Basic AuditEvent pattern for when an activity was authorized by an SAML access token Comprehensive

A basic AuditEvent profile for when an activity was authorized by an SAML access token. This profile is expected to be used with some other detail that explains the activity. This profile only covers the SAML access token.

The following table uses a short-hand for the SAML fields and FHIR AuditEvent elements to keep the table compact. It is presumed the reader can understand the SAML field and the FHIR AuditEvent element given. Note the `~` character represents attributes under the SAML `AttributeStatement`.

Builds upon the Minimal

| SAML field | Comprehensive AuditEvent |------------------------------|-----------------------------------| | ID | agent[user].policy | Issuer | agent[user].who.identifier.system | Subject.NameID | agent[user].who.identifier.value | AuthnContextClassRef | agent[user].extension[assuranceLevel] | ~subject:role | agent[user].role | ~subject:purposeofuse | agent[user].purposeOfUse | ~subject:subject-id | agent[user].extension[otherId][subject-id].value | ~subject:npi | agent[user].extension[otherId][npi].value | ~subject:provider-identifier | agent[user].extension[otherId][provider-id].value | ~subject:organization | agent[userorg].who.display | ~subject:organization-id | agent[userorg].who.identifier.value | ~homeCommunityId | agent[homeCommunityId].who.identifier.value | ~bppc:2007:docid | entity[consent].what.identifier.value | ~xua:2012:acp | entity[consent].detail.valueString | ~resource:resource-id | entity[consent-patient].what.identifier.value