Applicable Doc. 03 - IAM Design and Architecture Management Plan.pdf

PDF 393 KB Posted

Attached to
DF01--IAM Recompete Task Order (VA-24-00001896)
Solicitation number
36C10B24Q0109
Issued by

About this file

This document outlines an Identity and Access Management Design and Architecture Management Plan for the Department of Veterans Affairs. The plan details processes for defining software architecture and design for new enhancements to identity management systems. It includes requirements for system design documents, service descriptions, interface specifications, and other artifacts. It also provides sample documentation of applying the process to a new requirement to support capturing and sharing a veteran's sexual orientation attribute across various VA health systems. The related federal contract opportunity is a pre-solicitation notice for task order DF01--IAM Recompete under multiple award contract number 36C10B24Q0109 to provide continued support for the VA's identity and access management programs.

View the file

Other files

File Type Posted
36C10B24Q0109_4.docx DOCX document
36C10B24Q0109_3.docx DOCX document
36C10B24Q0109_2.docx DOCX document
RFI 36C10B24Q0109 QA CO Final.docx DOCX document
36C10B24Q0109_1.docx DOCX document
IAM MASTER PWS for RFI.docx DOCX document
Applicable Doc. 5A - IAM Playbook - Home.pdf PDF
Applicable Doc. 13 - AcS VIP23 SSOe EU HD User Guide.pdf PDF
Applicable Doc. 04 - IAM-VAEC Configuration Management Plan_June-2021 (1).pdf PDF
Applicable Doc. 02 - IAM Conceptual Architecture.pdf PDF
36C10B24Q0109.docx DOCX document
Applicable Doc. 14 - Application Integration Summary Form.xlsx XLSX spreadsheet
Applicable Doc. 09 - IAM Requirements Backlog.pdf PDF
Applicable Doc. 19 - VAEC Technical Reference Guide 2022 v2.0.pdf PDF
Applicable Doc. 5D - IAM Playbook - SSOe.pdf PDF
Applicable Doc. 16 - VA OIT Change Control SOP.pdf PDF
Applicable Doc. 20 - Directive 6510 15 Jan 2016.pdf PDF
Applicable Doc. 15 - After Action Report Template.pdf PDF
Applicable Doc. 07 - IAM Master Glossary.pdf PDF
Applicable Doc. 18 - IAM Requirements Traceability Matrix.xlsx XLSX spreadsheet
Applicable Doc. 08 - COTS Product Roadmap.pdf PDF
Applicable Doc. 10 - yourIT Service Portal Quick Reference Guide.pdf PDF
Applicable Doc. 5E - IAM Playbook - CAR.pdf PDF
Applicable Doc. 11 - ITSM-Tool-Quick-Start-Guide.pdf PDF
Applicable Doc. 17 - Standard Change Process.pdf PDF
Applicable Doc. 06 - IAM Business Requirements Document (BRD).pdf PDF
Applicable Doc. 01 - Authorization_Requirements_SOP_Guide.pdf PDF
Applicable Doc. 5F - IAM Playbook - AMS.pdf PDF
Applicable Doc. 5B - IAM Playbook - VAMPI.pdf PDF
Applicable Doc. 12 - Monthly Status Report Template.pdf PDF
Applicable Doc 21- Business Associate Agreement.pdf PDF
Applicable Doc. 5G - IAM Playbook - Prov.pdf PDF
Applicable Doc. 22 - Identity Verification Integrated Control Document (ICD).pdf PDF
Applicable Doc. 5C - IAM Playbook - SSOi.pdf PDF
Show all 34

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Identity and Access Management

Design and Architecture Management Plan

April 2021

Version 0.1

Department of Veterans Affairs

IAM

Architecture and Design Management Plan i October 2021

Revision History

Date Version Description Author

09/28/2021 0.1 Initial Draft Patrick Kiboti

Architecture and Design Management Plan ii October 2021

Table of Contents

1. Introduction

1.1. Purpose

1.2. Artifacts

1.2.1. System Design Document

1.2.2. Service Description

1.2.3. MPI/HL7 Interface Specification

1.2.4. FHIR

1.3. References

2. Architecture and Design Development

2.1. Architecture and Design Process Flow

3. Sample Process

Architecture and Design Management Plan 3 October 2021

1. Introduction

1.1. Purpose

Architecture and Design Management is a systematic approach to identifying, organizing, communicating, and managing the changing architecture and design to allow coordination between multiple stakeholders.

There are two primary objectives of this document:

1. Ensure that the architecture and design for new enhancement is well captured, understood and agreed by the multiple stakeholders.

2. Create a process for accepting architecture and design artifacts.

The intended audiences for this document include the following:

• Technical Leads: This group is responsible for the architecture and design for all VA

MPI components, MPI, PSIM, TK and VistA

• VA MPI Developers: This group is responsible for coding and implementation of the approved design and architecture.

