Interoperable Digital Identity and Patient Matching, published by HL7 International / Patient Administration. This guide is not an authorized publication; it is the continuous build for version 3.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-identity-matching-ig/ and changes regularly. See the Directory of published versions
| Page standards status: Trial-use | Maturity Level: 2 |
Definitions for the oidc-token logical model
See the documentation on how to interpret the contents of this table
| 0. oidc-token | |
| Definition | A logical representation of common JWT registered claims, OpenID Connect ID Token claims, and the OIDC for Identity Assurance |
| Short | OpenID Connect ID Token |
| Control | 0..* |
| Is Modifier | false |
| Logical Model | Instances of this logical model are not marked to be the target of a Reference |
| 2. oidc-token.iss | |
| Definition | Issuer |
| Short | Issuer |
| Control | 1..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 4. oidc-token.sub | |
| Definition | Subject identifier |
| Short | Subject identifier |
| Control | 1..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 6. oidc-token.aud | |
| Definition | Audience identifiers |
| Short | Audience identifiers |
| Control | 1..* |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 8. oidc-token.exp | |
| Definition | Expiration time as a JWT NumericDate |
| Short | Expiration time as a JWT NumericDate |
| Control | 1..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 10. oidc-token.iat | |
| Definition | Issued-at time as a JWT NumericDate |
| Short | Issued-at time as a JWT NumericDate |
| Control | 1..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 12. oidc-token.nbf | |
| Definition | Not-before time as a JWT NumericDate |
| Short | Not-before time as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 14. oidc-token.jti | |
| Definition | JWT identifier |
| Short | JWT identifier |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 16. oidc-token.auth-time | |
| Definition | Time of end-user authentication as a JWT NumericDate |
| Short | Time of end-user authentication as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 18. oidc-token.nonce | |
| Definition | Nonce supplied by the relying party |
| Short | Nonce supplied by the relying party |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 20. oidc-token.acr | |
| Definition | Authentication context class reference |
| Short | Authentication context class reference |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 22. oidc-token.amr | |
| Definition | Authentication methods used |
| Short | Authentication methods used |
| Control | 0..* |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 24. oidc-token.azp | |
| Definition | Authorized party |
| Short | Authorized party |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 26. oidc-token.at-hash | |
| Definition | Access token hash |
| Short | Access token hash |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 28. oidc-token.c-hash | |
| Definition | Authorization code hash |
| Short | Authorization code hash |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 30. oidc-token.name | |
| Definition | Full name |
| Short | Full name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 32. oidc-token.given-name | |
| Definition | Given name |
| Short | Given name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 34. oidc-token.middle-name | |
| Definition | Middle name(s) |
| Short | Middle name(s) |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 36. oidc-token.family-name | |
| Definition | Family name |
| Short | Family name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 38. oidc-token.nickname | |
| Definition | Casual name |
| Short | Casual name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 40. oidc-token.preferred-username | |
| Definition | Preferred username |
| Short | Preferred username |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 42. oidc-token.profile | |
| Definition | Profile page URL |
| Short | Profile page URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 44. oidc-token.picture | |
| Definition | Profile picture URL |
| Short | Profile picture URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 46. oidc-token.website | |
| Definition | Web page URL |
| Short | Web page URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 48. oidc-token.email | |
| Definition | Email address |
| Short | Email address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 50. oidc-token.email-verified | |
| Definition | Whether the email address was verified |
| Short | Whether the email address was verified |
| Control | 0..1 |
| Type | boolean |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 52. oidc-token.gender | |
| Definition | Gender |
| Short | Gender |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 54. oidc-token.birthdate | |
| Definition | Birth date |
| Short | Birth date |
| Control | 0..1 |
| Type | date |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 56. oidc-token.zoneinfo | |
| Definition | Time zone |
| Short | Time zone |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 58. oidc-token.locale | |
| Definition | Locale |
| Short | Locale |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 60. oidc-token.phone-number | |
| Definition | Phone number |
| Short | Phone number |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 62. oidc-token.phone-number-verified | |
| Definition | Whether the phone number was verified |
| Short | Whether the phone number was verified |
| Control | 0..1 |
| Type | boolean |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 64. oidc-token.address | |
| Definition | Postal address |
| Short | Postal address |
| Control | 0..1 |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 66. oidc-token.address.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 68. oidc-token.address.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.address.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 70. oidc-token.address.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| 72. oidc-token.address.formatted | |
| Definition | Full formatted address |
| Short | Full formatted address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 74. oidc-token.address.street-address | |
| Definition | Street address |
| Short | Street address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 76. oidc-token.address.locality | |
| Definition | City or locality |
