Page History
...
When STS’ signature of the ID card has been validated successfully, then the consumer has been authenticated and a IDWS security context ticket is provided to the service.
Authorization of consumer system is performed using a whitelist in the web service based on information in the system-part of the ID card.
...
Whether the user is health professional or citizen is determined from either the IDWS ticket or the HSUID header attribute nsi: UserType.
...