• IAM PMO: This group is responsible for accepting, reviewing, and approving contract deliverables which includes the design and architecture package

1.2. Artifacts

The documents that are used to define the design and architecture are:

1.2.1. System Design Document

This document provides details on software and system changes to deliver IAM VIP release.

1.2.2. Service Description

This document describes the interactive interfaces to and from the VA Master Person Index (VA MPI) Service.

1.2.3. MPI/HL7 Interface Specification

This interface specification is intended to identify the VistA information that will be shared as part of the MVI.

1.2.4. FHIR

This describes the resources and transactions that make up VA MPI implementation of the HL7 FHIR standard.

1.3. References

The templates for the documents document are included here.

Architecture and Design Management Plan 4 October 2021

2. Architecture and Design Development

2.1. Architecture and Design Process Flow

The following is a high-level process flow of the architecture and design process flow

Architecture and Design Management Plan 5 October 2021

1. Receive Approved Requirements

VA MPI Technical shall receive approved requirements from the Analyst lead.

NOTE: For the requirements process, refer to the Requirement Management Plan

2. Define the Software Architecture and Design

VA MPI technical leads shall conduct design sessions to define the implementation strategy.

This activity includes but not limited to:

• Define enhancements to the HL7 messaging as required in the requirements. (HL7 v2.4, 3.0 or FHIR)

• Define enhancements to the messaging between PSIM and MPI

• Define UI changes – This may require follow up with the business to establish the location and placement of new attributes in MVI TK or MPI

UI.

• Define MDM changes

• Establish the dependencies – These will be provided to the appropriate PM to manage.

• Confirm the LOE for each requirement – Updates shall be provided to the IAM Roadmap.

3. Create System Design Document

VA MPI technical lead shall update the outcome of the architect and design in the following sections of the System Design Document section

• Software Architecture

• Updated IAM diagrams

4. Coding

The VA MPI developers shall start the coding changes as directed by the respective VA MPI Technical Lead

If there are messaging change the lead developer or designee shall update the appropriate section of the Service Description with the messaging changes

5. Update System Design Document

VA MPI Technical Lead shall or designee shall update the System Design Document with the detailed implementation details that shall include and not limited to:

• Conceptual Design

Architecture and Design Management Plan 6 October 2021

• System Architecture

• Database changes

• Detailed Design (Software and Hardware)

• Data Design

• External System Interface Design

• Human-Machine Interface

6. Deliver System Design Document and Service Description

As required by the contract the development group shall deliver the updated System Design Document, MPI/HL7 Interface Specification and Service Description to the VA MPI PMO group.

7. Review and Approve System Design and Service Description

The VA MPI PMO team shall review and approve the System Design document.

The approval criteria shall include and not limited to:

• Approved requirements have defined implementation

• Service Description messaging and applicable versioning is called out

• System Design document includes approved UI changes.

• Database changes have been defined and approved

8. Publish Service Description and MPI/HL7 Interface Specification

The VA MPI PMO team in collaboration with the VA MPI release manager shall release the updates Service Description that includes a summary of the changes made.

Architecture and Design Management Plan 7 October 2021

3. Sample Process The sample below defines the application of the process defined above using the following approved requirement.

1. [Business User Story VAMPI- 10577] Support Sexual Orientation

• MVI Scope o Enhance VistA to trigger messages to MVI when Sexual Orientation is added or Updated in VistA o Enhance HL7 messages (v2.4 and v3.0) to transmit Sexual Orientation to

MVI

o Process Sexual Orientation – Correlation and Primary View o Synchronize Sexual Orientation to LOB o TK Enhancement to display the Sexual Orientation value o Provide location to stored Sexual Orientation in VistA o Enhance messaging to include explicit delete from consumers (i.e, if a null value is sent we shall not delete existing Primary View value).

The systems that will be collecting and sending data to MVI are Cerner

Data Format – Below are the Support Sexual Orientation Attributes o Lesbian, gay or homosexual.

o Straight or heterosexual.

o Bisexual.

o Something else, please describe. - Maximum Characters - 255 o Don’t know.

o Choose not to disclose.

Promote to Primary View – (DQ/HC IdM group) - MVI shall promote Sexual Orientation to the Primary View

The business rule for promoting the Sexual Orientation to the Primary View is Last In Win.

The MVI TK shall be enhanced to support override of the Sexual Orientation value.

Deletes are not allowed in VistA HC IdM can delete using the OVR – The delete will be shared with other correlations and not VistA.

HC IdM will have option to add Authority Score during the OVR process.