| Short | City or locality |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 78. oidc-token.address.region | |
| Definition | State, province, or region |
| Short | State, province, or region |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 80. oidc-token.address.postal-code | |
| Definition | Postal code |
| Short | Postal code |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 82. oidc-token.address.country | |
| Definition | Country |
| Short | Country |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 84. oidc-token.updated-at | |
| Definition | Time the end-user information was last updated as a JWT NumericDate |
| Short | Time the end-user information was last updated as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 86. oidc-token.verified-claims | |
| Definition | Verified claims with their verification context |
| Short | Verified claims with their verification context |
| Control | 0..* |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 88. oidc-token.verified-claims.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 90. oidc-token.verified-claims.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.verified_claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 92. oidc-token.verified-claims.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| 94. oidc-token.verified-claims.verification | |
| Definition | Verification context |
| Short | Verification context |
| Control | 0..1 |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 96. oidc-token.verified-claims.verification.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 98. oidc-token.verified-claims.verification.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.verified_claims.verification.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 100. oidc-token.verified-claims.verification.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| 102. oidc-token.verified-claims.verification.trust-framework | |
| Definition | Trust framework |
| Short | Trust framework |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 104. oidc-token.verified-claims.verification.time | |
| Definition | Time of verification |
| Short | Time of verification |
| Control | 0..1 |
| Type | dateTime |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 106. oidc-token.verified-claims.verification.assurance-level | |
| Definition | Assurance level |
| Short | Assurance level |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 108. oidc-token.verified-claims.claims | |
| Definition | Identity claims covered by the verification |
| Short | Identity claims covered by the verification |
| Control | 0..1 |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 110. oidc-token.verified-claims.claims.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 112. oidc-token.verified-claims.claims.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.verified_claims.claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 114. oidc-token.verified-claims.claims.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists()) |
| 116. oidc-token.verified-claims.claims.given-name | |
| Definition | Verified given name |
| Short | Verified given name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 118. oidc-token.verified-claims.claims.middle-name | |
| Definition | Verified middle name(s) |
| Short | Verified middle name(s) |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 120. oidc-token.verified-claims.claims.family-name | |
| Definition | Verified family name |
| Short | Verified family name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 122. oidc-token.verified-claims.claims.birthdate | |
| Definition | Verified birth date |
| Short | Verified birth date |
| Control | 0..1 |
| Type | date |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 124. oidc-token.verified-claims.claims.email | |
| Definition | Verified email address |
| Short | Verified email address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 126. oidc-token.verified-claims.claims.phone-number | |
| Definition | Verified phone number |
| Short | Verified phone number |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 128. oidc-token.verified-claims.claims.ssn-last4 | |
| Definition | Proposal-specific claim for the last four SSN digits |
| Short | Proposal-specific claim for the last four SSN digits |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
See the documentation on how to interpret the contents of this table
| 0. oidc-token | |
| Definition | A logical representation of common JWT registered claims, OpenID Connect ID Token claims, and the OIDC for Identity Assurance |
| Short | OpenID Connect ID Token |
| Logical Model | Instances of this logical model are not marked to be the target of a Reference |
| 2. oidc-token.iss | |
| Definition | Issuer |
| Short | Issuer |
| Control | 1..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 4. oidc-token.sub | |
| Definition | Subject identifier |
| Short | Subject identifier |
| Control | 1..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 6. oidc-token.aud | |
| Definition | Audience identifiers |
| Short | Audience identifiers |
| Control | 1..* |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 8. oidc-token.exp | |
| Definition | Expiration time as a JWT NumericDate |
| Short | Expiration time as a JWT NumericDate |
| Control | 1..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 10. oidc-token.iat | |
| Definition | Issued-at time as a JWT NumericDate |
| Short | Issued-at time as a JWT NumericDate |
| Control | 1..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 12. oidc-token.nbf | |
| Definition | Not-before time as a JWT NumericDate |
| Short | Not-before time as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 14. oidc-token.jti | |
| Definition | JWT identifier |
| Short | JWT identifier |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 16. oidc-token.auth-time | |
| Definition | Time of end-user authentication as a JWT NumericDate |
| Short | Time of end-user authentication as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 18. oidc-token.nonce | |
| Definition | Nonce supplied by the relying party |
| Short | Nonce supplied by the relying party |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 20. oidc-token.acr | |
| Definition | Authentication context class reference |
| Short | Authentication context class reference |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 22. oidc-token.amr | |
| Definition | Authentication methods used |
| Short | Authentication methods used |
