{
  "description": "Endpoint Access Control Mechanism",
  "_filename": "CodeSystem-EndpointAccessControlMechanismCS.json",
  "package_name": "hl7.fhir.us.ndh",
  "date": "2025-04-10T13:37:10+00:00",
  "publisher": "HL7 International / Patient Administration",
  "jurisdiction": [ {
    "coding": [ {
      "code": "US",
      "system": "urn:iso:std:iso:3166",
      "display": "United States of America"
    } ]
  } ],
  "content": "complete",
  "name": "EndpointAccessControlMechanismCS",
  "type": null,
  "experimental": "false",
  "resourceType": "CodeSystem",
  "title": "Endpoint Access Control Mechanism Code System",
  "package_version": "1.0.0",
  "extension": [ {
    "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg",
    "valueCode": "pa"
  }, {
    "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status",
    "valueCode": "trial-use",
    "_valueCode": {
      "extension": [ {
        "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom",
        "valueCanonical": "http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh"
      } ]
    }
  } ],
  "status": "active",
  "id": "9dc8df70-5a29-47ef-84ef-2db715608e5a",
  "kind": null,
  "count": 15,
  "url": "http://hl7.org/fhir/us/ndh/CodeSystem/EndpointAccessControlMechanismCS",
  "concept": [ {
    "code": "public",
    "display": "Public",
    "definition": "Public access without any specific access control."
  }, {
    "code": "OAuth",
    "display": "OAuth",
    "definition": "OAuth (unspecified version see oauth.net)."
  }, {
    "code": "SMART-on-FHIR",
    "display": "SMART-on-FHIR",
    "definition": "OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/)."
  }, {
    "code": "NTLM",
    "display": "NTLM",
    "definition": "Microsoft NTLM Authentication."
  }, {
    "code": "basic",
    "display": "Basic",
    "definition": "Basic authentication defined in HTTP specification."
  }, {
    "code": "Kerberos",
    "display": "Kerberos",
    "definition": "see http://www.ietf.org/rfc/rfc4120.txt."
  }, {
    "code": "Certificates",
    "display": "Certificates",
    "definition": "SSL where client must have a certificate registered with the server."
  }, {
    "code": "opaque-access-token",
    "display": "Opaque Access Token",
    "definition": "Uses an opaque token for access control, which is a token whose structure is not visible or meaningful to the client."
  }, {
    "code": "jwt-access-token",
    "display": "JWT Access Token",
    "definition": "Uses a JSON Web Token (JWT) for access control, which is a compact, URL-safe means of representing claims to be transferred between two parties."
  }, {
    "code": "mutual-tls",
    "display": "Mutual TLS",
    "definition": "Uses mutual Transport Layer Security (TLS) where both client and server authenticate each other using certificates."
  }, {
    "code": "wss-saml-token",
    "display": "WSS SAML Token",
    "definition": "Uses a Security Assertion Markup Language (SAML) token within the Web Services Security (WSS) framework for access control."
  }, {
    "code": "wss-username-token",
    "display": "WSS User Name Token",
    "definition": "Uses a username token within the WSS framework for access control."
  }, {
    "code": "wss-kerberos-token",
    "display": "WSS Kerberos Token",
    "definition": "Uses a Kerberos token within the WSS framework for access control."
  }, {
    "code": "wss-x509-token",
    "display": "WSS X509 Token",
    "definition": "Uses an X.509 certificate token within the WSS framework for access control."
  }, {
    "code": "wss-custom-token",
    "display": "WSS Custom Token",
    "definition": "Uses a custom token within the WSS framework for access control."
  } ],
  "caseSensitive": true,
  "version": "1.0.0",
  "contact": [ {
    "name": "HL7 International / Patient Administration",
    "telecom": [ {
      "value": "http://www.hl7.org/Special/committees/pafm",
      "system": "url"
    }, {
      "value": "pafm@lists.hl7.org",
      "system": "email"
    } ]
  } ]
}