Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Identitätsattribute und SAML Assertion

Identitätsattribute

Bei einer erfolgreichen Authentisierung werden folgende Elemente in der Assertion als AttributeStatement übermittelt:

NameAttributBeschreibung
HIN-LoginX-HIN-LOGIN-NAMEEindeutiger Schlüssel innerhalb der HIN Plattform
AGW LoginX-HIN-AGW-LOGIN-NAMEIdentifikator des institutionellen Access Gateway (Device-ID)
NameX-HIN-COMMON-NAMEVorname & Nachname „Carl Muster“ (ohne Zweitname)
VornameX-HIN-GIVEN-NAME„Carl“
ZweitnameX-HIN-MIDDLE-NAME„Max“
NachnameX-HIN-SURNAME„Muster“
BenutzertypX-HIN-USERTYPEArt des Benutzers. Mögliche Werte: <leer>, Personal, Team, Device
StrasseX-HIN-ADDRESS-1
Adresszeile 2X-HIN-ADDRESS-2
PLZX-HIN-POSTAL-CODE
OrtX-HIN-LOCATION
LandX-HIN-COUNTRYBeispielsweise „CH“
E-MailX-HIN-MAILHIN-Mail-Adresse, über welche verschlüsselt Mails empfangen werden können
GLN-Nr. ArztX-HIN-EAN-NO-MEDICAL
FMH-Nr. ArztX-HIN-FMH-NO-MEDICAL
GLN-Nr. PraxisX-HIN-EAN-NO-OFFICE
ZSR-Nr. PraxisX-HIN-ZSR-NO-OFFICE
Institutions CodeX-HIN-INSTITUTION-CODE
Organisations-TypX-HIN-ORGANISATION-TYPE / X-HIN-ORGANIZATION-TYPEBeide Schreibweisen aus historischen Gründen. Enthält numerischen Wert: 0 = Keine Firma, 1 = Firma allgemein, 10 = Arztpraxis, 11 = Spitex-Organisation, 12 = Physiotherapie-Praxis, 13 = Ergotherapie-Praxis, 14 = Ernährungsberatungs-Praxis, 15 = Psychologische Praxis, 16 = Zahnarztpraxis
OrganisationX-HIN-ORGANIZATION-IDOrganisations-ID des Benutzers innerhalb der HIN (z. B. M123456)
OrganisationX-HIN-ORGANIZATIONName der Organisation des Benutzers
ASAS IDX-HIN-ASAS-UserIdEhem. Identifikator (abgelöst durch HIN-Login)
HärtungsgradX-HIN-HARDENCODEBASIC, PLUS, EPDG
Personen CodeX-HIN-PERSON-CODEEnthält numerischen Wert: -1 = Device, 0 = Keine Person, 1 = Person allgemein, 10 = Arzt, 11 = Pflegefachperson, 12 = Physiotherapeut, 13 = Ergotherapeut, 14 = Ernährungsberater, 15 = Psychotherapeut, 16 = Zahnarzt, 17 = Apotheker, 18 = Chiropraktiker, 19 = Hebamme, 20 = Komplementärmediziner, 21 = Sozialdienstmitarbeiter, 22 = Logopäde, 23 = Stillberaterin, 24 = andere Gesundheitsfachperson
SpracheX-HIN-LANGUAGEz. B. „DE“
Test-CodeX-HIN-TEST-CODE0 = produktive ID, 1 = Test ID
AuthentisierungsmethodeX-HIN-AUTH-METHOD
SeriennummerX-HIN-SERIAL_NUMBER
TitelX-HIN-TITEL
Akademischer TitelX-HIN-ACADEMICTITLE

Wichtig: Eine Prüfung des X-HIN-TEST-CODE ist für produktive Applikationen zwingend notwendig, um nicht fälschlicherweise Test-IDs den Zugriff zu ermöglichen.