| Control | 0..* |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 24. oidc-token.azp | |
| Definition | Authorized party |
| Short | Authorized party |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 26. oidc-token.at-hash | |
| Definition | Access token hash |
| Short | Access token hash |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 28. oidc-token.c-hash | |
| Definition | Authorization code hash |
| Short | Authorization code hash |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 30. oidc-token.name | |
| Definition | Full name |
| Short | Full name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 32. oidc-token.given-name | |
| Definition | Given name |
| Short | Given name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 34. oidc-token.middle-name | |
| Definition | Middle name(s) |
| Short | Middle name(s) |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 36. oidc-token.family-name | |
| Definition | Family name |
| Short | Family name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 38. oidc-token.nickname | |
| Definition | Casual name |
| Short | Casual name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 40. oidc-token.preferred-username | |
| Definition | Preferred username |
| Short | Preferred username |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 42. oidc-token.profile | |
| Definition | Profile page URL |
| Short | Profile page URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 44. oidc-token.picture | |
| Definition | Profile picture URL |
| Short | Profile picture URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 46. oidc-token.website | |
| Definition | Web page URL |
| Short | Web page URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 48. oidc-token.email | |
| Definition | Email address |
| Short | Email address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 50. oidc-token.email-verified | |
| Definition | Whether the email address was verified |
| Short | Whether the email address was verified |
| Control | 0..1 |
| Type | boolean |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 52. oidc-token.gender | |
| Definition | Gender |
| Short | Gender |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 54. oidc-token.birthdate | |
| Definition | Birth date |
| Short | Birth date |
| Control | 0..1 |
| Type | date |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 56. oidc-token.zoneinfo | |
| Definition | Time zone |
| Short | Time zone |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 58. oidc-token.locale | |
| Definition | Locale |
| Short | Locale |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 60. oidc-token.phone-number | |
| Definition | Phone number |
| Short | Phone number |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 62. oidc-token.phone-number-verified | |
| Definition | Whether the phone number was verified |
| Short | Whether the phone number was verified |
| Control | 0..1 |
| Type | boolean |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 64. oidc-token.address | |
| Definition | Postal address |
| Short | Postal address |
| Control | 0..1 |
| Type | BackboneElement |
| 66. oidc-token.address.formatted | |
| Definition | Full formatted address |
| Short | Full formatted address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 68. oidc-token.address.street-address | |
| Definition | Street address |
| Short | Street address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 70. oidc-token.address.locality | |
| Definition | City or locality |
| Short | City or locality |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 72. oidc-token.address.region | |
| Definition | State, province, or region |
| Short | State, province, or region |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 74. oidc-token.address.postal-code | |
| Definition | Postal code |
| Short | Postal code |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 76. oidc-token.address.country | |
| Definition | Country |
| Short | Country |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 78. oidc-token.updated-at | |
| Definition | Time the end-user information was last updated as a JWT NumericDate |
| Short | Time the end-user information was last updated as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 80. oidc-token.verified-claims | |
| Definition | Verified claims with their verification context |
| Short | Verified claims with their verification context |
| Control | 0..* |
| Type | BackboneElement |
| 82. oidc-token.verified-claims.verification | |
| Definition | Verification context |
| Short | Verification context |
| Control | 0..1 |
| Type | BackboneElement |
| 84. oidc-token.verified-claims.verification.trust-framework | |
| Definition | Trust framework |
| Short | Trust framework |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 86. oidc-token.verified-claims.verification.time | |
| Definition | Time of verification |
| Short | Time of verification |
| Control | 0..1 |
| Type | dateTime |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 88. oidc-token.verified-claims.verification.assurance-level | |
| Definition | Assurance level |
| Short | Assurance level |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 90. oidc-token.verified-claims.claims | |
| Definition | Identity claims covered by the verification |
| Short | Identity claims covered by the verification |
| Control | 0..1 |
| Type | BackboneElement |
| 92. oidc-token.verified-claims.claims.given-name | |
| Definition | Verified given name |
| Short | Verified given name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 94. oidc-token.verified-claims.claims.middle-name | |
| Definition | Verified middle name(s) |
| Short | Verified middle name(s) |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 96. oidc-token.verified-claims.claims.family-name | |
| Definition | Verified family name |
| Short | Verified family name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 98. oidc-token.verified-claims.claims.birthdate | |
| Definition | Verified birth date |
| Short | Verified birth date |
| Control | 0..1 |
| Type | date |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 100. oidc-token.verified-claims.claims.email | |
| Definition | Verified email address |
| Short | Verified email address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 102. oidc-token.verified-claims.claims.phone-number | |
| Definition | Verified phone number |
| Short | Verified phone number |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 104. oidc-token.verified-claims.claims.ssn-last4 | |
