Published Specifications

• JWT-Based Client Authentication
  Increase security using asymmetric cryptography to authenticate client applications

• Tiered OAuth for User Authentication
  Scalable dynamic cross-organizational user authentication

• Dynamic Client Registration
  Identify and dynamically register trusted client applications

• Mutual TLS Client Authentication
  Validate trusted client applications during the TLS handshake

• Client Certifications and Endorsements
  Trusted third party validation of client applications

• Client Authorization Grants using JWTs
  Extensible JWT-based client authorization grants

• Server Metadata
  Publishing capabilities and endpoints for discovery and validation

Testing Resources

HL7® FHIR® client application, FHIR server, and Identity Service developers can register for a UDAP Developer account to obtain a UDAP test certificate and access to the UDAP.org Test Tool for use in your own testing or as part of the DirectTrust-EHNAC UDAP Accreditation Program. Certificates for testing within specific trust communities such as CMS Aligned Networks and TEFCA are also available through EMR Direct.

Learn More About UDAP

Several collaborators have presented about the ways UDAP helps reuse digital identities and simplifies the work of scaling secure API transactions, so that health exchange participants can dynamically discover and trust each other’s identities. Look out for presentations about UDAP in an upcoming industry presentation or from past presentations, posted below.

• PPT: The role of UDAP in the ONC FAST Security Tiger Team's Solution; additional ONC Fast Workshop session materials can be found here. --ONC FAST Workshop, September 2020
• Video: Privacy and Security Considerations of Digital Identities (UDAP-related segment begins at 59:04) --ONC Working Session #2: Patient Identity and Matching, August 2020
• PPT and Solution Document: Deep Dive on the role of UDAP in Scaling FHIR Tranasactions Securely --ONC FAST Scalable Security Proposed Solution - Expert Panel Discussion, June 2020
• PPT and Solution Document: Deep Dive on the role of UDAP in Networked Identity Management --ONC FAST Individual and Organizational Identity Management Proposed Solution - Expert Panel Discussion, June 2020
• PPT and Video: Deep Dive on the role of UDAP in Scaling FHIR Transactions Securely –ONC FAST Security Tiger Team Webinar, December 2019
• Video: Trusted Registration and Other UDAP Ecosystem Roles (UDAP segment begins at 1:46:13) –ONC HEART (Health Relationship Trust) Profiles Webinar and Workshop, May 2019