Control0..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          44. oidc-token.picture
          Definition

          Profile picture URL

          ShortProfile picture URL
          Control0..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          46. oidc-token.website
          Definition

          Web page URL

          ShortWeb page URL
          Control0..1
          Typeuri
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          48. oidc-token.email
          Definition

          Email address

          ShortEmail address
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          50. oidc-token.email-verified
          Definition

          Whether the email address was verified

          ShortWhether the email address was verified
          Control0..1
          Typeboolean
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          52. oidc-token.gender
          Definition

          Gender

          ShortGender
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          54. oidc-token.birthdate
          Definition

          Birth date

          ShortBirth date
          Control0..1
          Typedate
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          56. oidc-token.zoneinfo
          Definition

          Time zone

          ShortTime zone
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          58. oidc-token.locale
          Definition

          Locale

          ShortLocale
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          60. oidc-token.phone-number
          Definition

          Phone number

          ShortPhone number
          Control0..1
          Typestring
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          62. oidc-token.phone-number-verified
          Definition

          Whether the phone number was verified

          ShortWhether the phone number was verified
          Control0..1
          Typeboolean
          Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
          64. oidc-token.address
          Definition

          Postal address

          ShortPostal address
          Control0..1
          TypeBackboneElement
          Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
          66. oidc-token.address.id
          Definition

          Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

          ShortUnique id for inter-element referencing
          Control0..1
          Typestring
          Is Modifierfalse
          XML FormatIn the XML format, this property is represented as an attribute.
          Summaryfalse
          68. oidc-token.address.extension
          Definition

          May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

          ShortAdditional content defined by implementations
          Comments

          There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

          Control0..*
          TypeExtension
          Is Modifierfalse
          Summaryfalse
          Alternate Namesextensions, user content
          Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
          ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
          SlicingThis element introduces a set of slices on oidc-token.address.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
          • value @ url
          • 70. oidc-token.address.modifierExtension
            Definition

            May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

            Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

            ShortExtensions that cannot be ignored even if unrecognized
            Comments

            There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

            Control0..*
            TypeExtension
            Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
            Summarytrue
            Requirements

            Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

            Alternate Namesextensions, user content, modifiers
            Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
            ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
            72. oidc-token.address.formatted
            Definition

            Full formatted address

            ShortFull formatted address
            Control0..1
            Typestring
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            74. oidc-token.address.street-address
            Definition

            Street address

            ShortStreet address
            Control0..1
            Typestring
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            76. oidc-token.address.locality
            Definition

            City or locality

            ShortCity or locality
            Control0..1
            Typestring
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            78. oidc-token.address.region
            Definition

            State, province, or region

            ShortState, province, or region
            Control0..1
            Typestring
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            80. oidc-token.address.postal-code
            Definition

            Postal code

            ShortPostal code
            Control0..1
            Typestring
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            82. oidc-token.address.country
            Definition

            Country

            ShortCountry
            Control0..1
            Typestring
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            84. oidc-token.updated-at
            Definition

            Time the end-user information was last updated as a JWT NumericDate

            ShortTime the end-user information was last updated as a JWT NumericDate
            Control0..1
            Typedecimal
            Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
            86. oidc-token.verified-claims
            Definition

            Verified claims with their verification context

            ShortVerified claims with their verification context
            Control0..*
            TypeBackboneElement
            Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
            88. oidc-token.verified-claims.id
            Definition

            Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

            ShortUnique id for inter-element referencing
            Control0..1
            Typestring
            Is Modifierfalse
            XML FormatIn the XML format, this property is represented as an attribute.
            Summaryfalse
            90. oidc-token.verified-claims.extension
            Definition

            May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

            ShortAdditional content defined by implementations
            Comments

            There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

            Control0..*
            TypeExtension
            Is Modifierfalse
            Summaryfalse
            Alternate Namesextensions, user content
            Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
            ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
            SlicingThis element introduces a set of slices on oidc-token.verified_claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
            • value @ url
            • 92. oidc-token.verified-claims.modifierExtension
              Definition

              May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

              Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

              ShortExtensions that cannot be ignored even if unrecognized
              Comments

              There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

              Control0..*
              TypeExtension
              Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
              Summarytrue
              Requirements

              Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

              Alternate Namesextensions, user content, modifiers
              Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
              ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
              94. oidc-token.verified-claims.verification
              Definition

              Verification context

              ShortVerification context
              Control0..1
              TypeBackboneElement
              Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
              96. oidc-token.verified-claims.verification.id
              Definition

              Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

              ShortUnique id for inter-element referencing
              Control0..1
              Typestring
              Is Modifierfalse
              XML FormatIn the XML format, this property is represented as an attribute.
              Summaryfalse
              98. oidc-token.verified-claims.verification.extension
              Definition

              May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

              ShortAdditional content defined by implementations
              Comments

              There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

              Control0..*
              TypeExtension
              Is Modifierfalse
              Summaryfalse
              Alternate Namesextensions, user content
              Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
              ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
              SlicingThis element introduces a set of slices on oidc-token.verified_claims.verification.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
              • value @ url
              • 100. oidc-token.verified-claims.verification.modifierExtension
                Definition

                May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

                Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

                ShortExtensions that cannot be ignored even if unrecognized
                Comments

                There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

                Control0..*
                TypeExtension
                Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
                Summarytrue
                Requirements

                Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

                Alternate Namesextensions, user content, modifiers
                Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
                ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
                102. oidc-token.verified-claims.verification.trust-framework
                Definition

                Trust framework

                ShortTrust framework
                Control0..1
                Typestring
                Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                104. oidc-token.verified-claims.verification.time
                Definition

                Time of verification

                ShortTime of verification
                Control0..1
                TypedateTime
                Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                106. oidc-token.verified-claims.verification.assurance-level
                Definition

                Assurance level

                ShortAssurance level
                Control0..1
                Typestring
                Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                108. oidc-token.verified-claims.claims
                Definition

                Identity claims covered by the verification

                ShortIdentity claims covered by the verification
                Control0..1
                TypeBackboneElement
                Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
                110. oidc-token.verified-claims.claims.id
                Definition

                Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

                ShortUnique id for inter-element referencing
                Control0..1
                Typestring
                Is Modifierfalse
                XML FormatIn the XML format, this property is represented as an attribute.
                Summaryfalse
                112. oidc-token.verified-claims.claims.extension
                Definition

                May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

                ShortAdditional content defined by implementations
                Comments

                There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

                Control0..*
                TypeExtension
                Is Modifierfalse
                Summaryfalse
                Alternate Namesextensions, user content
                Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
                ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
                SlicingThis element introduces a set of slices on oidc-token.verified_claims.claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators:
                • value @ url
                • 114. oidc-token.verified-claims.claims.modifierExtension
                  Definition

                  May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions.

                  Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself).

                  ShortExtensions that cannot be ignored even if unrecognized
                  Comments

                  There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

                  Control0..*
                  TypeExtension
                  Is Modifiertrue because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them
                  Summarytrue
                  Requirements

                  Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions.

                  Alternate Namesextensions, user content, modifiers
                  Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
                  ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
                  116. oidc-token.verified-claims.claims.given-name
                  Definition

                  Verified given name

                  ShortVerified given name
                  Control0..1
                  Typestring
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                  118. oidc-token.verified-claims.claims.middle-name
                  Definition

                  Verified middle name(s)

                  ShortVerified middle name(s)
                  Control0..1
                  Typestring
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                  120. oidc-token.verified-claims.claims.family-name
                  Definition

                  Verified family name

                  ShortVerified family name
                  Control0..1
                  Typestring
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                  122. oidc-token.verified-claims.claims.birthdate
                  Definition

                  Verified birth date

                  ShortVerified birth date
                  Control0..1
                  Typedate
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                  124. oidc-token.verified-claims.claims.email
                  Definition

                  Verified email address

                  ShortVerified email address
                  Control0..1
                  Typestring
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                  126. oidc-token.verified-claims.claims.phone-number
                  Definition

                  Verified phone number

                  ShortVerified phone number
                  Control0..1
                  Typestring
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
                  128. oidc-token.verified-claims.claims.ssn-last4
                  Definition

                  Proposal-specific claim for the last four SSN digits

                  ShortProposal-specific claim for the last four SSN digits
                  Control0..1
                  Typestring
                  Primitive ValueThis primitive element may be present, or absent, or replaced by an extension