| Definition | Proposal-specific claim for the last four SSN digits |
| Short | Proposal-specific claim for the last four SSN digits |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
See the documentation on how to interpret the contents of this table
| 0. oidc-token | |
| Definition | A logical representation of common JWT registered claims, OpenID Connect ID Token claims, and the OIDC for Identity Assurance |
| Short | OpenID Connect ID Token |
| Control | 0..* |
| Is Modifier | false |
| Logical Model | Instances of this logical model are not marked to be the target of a Reference |
| 2. oidc-token.iss | |
| Definition | Issuer |
| Short | Issuer |
| Control | 1..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 4. oidc-token.sub | |
| Definition | Subject identifier |
| Short | Subject identifier |
| Control | 1..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 6. oidc-token.aud | |
| Definition | Audience identifiers |
| Short | Audience identifiers |
| Control | 1..* |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 8. oidc-token.exp | |
| Definition | Expiration time as a JWT NumericDate |
| Short | Expiration time as a JWT NumericDate |
| Control | 1..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 10. oidc-token.iat | |
| Definition | Issued-at time as a JWT NumericDate |
| Short | Issued-at time as a JWT NumericDate |
| Control | 1..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 12. oidc-token.nbf | |
| Definition | Not-before time as a JWT NumericDate |
| Short | Not-before time as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 14. oidc-token.jti | |
| Definition | JWT identifier |
| Short | JWT identifier |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 16. oidc-token.auth-time | |
| Definition | Time of end-user authentication as a JWT NumericDate |
| Short | Time of end-user authentication as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 18. oidc-token.nonce | |
| Definition | Nonce supplied by the relying party |
| Short | Nonce supplied by the relying party |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 20. oidc-token.acr | |
| Definition | Authentication context class reference |
| Short | Authentication context class reference |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 22. oidc-token.amr | |
| Definition | Authentication methods used |
| Short | Authentication methods used |
| Control | 0..* |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 24. oidc-token.azp | |
| Definition | Authorized party |
| Short | Authorized party |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 26. oidc-token.at-hash | |
| Definition | Access token hash |
| Short | Access token hash |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 28. oidc-token.c-hash | |
| Definition | Authorization code hash |
| Short | Authorization code hash |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 30. oidc-token.name | |
| Definition | Full name |
| Short | Full name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 32. oidc-token.given-name | |
| Definition | Given name |
| Short | Given name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 34. oidc-token.middle-name | |
| Definition | Middle name(s) |
| Short | Middle name(s) |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 36. oidc-token.family-name | |
| Definition | Family name |
| Short | Family name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 38. oidc-token.nickname | |
| Definition | Casual name |
| Short | Casual name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 40. oidc-token.preferred-username | |
| Definition | Preferred username |
| Short | Preferred username |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 42. oidc-token.profile | |
| Definition | Profile page URL |
| Short | Profile page URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 44. oidc-token.picture | |
| Definition | Profile picture URL |
| Short | Profile picture URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 46. oidc-token.website | |
| Definition | Web page URL |
| Short | Web page URL |
| Control | 0..1 |
| Type | uri |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 48. oidc-token.email | |
| Definition | Email address |
| Short | Email address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 50. oidc-token.email-verified | |
| Definition | Whether the email address was verified |
| Short | Whether the email address was verified |
| Control | 0..1 |
| Type | boolean |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 52. oidc-token.gender | |
| Definition | Gender |
| Short | Gender |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 54. oidc-token.birthdate | |
| Definition | Birth date |
| Short | Birth date |
| Control | 0..1 |
| Type | date |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 56. oidc-token.zoneinfo | |
| Definition | Time zone |
| Short | Time zone |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 58. oidc-token.locale | |
| Definition | Locale |
| Short | Locale |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 60. oidc-token.phone-number | |
| Definition | Phone number |
| Short | Phone number |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 62. oidc-token.phone-number-verified | |
| Definition | Whether the phone number was verified |
| Short | Whether the phone number was verified |
| Control | 0..1 |
| Type | boolean |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 64. oidc-token.address | |
| Definition | Postal address |
| Short | Postal address |
| Control | 0..1 |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 66. oidc-token.address.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 68. oidc-token.address.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.address.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 70. oidc-token.address.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| 72. oidc-token.address.formatted | |
| Definition | Full formatted address |
| Short | Full formatted address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 74. oidc-token.address.street-address | |
| Definition | Street address |
| Short | Street address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 76. oidc-token.address.locality | |
| Definition | City or locality |
| Short | City or locality |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 78. oidc-token.address.region | |
| Definition | State, province, or region |
