The CEF eDelivery AS4 profile is defined by the European Commission for interoperability between public administrations across Europe. It supports both one-way/push and two-way/push-push messaging patterns.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/phax/phase4/llms.txt
Use this file to discover all available pages before exploring further.
Maven Artifact
phase4-profile-cefProfile ID
cef / cef-four-cornerMaven dependency
Overview
The CEF eDelivery profile is used across a range of EU infrastructure programmes. The profile supports two MEP combinations:- One-way / Push – a single message is pushed from initiator to responder
- Two-way / Push-Push – both parties can push messages on each leg
PMode structure
Two factory methods are provided inCEFPMode:
| Parameter | Value |
|---|---|
| Agreement ID | urn:as4:agreement |
| SOAP version | SOAP 1.2 (AS4 default) |
| WSS version | WS-Security 1.1.1 |
| One-way MEP | One-Way / Push |
| Two-way MEP | Two-Way / Push-Push |
Security requirements
TheCEFCompatibilityValidator enforces the following constraints on every PMode leg:
| Setting | Required value |
|---|---|
| Signature algorithm | RSA_SHA_256 (http://www.w3.org/2001/04/xmldsig-more#rsa-sha256) |
| Signature hash function | SHA-256 (http://www.w3.org/2001/04/xmlenc#sha256) |
| Encryption algorithm | AES-128-GCM (http://www.w3.org/2009/xmlenc11#aes128-gcm) |
| Minimum encryption strength | 128-bit |
| WSS version | 1.1.1 |
| PModeAuthorize | false |
| Receipt reply pattern | Response (synchronous) |
| Non-repudiation | true |
| Error handling – ReportAsResponse | true |
Four-corner model flag
TheCEFCompatibilityValidator has an optional flag that controls whether the four-corner model (requiring originalSender and finalRecipient message properties) is enforced:
Message properties
When the four-corner model is enabled (default), each user message must include:originalSender– C1 party identifierfinalRecipient– C4 party identifier
PartyInfo constraints
PartyInfo/Frommust contain at most onePartyIDPartyInfo/Tomust contain at most onePartyID
Compression
If payload compression is configured, only GZIP compression is accepted:Reception awareness
EUDAMED usage
The EUDAMED profile (EU Medical Devices Database) is built on top of the CEF profile. The
phase4-eudamed-client module uses AS4CEFProfileRegistarSPI.AS4_PROFILE_ID_FOUR_CORNER internally and adds EUDAMED-specific HTTP client settings.