External Validation Service Front-end

Information

File Name: Uploaded.xml
OID :: 1.3.6.1.4.1.12559.11.25.1.13.46407
Schematron :: CH:PPQ_Response (Version N/A)
Schematron Validation Result :: FAILED
Validation Date :: 10/11/20 4:48:01 PM (CEST GMT+0200)
Model Based Validator :: N/A (Tool Version N/A)
Model Based Validation Result :: N/A
Permanent link :: https://ehealthsuisse.ihe-europe.net/EVSClient/detailedResult.seam?type=XML&oid=1.3.6.1.4.1.12559.11.25.1.13.46407
Data Visibility :: Public

Validation Results

Schematron validation

$type Validation Report

Well-formednessPASSED

The document you have validated is supposed to be a well-formed document. The validator has checked if it is well-formed, results of this validation are gathered in this section.

The document is well-formed

Schema Validation detailed ResultPASSED

Your document has been validated with the appropriate schema, here is the detail of the validation outcome.

The document is valid regarding the schema

Schematron validator resultsFAILED

Summary of checks: 1

16

Errors

Test: saml:StatementE - 1
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion
Description: Error : The element Assertion shall have a child named saml:Statement

Reports

Test: count(*) = 1 and (count(//epr:EprPolicyRepositoryResponse) = 1 or count(//soap:Fault) = 1 or count(//samlp:Response) = 1)R - 1
Location: /SOAP-ENV:Envelope
Description: Error : The element soap:Body shall convey one of the possible three (3) child elements, meaning epr:EprPolicyRepositoryResponse, soap:Fault or samlp:Response

Test: count(*) = 1 and (count(//epr:EprPolicyRepositoryResponse) = 1 or count(//soap:Fault) = 1 or count(//samlp:Response) = 1)R - 2
Location: /SOAP-ENV:Envelope
Description: Success : The element soap:Body shall convey one of the possible three (3) child elements, meaning epr:EprPolicyRepositoryResponse, soap:Fault or samlp:Response

Test: saml:AssertionR - 3
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response
Description: Error : The element Response shall have a child named Assertion

Test: saml:AssertionR - 4
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response
Description: Success : The element Response shall have a child named Assertion

Test: samlp:StatusR - 5
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response
Description: Error : The element Response shall have a child named samlp:Status

Test: samlp:StatusR - 6
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response
Description: Success : The element Response shall have a child named samlp:Status

Test: samlp:StatusCodeR - 7
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/Status
Description: Error : The element Status shall have a child element named StatusCode

Test: samlp:StatusCodeR - 8
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/Status
Description: Success : The element Status shall have a child element named StatusCode

Test: *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:success' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:Requester' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:Success' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:failure' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:Responder' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch' or *[1]/@Value = 'urn:e-health-suisse:2015:error:not-holder-of-patient-policies'R - 9
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/Status
Description: Error : The child element StatusCode shall have a Value attribute equal to one of the following possible values as defined in OASIS SAML 2.0 Profile of XACML v2.0, i.e. urn:oasis:names:tc:SAML:2.0:status:success, urn:oasis:names:tc:SAML:2.0:status:Requester, urn:oasis:names:tc:SAML:2.0:status:Responder, urn:oasis:names:tc:SAML:2.0:status:VersionMismatch or other SAML status codes MAY be used where appropriate when there are no XACMLAuthzDecision Assertions present.

Test: *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:success' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:Requester' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:Success' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:failure' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:Responder' or *[1]/@Value = 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch' or *[1]/@Value = 'urn:e-health-suisse:2015:error:not-holder-of-patient-policies'R - 10
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/Status
Description: Success : The child element StatusCode shall have a Value attribute equal to one of the following possible values as defined in OASIS SAML 2.0 Profile of XACML v2.0, i.e. urn:oasis:names:tc:SAML:2.0:status:success, urn:oasis:names:tc:SAML:2.0:status:Requester, urn:oasis:names:tc:SAML:2.0:status:Responder, urn:oasis:names:tc:SAML:2.0:status:VersionMismatch or other SAML status codes MAY be used where appropriate when there are no XACMLAuthzDecision Assertions present.

Test: saml:IssuerR - 11
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion
Description: Error : The element Assertion shall have a child named saml:Issuer

Test: saml:IssuerR - 12
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion
Description: Success : The element Assertion shall have a child named saml:Issuer

Test: @NameQualifier='urn:e-health-suisse:community-index'R - 13
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion/saml:Issuer
Description: Error : The element Issuer shall have an attribute NameQualifier with value urn:e-health-suisse:community-index

Test: @NameQualifier='urn:e-health-suisse:community-index'R - 14
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion/saml:Issuer
Description: Success : The element Issuer shall have an attribute NameQualifier with value urn:e-health-suisse:community-index

Test: matches(.,$regex_urn_oid)R - 15
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion/saml:Issuer
Description: Error : The element Issuer shall contain the home community Id of the Authorization Decision Provider community encoded as an URN

Test: matches(.,$regex_urn_oid)R - 16
Location: /SOAP-ENV:Envelope/SOAP-ENV:Body/Response/saml:Assertion/saml:Issuer
Description: Success : The element Issuer shall contain the home community Id of the Authorization Decision Provider community encoded as an URN

File Content

Raw XML Content

View lines numbers

Indent file

1	<?xml version="1.0" encoding="UTF-8" ?>
2	<SOAP-ENV:Envelope xmlns:SOAP-ENV='http://www.w3.org/2003/05/soap-envelope' xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance' xmlns:s='http://www.w3.org/2001/XMLSchema' xmlns:wsa='http://www.w3.org/2005/08/addressing'>
3	<SOAP-ENV:Header>
4	<wsa:Action>urn:e-health-suisse:2015:policy-administration:PolicyQueryResponse</wsa:Action><wsa:MessageID>urn:uuid:2FF500F2-0A5F-11EB-A058-001C42B2D956</wsa:MessageID><wsa:RelatesTo>urn:uuid:2c028957-715c-44b7-b0a7-7a03db8666e0</wsa:RelatesTo><wsa:To>http://www.w3.org/2005/08/addressing/anonymous</wsa:To> </SOAP-ENV:Header>
5	<SOAP-ENV:Body><Response xmlns="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xacml-saml="urn:oasis:names:tc:xacml:2.0:profile:saml2.0:v2:schema:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="_30391F3A-0A5F-11EB-BC30-001C42B2D956" Version="2.0" IssueInstant="2020-10-09T18:42:31.215Z"><Status><StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"></StatusCode><StatusMessage>Authorization request failed</StatusMessage></Status><saml:Assertion xmlns="" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Version="2.0" ID="_303924D0-0A5F-11EB-BC30-001C42B2D956" IssueInstant="2020-10-09T18:42:31.215Z"><saml:Issuer NameQualifier="urn:e-health-suisse:community-index">urn:oid:1.3.6.1.4.1.21367.2017.2.6.32</saml:Issuer></saml:Assertion></Response></SOAP-ENV:Body>
6	</SOAP-ENV:Envelope>