| Short | State, province, or region |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 80. oidc-token.address.postal-code | |
| Definition | Postal code |
| Short | Postal code |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 82. oidc-token.address.country | |
| Definition | Country |
| Short | Country |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 84. oidc-token.updated-at | |
| Definition | Time the end-user information was last updated as a JWT NumericDate |
| Short | Time the end-user information was last updated as a JWT NumericDate |
| Control | 0..1 |
| Type | decimal |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 86. oidc-token.verified-claims | |
| Definition | Verified claims with their verification context |
| Short | Verified claims with their verification context |
| Control | 0..* |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 88. oidc-token.verified-claims.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 90. oidc-token.verified-claims.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.verified_claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 92. oidc-token.verified-claims.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| 94. oidc-token.verified-claims.verification | |
| Definition | Verification context |
| Short | Verification context |
| Control | 0..1 |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 96. oidc-token.verified-claims.verification.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 98. oidc-token.verified-claims.verification.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.verified_claims.verification.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 100. oidc-token.verified-claims.verification.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| 102. oidc-token.verified-claims.verification.trust-framework | |
| Definition | Trust framework |
| Short | Trust framework |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 104. oidc-token.verified-claims.verification.time | |
| Definition | Time of verification |
| Short | Time of verification |
| Control | 0..1 |
| Type | dateTime |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 106. oidc-token.verified-claims.verification.assurance-level | |
| Definition | Assurance level |
| Short | Assurance level |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 108. oidc-token.verified-claims.claims | |
| Definition | Identity claims covered by the verification |
| Short | Identity claims covered by the verification |
| Control | 0..1 |
| Type | BackboneElement |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count())) |
| 110. oidc-token.verified-claims.claims.id | |
| Definition | Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces. |
| Short | Unique id for inter-element referencing |
| Control | 0..1 |
| Type | string |
| Is Modifier | false |
| XML Format | In the XML format, this property is represented as an attribute. |
| Summary | false |
| 112. oidc-token.verified-claims.claims.extension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. |
| Short | Additional content defined by implementations |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | false |
| Summary | false |
| Alternate Names | extensions, user content |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| Slicing | This element introduces a set of slices on oidc-token.verified_claims.claims.extension. The slices areUnordered and Open, and can be differentiated using the following discriminators: |
| 114. oidc-token.verified-claims.claims.modifierExtension | |
| Definition | May be used to represent additional information that is not part of the basic definition of the element and that modifies the understanding of the element in which it is contained and/or the understanding of the containing element's descendants. Usually modifier elements provide negation or qualification. To make the use of extensions safe and manageable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension. Applications processing a resource are required to check for modifier extensions. Modifier extensions SHALL NOT change the meaning of any elements on Resource or DomainResource (including cannot change the meaning of modifierExtension itself). |
| Short | Extensions that cannot be ignored even if unrecognized |
| Comments | There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone. |
| Control | 0..* |
| Type | Extension |
| Is Modifier | true because Modifier extensions are expected to modify the meaning or interpretation of the element that contains them |
| Summary | true |
| Requirements | Modifier extensions allow for extensions that cannot be safely ignored to be clearly distinguished from the vast majority of extensions which can be safely ignored. This promotes interoperability by eliminating the need for implementers to prohibit the presence of extensions. For further information, see the definition of modifier extensions. |
| Alternate Names | extensions, user content, modifiers |
| Invariants | ele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))ext-1: Must have either extensions or value[x], not both ( extension.exists() != value.exists()) |
| 116. oidc-token.verified-claims.claims.given-name | |
| Definition | Verified given name |
| Short | Verified given name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 118. oidc-token.verified-claims.claims.middle-name | |
| Definition | Verified middle name(s) |
| Short | Verified middle name(s) |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 120. oidc-token.verified-claims.claims.family-name | |
| Definition | Verified family name |
| Short | Verified family name |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 122. oidc-token.verified-claims.claims.birthdate | |
| Definition | Verified birth date |
| Short | Verified birth date |
| Control | 0..1 |
| Type | date |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 124. oidc-token.verified-claims.claims.email | |
| Definition | Verified email address |
| Short | Verified email address |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 126. oidc-token.verified-claims.claims.phone-number | |
| Definition | Verified phone number |
| Short | Verified phone number |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |
| 128. oidc-token.verified-claims.claims.ssn-last4 | |
| Definition | Proposal-specific claim for the last four SSN digits |
| Short | Proposal-specific claim for the last four SSN digits |
| Control | 0..1 |
| Type | string |
| Primitive Value | This primitive element may be present, or absent, or replaced by an extension |