SAML- security token

each value in SAML has certain source. This document focus is trying to identify source of these elements i SAML-token, provided by HelseID SAML service in Norsk helsenett

There are following sources to information, published in SAML

• "saml_claim", provided in request to SAML-endpoint provided by requestor who transforms JWT to SAML
• "claim", provided in JWT security token by HelseID service which provided by service consumer and token is forwarded unchanged as header to SAML-endpoint
• "claim_assertion" in JWT security token, provided by service consumer to HelseID end user known as "helsepersonellets attest"

There are 3 versions mentioned:
1.0 - Version "1.0" of SAML-specification, used in norwegian document exchange, defined by Direktoratet for e-helse (deprecated)
2.0 - Version "2.0" of SAML-specification, reflecting neccessary changes to SAML-security token while incorporating "helsepersonellets attest" (resource attest statement)
2.1 - Version "2.1" of SAML-specification, minor adjustment of version "2.0"

There might be several sources for information provided in SAML-security token