TL;DR: A peer-reviewed study across 55 hospitals in the UK and Ireland found that single sign-on and access management cut desktop login time by 60%, sped application access by more than 50%, and redirected 3.3 million clinician hours to patient care, according to Imprivata. The core lesson is that healthcare IAM succeeds when it reduces friction without weakening auditability or session control.
Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Making a difference to patient care: The true value of access in clinical workflows”.
By the numbers:
- Using single sign-on and access management cut desktop login time by 60% across the study hospitals.
- Application access became over 50% faster after deployment.
Key questions
A: Healthcare teams should combine strong identity controls with a workflow designed around fast clinical access.
Q: Why do clinicians create workarounds when access controls are too slow?
A: When authentication interrupts urgent workflows, clinicians often optimise for care delivery by staying logged in, sharing credentials, or avoiding logout steps.
Q: What are the signs that hospital SSO is working properly?
A: Look for shorter login times, fewer authentication interruptions, less reliance on shared accounts, and preserved auditability after deployment.
Practitioner guidance
- Map login friction to workaround risk Measure where clinicians abandon logouts, reuse sessions, or rely on shared access because authentication interrupts care.
- Preserve session integrity on shared endpoints Require automatic locking and reauthentication on multi-user desktops, kiosks, and roaming workstations so a session stays attributable when control of the device changes hands.
- Anchor streamlined access in strong primary authentication Keep two-factor authentication or comparable proofing at the point of initial access, then reduce downstream prompts through SSO rather than by weakening assurance.
Bottom line: Hospitals face a recurring access-security trade-off: if login is too slow, clinicians work around it, but if access is loosened too far, auditability and privacy suffer.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Hospital access is a workflow governance problem, not just an authentication problem: this study shows that clinicians will predictably work around access friction when identity controls slow care. The security programme therefore has to be designed around clinical reality, not only policy intent. In healthcare, the decisive question is whether access governance preserves both speed and attributable use.
A question worth separating out:
Q: Should healthcare IAM prioritise session control or faster access?
A: Hospitals need both, but session control should not be traded away for speed. Fast access is only defensible when the identity layer still enforces attribution, automatic locking, and reauthentication where required. If those controls disappear, the gain in efficiency comes with a privacy and governance cost.
👉 Read our full editorial: Single sign-on in hospitals shows the access-security trade-off