Interoperable Digital Identity and Patient Matching
3.0.0-current - STU 3 United States of America flag

Interoperable Digital Identity and Patient Matching, published by HL7 International / Patient Administration. This guide is not an authorized publication; it is the continuous build for version 3.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-identity-matching-ig/ and changes regularly. See the Directory of published versions

Logical Model: OpenID Connect ID Token - Mappings

Page standards status: Trial-use Maturity Level: 2

Mappings for the oidc-token logical model.

Mappings to Structures in this Implementation Guide

NameOpenID Connect ID Token to Identity Assertiondoco
oidc-token
IdentityAssertion
oidc-token / iss
IdentityAssertion.masterIdentifier.system
Use as the identifier system only when this is the namespace for sub.
oidc-token / sub
IdentityAssertion.masterIdentifier.value
oidc-token / aud
oidc-token / exp
oidc-token / iat
oidc-token / nbf
oidc-token / jti
oidc-token / auth_time
oidc-token / nonce
oidc-token / acr
oidc-token / amr
oidc-token / azp
oidc-token / at_hash
oidc-token / c_hash
oidc-token / name
oidc-token / given_name
IdentityAssertion.names.first
oidc-token / middle_name
IdentityAssertion.names.middle
oidc-token / family_name
IdentityAssertion.names.last
oidc-token / nickname
oidc-token / preferred_username
oidc-token / profile
oidc-token / picture
IdentityAssertion.photo.url
Convert the URI to an Attachment URL.
oidc-token / website
oidc-token / email
IdentityAssertion.emails.address
oidc-token / email_verified
oidc-token / gender
IdentityAssertion.gender
oidc-token / birthdate
IdentityAssertion.birthDate
oidc-token / zoneinfo
oidc-token / locale
oidc-token / phone_number
IdentityAssertion.phoneNumbers.number
oidc-token / phone_number_verified
oidc-token / address
IdentityAssertion.addresses
OIDC carries one address object; IdentityAssertion permits multiple addresses.
oidc-token / address / @id
oidc-token / address / extension
oidc-token / address / modifierExtension
oidc-token / address / formatted
oidc-token / address / street_address
IdentityAssertion.addresses.line
Split into lines when needed.
oidc-token / address / locality
IdentityAssertion.addresses.city
oidc-token / address / region
IdentityAssertion.addresses.state
oidc-token / address / postal_code
IdentityAssertion.addresses.postalCode
oidc-token / address / country
IdentityAssertion.addresses.country
oidc-token / updated_at
oidc-token / verified_claims
oidc-token / verified_claims / @id
oidc-token / verified_claims / extension
oidc-token / verified_claims / modifierExtension
oidc-token / verified_claims / verification
oidc-token / verified_claims / verification / @id
oidc-token / verified_claims / verification / extension
oidc-token / verified_claims / verification / modifierExtension
oidc-token / verified_claims / verification / trust_framework
oidc-token / verified_claims / verification / time
IdentityAssertion.assuranceDate
oidc-token / verified_claims / verification / assurance_level
IdentityAssertion.assuranceLevel
oidc-token / verified_claims / claims
oidc-token / verified_claims / claims / @id
oidc-token / verified_claims / claims / extension
oidc-token / verified_claims / claims / modifierExtension
oidc-token / verified_claims / claims / given_name
IdentityAssertion.names.first
Prefer this verified value over given_name when both are present.
oidc-token / verified_claims / claims / middle_name
IdentityAssertion.names.middle
Prefer this verified value over middle_name when both are present.
oidc-token / verified_claims / claims / family_name
IdentityAssertion.names.last
Prefer this verified value over family_name when both are present.
oidc-token / verified_claims / claims / birthdate
IdentityAssertion.birthDate
Prefer this verified value over birthdate when both are present.
oidc-token / verified_claims / claims / email
IdentityAssertion.emails.address
Prefer this verified value over email when both are present.
oidc-token / verified_claims / claims / phone_number
IdentityAssertion.phoneNumbers.number
Prefer this verified value over phone_number when both are present.
oidc-token / verified_claims / claims / ssn_last4

doco Documentation for this format

Mappings to other Structures

No Mappings Found

Other Mappings

No Mappings Found