Beispiel einer SAML Assertion

<saml:Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" ID="ID_f5e713c6-7677-4241-b8c7-13541f4873a6"
        IssueInstant="2026-06-23T15:02:23.169Z" Version="2.0">
        <saml:Issuer>https://broker.hin.ch/realms/HINBroker</saml:Issuer>
        <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
            <dsig:SignedInfo>
                <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                <dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
                <dsig:Reference URI="#ID_f5e713c6-7677-4241-b8c7-13541f4873a6">
                    <dsig:Transforms>
                        <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                        <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                    </dsig:Transforms>
                    <dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
                    <dsig:DigestValue>svxI9BStHonHW/kPkPe3VgyuQ40RivynWxV3BEsAbtk=</dsig:DigestValue>
                </dsig:Reference>
            </dsig:SignedInfo>
            <dsig:SignatureValue>
                aC...bws=
            </dsig:SignatureValue>
            <dsig:KeyInfo>
                <dsig:X509Data>
                    <dsig:X509Certificate>
                        MII...Zs0=
                    </dsig:X509Certificate>
                </dsig:X509Data>
            </dsig:KeyInfo>
        </dsig:Signature>
        <saml:Subject>
            <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">60590</saml:NameID>
            <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <saml:SubjectConfirmationData InResponseTo="hin-checker-ee1b8e5f-299c-4fa1-b7fb-279817cce388"
                    NotOnOrAfter="2026-06-23T15:07:21.169Z" Recipient="https://example.com/" />
            </saml:SubjectConfirmation>
        </saml:Subject>
        <saml:Conditions NotBefore="2026-06-23T15:02:21.169Z" NotOnOrAfter="2026-06-23T15:03:21.169Z">
            <saml:AudienceRestriction>
                <saml:Audience>https://example.com/</saml:Audience>
            </saml:AudienceRestriction>
        </saml:Conditions>
        <saml:AuthnStatement AuthnInstant="2026-06-23T15:02:23.170Z"
            SessionIndex="DR59Sh7-HcmV-BcykcSMIT3Q::1a04a300-e512-4d31-a183-b893fefd97a3"
            SessionNotOnOrAfter="2026-06-24T03:12:23.170Z">
            <saml:AuthnContext>
                <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified
                </saml:AuthnContextClassRef>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement>
            <saml:Attribute FriendlyName="X-HIN-POSTAL-CODE" Name="X-HIN-POSTAL-CODE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">8304
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ASAS-UserId" Name="X-HIN-ASAS-UserId"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">60590
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-SERIAL_NUMBER" Name="X-HIN-SERIAL_NUMBER"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-ASAS-UserId" Name="X-ASAS-UserId"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">60590
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ADDRESS-2" Name="X-HIN-ADDRESS-2"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-LANGUAGE" Name="X-HIN-LANGUAGE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">de</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ZSR-NO-OFFICE" Name="X-HIN-ZSR-NO-OFFICE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-HARDENCODE" Name="X-HIN-HARDENCODE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">PLUS
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ADDRESS-1" Name="X-HIN-ADDRESS-1"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Seidenstrasse 4
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-MIDDLE-NAME" Name="X-HIN-MIDDLE-NAME"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-USERTYPE" Name="X-HIN-USERTYPE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Personal
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-LOCATION" Name="X-HIN-LOCATION"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Wallisellen
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-INSTITUTION-CODE" Name="X-HIN-INSTITUTION-CODE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-POSTALCODE" Name="X-HIN-POSTALCODE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">8304
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-AUTH-METHOD" Name="X-HIN-AUTH-METHOD"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ORGANISATION-TYPE" Name="X-HIN-ORGANISATION-TYPE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                    (115,2.16.756.5.30.1.165.1.3);(43741000,2.16.840.1.113883.6.96)</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-COUNTRY" Name="X-HIN-COUNTRY"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">ch</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-LOGIN-NAME" Name="X-HIN-LOGIN-NAME"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">montes1
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-FMH-NO-MEDICAL" Name="X-HIN-FMH-NO-MEDICAL"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-EAN-NO-MEDICAL" Name="X-HIN-EAN-NO-MEDICAL"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">2000000010007
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-EAN-NO-OFFICE" Name="X-HIN-EAN-NO-OFFICE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-GIVEN-NAME" Name="X-HIN-GIVEN-NAME"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Monitoring
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-COMMON-NAME" Name="X-HIN-COMMON-NAME"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Monitoring Test1
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-PERSON-CODE" Name="X-HIN-PERSON-CODE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-TEST-CODE" Name="X-HIN-TEST-CODE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ACADEMICTITLE" Name="X-HIN-ACADEMICTITLE"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ORGANIZATION-ID" Name="X-HIN-ORGANIZATION-ID"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">M00012810
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-ORGANIZATION" Name="X-HIN-ORGANIZATION"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Health Info Net AG
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-SURNAME" Name="X-HIN-SURNAME"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Test1
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-MAIL" Name="X-HIN-MAIL"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                    test-monitoring-test1@hin.ch</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute FriendlyName="X-HIN-TITEL" Name="X-HIN-TITEL"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string" />
            </saml:Attribute>
            <saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">manage-account
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">manage-account-links
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">uma_authorization
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">offline_access
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">view-profile
                </saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    </saml:Assertion>