OASIS Cross-Enterprise Security and Privacy Authorization (XSPA)
- Free/open
These XSPA profiles align SAML and XACML use with the US Healthcare Information Technology Standards Panel's (HITSP) Access Control Transaction Package (TP 20). he XSPA profile of SAML enables hospitals and other service providers to validate requests for information access. The XSPA profile of XACML describes mechanisms for authenticating, administering, and enforcing authorization policies that control access to protected information residing within or across enterprise boundaries.
This standard was developed by a technical committee including representatives from the US Healthcare Information Technology Standards Panel (HITSP), Oracle, Sun Microsystems, and the US Department of Veterans Affairs (VA).