For MPI – The enhancement shall include adding the Authority Score and Adding the field to Patient Inquiry in VistA

Architecture and Design Management Plan 8 October 2021

Following the process defined above

1. Define the Software Architecture and Design

VA MPI technical leads defines

• Define enhancements to the HL7 messaging

This attribute shall be added to the Administrative Observation

<administrativeObservation classCode="VERIF">

<code code="SOGI" displayName="Sexual Orientation" codeSystem="2.16.840.1.113883.4.349"/> <value xsi:type="CD" code="LGH~STH~BIS~QER" displayName="Lesbian gay or homosexual~Staright or

Heterosexual~Bisexual~Queer"/>

</administrativeObservation>

• Define enhancements to the messaging between PSIM and MPI

OBX^x^CE^Sexual Orientation^^LGH~Lesbian, gay or homosexual~L^^

OBX^x^ST^Sexual Or Description^^~free text information~L^^

OBX^x^CE^Pronoun^^HIS~He/him/his~L^^

OBX^x^ST^Pronoun Description^^~free text information~L^^

OBX^x^CE^Admin Sex^^O~OTHER~L^^

• Define enhancements to the messaging between MPI and VistA - This is bi-directional

OBX^x^CE^Sexual Orientation^^LGH~Lesbian, gay or homosexual~L^^

OBX^x^ST^Sexual Or Description^^~free text information~L^^

OBX^x^CE^Pronoun^^HIS~He/him/his~L^^

OBX^x^ST^Pronoun Description^^~free text information~L^^

OBX^x^CE^Admin Sex^^O~OTHER~L^^

• Define UI changes

Primary View tab

Architecture and Design Management Plan 9 October 2021

• Establish the dependencies o Cerner – TBD o CPRS - CPRS patches are: OR*3*558/PXRM*2*78 o VA.GOV - TBD

• Confirm the LOE for each requirement – Updates shall be provided to the IAM Roadmap.

2. Create System Design Document

Architecture and Design Management Plan 10 October 2021

VA MPI technical lead shall update the outcome of the architect and design in the following sections of the System Design Document section

• Software Architecture

• Updated IAM diagrams

3. Coding

The VA MPI developers shall start the coding changes as directed by the respective VA MPI Technical Lead

If there are messaging change the lead developer or designee shall update the appropriate section of the Service Description with the messaging changes

Below are the messages updated to the Service Description – Update to Add Person (Implicit Add with Search)

1301 Request:

<ps:PRPA_IN201301UV02 xmlns="urn:hl7-org:v3" xmlns:ps="http://vaww.oed.oit.va.gov" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:hl7-org:v3 ../../schema/HL7V3/NE2008/multicacheschemas/PRPA_IN201301UV02.xsd" ITSVersion="XML_1.0"> <id extension="MCID-ADD-COR-bmc07302012" root="22a0f9e0-4454-11dc-a6be-3603d6866807"/> <creationTime value="20070803130624"/> <interactionId extension="PRPA_IN201301UV02" root="2.16.840.1.113883.1.6"/> <processingCode code="T"/> <processingModeCode code="T"/> <acceptAckCode code="AL"/> <receiver typeCode="RCV"> <device classCode="DEV" determinerCode="INSTANCE"> <id root="2.16.840.1.113883.4.349"/> <telecom value="https://example.org/PatientFeed"/> </device> </receiver> <sender typeCode="SND"> <device classCode="DEV" determinerCode="INSTANCE"> <id extension="200ESR" root="1.2.840.114350.1.13.99997.2.7788"/> </device> </sender> <controlActProcess classCode="CACT" moodCode="EVN"> <subject typeCode="SUBJ"> <registrationEvent classCode="REG" moodCode="EVN"> <id nullFlavor="NA"/> <statusCode code="active"/> <subject1 typeCode="SBJ"> <patient classCode="PAT"> <id root="1.2.840.114350.1.13.99997.2.3412" extension="1070121175V853480^NI^200M^USVHA"/> <statusCode code="active"/> <patientPerson> <name use="L">

Architecture and Design Management Plan 11 October 2021

<given>SVETLANA</given> <family>HEINRICH</family> </name> <administrativeGenderCode code="M"/> <birthTime value="19500101"/> <addr use="HP"> <streetAddressLine>23456 Street</streetAddressLine> <city>Chicago</city> <state>IL</state> <country>USA</country> <postalCode>33333</postalCode> </addr> <asOtherIDs classCode="PAT"> <id root="2.16.840.1.113883.3.42.10001.100001.12" extension="20141203^NI^200DOD^USDOD"/> <scopingOrganization classCode="ORG" determinerCode="INSTANCE"> <id root="2.16.840.1.113883.3.42.10001.100001.12"/> </scopingOrganization> </asOtherIDs> <asOtherIDs classCode="CIT"> <id root="2.16.840.1.113883.4.1" extension="777889999"/> <scopingOrganization classCode="ORG" determinerCode="INSTANCE"> <id root="2.16.840.1.113883.4.1"/> </scopingOrganization> </asOtherIDs> </patientPerson> <providerOrganization classCode="ORG" determinerCode="INSTANCE"> <id root="1.2.840.114350.1.13.99998.8734"/> <name>Good Health Clinic</name> <contactParty classCode="CON"> <telecom value="tel:+1-342-555-8394"/> </contactParty> </providerOrganization> <subjectOf> <administrativeObservation classCode="VERIF"> <id extension="Administrative Sex" root="2.16.840.1.113883.4.349"/> <code code="AdministrativeSex" displayName="Administrative Sex" codeSystem="2.16.840.1.113883.4.349"/> <value xsi:type="CD" code="M" displayName="Male"/> </administrativeObservation> </subjectOf> <subjectOf> <administrativeObservation classCode="VERIF"> <id extension="SEXUAL ORIENTATION" root="2.16.840.1.113883.4.349"/> <code code="SOGI" displayName="Sexual Orientation" codeSystem="2.16.840.1.113883.4.349"/> <value xsi:type="CD" code="LGH~STH~BIS~OTH" displayName="Lesbian gay or homosexual~Straight or Heterosexual~Bisexual~Another option :ALIEN Explanation of Sexual Orientation description"/> </administrativeObservation> </subjectOf> <subjectOf> <administrativeObservation classCode="VERIF">

Architecture and Design Management Plan 12 October 2021

<code code="PERSON_TYPE" displayName="Person Type" codeSystem="2.16.840.1.113883.4.349"/> <value xsi:type="CD" code="vet~pat" displayName="Veteran,Patient"/> </administrativeObservation> </subjectOf> <subjectOf> <administrativeObservation classCode="VERIF"> <id extension="PRONOUN" root="2.16.840.1.113883.4.349"/> <code code="Pronoun" displayName="Pronoun" codeSystem="2.16.840.1.113883.4.349"/> <value xsi:type="CD" code="HIS~HER~THE~ZIR~PTN~OTH" displayName="His/He/Him~Hers/Her/she~They/Them/Theirs~Ze/Zir/Zirs~Patient Name~OTHER:ALIEN Explanation of Pronouns"/> </administrativeObservation> </subjectOf> </patient> </subject1> <custodian typeCode="CST"> <assignedEntity classCode="ASSIGNED"> <id root="1.2.840.114350.1.13.99998.8734"/> <assignedOrganization classCode="ORG" determinerCode="INSTANCE"> <name>Good Health Clinic</name> </assignedOrganization> </assignedEntity> </custodian> </registrationEvent> </subject> </controlActProcess> </ps:PRPA_IN201301UV02>

4. Update System Design Document

VA MPI Technical Lead shall, or designee shall update the System Design Document with the detailed implementation details that shall include and not limited to:

• Database changes

• Hardware Detailed Design

• Software Detailed Design

****Sample updates****

Flows:

TK Override:

To update SO, Pronouns, Administrative Sex at Primary View level create 1300 - PRIMARY VIEW OVERRIDE task.

Administrative Sex can be updated calling MPI UPDATE PRIMARY VIEW

Sexual Orientation can be updated by calling MPI PSIM UPDATE SEX ORIEN PV Pronoun values can be updated by calling MPI PSIM UPDATE PRONOUN PV

Architecture and Design Management Plan 13 October 2021

Displaying Values in TK

MPI populates Primary View tab calling MPI RPC - MPI GET BY SOURCE ID and

MPI RETURN CORRELATION DATA

Correlation Compare page values are populated from ADR calling PSIM directly

PSIM flows:

1301 Add these new traits at correlation and PV level 1302 Update triggers A08 to MPI.

A31 from MPI to PSIM adds/updates these traits at PV and correlation level PSIM sends these traits over MPI NEXT ICN FOR PSIM and MPI ADD CORRELATION RPCs

Testing Recommendation:

• To test best is from PSIM tools IdmRequestUtilities.

• Submit the sample 1301 that will add an ICN with correlation and these traits.

Then send 1302 Update from IdmRequestUtilities.

• This will update the values and send an A08 to MPI.

• Then MPI will send A31 to PSIM

• You can also test override functionality from TK.

5. Deliver System Design Document and Service Description

As required by the contract the development group shall deliver the updated System Design Document and Service Description to the VA MPI PMO group

6. Review and Approve System Design and Service Description

The VA MPI PMO team shall review and approve the System Design document.

The approval criteria shall include and not limited to:

• Approved requirements have defined implementation

• Service Description messaging and applicable versioning is called out

• System Design document includes approved UI changes.

• Database changes have been defined and approved

7. Publish Service Description

The VA MPI PMO team in collaboration with the VA MPI release manager shall release the updates Service Description that includes a summary of the changes made.

File details come from the government source that posted it. Updated .