Join our Newsletter — 33% off our NHI Course

Why do hospital SSO controls trigger workarounds in clinical workflows?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 2 years ago
Posts: 20217
Topic starter  

TL;DR: Faster access in hospitals reduced login friction and redirected 3.3 million clinician hours to patient care, Imprivata reports from a peer-reviewed study across 55 hospitals in the UK and Ireland. Clinical access works best when identity controls stay fast enough to avoid workarounds while still preserving auditability and session control.

Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Making a difference to patient care: The true value of access in clinical workflows”.

By the numbers:

  • Using single sign-on and access management cut desktop login time by 60% across the study hospitals.
  • Application access became over 50% faster after deployment.

Key questions

Q: Why do clinicians create workarounds when access controls are too slow?

A: When authentication interrupts urgent workflows, clinicians often optimise for care delivery by staying logged in, sharing credentials, or avoiding logout steps.

Q: What are the signs that hospital SSO is working properly?

A: Look for shorter login times, fewer authentication interruptions, less reliance on shared accounts, and preserved auditability after deployment.

Q: How should healthcare organisations reduce login friction without weakening access control for clinical systems?

A: Healthcare teams should combine strong identity controls with a workflow designed around fast clinical access.

Practitioner guidance

  • Map login friction to workaround risk Measure where clinicians abandon logouts, reuse sessions, or rely on shared access because authentication interrupts care.
  • Preserve session integrity on shared endpoints Require automatic locking and reauthentication on multi-user desktops, kiosks, and roaming workstations so a session stays attributable when control of the device changes hands.
  • Anchor streamlined access in strong primary authentication Keep two-factor authentication or comparable proofing at the point of initial access, then reduce downstream prompts through SSO rather than by weakening assurance.

Bottom line: Hospitals face a recurring access-security trade-off: if login is too slow, clinicians work around it, but if access is loosened too far, auditability and privacy suffer.

Glossary terms: Single Sign On, Session Integrity, Access Management, Workaround behaviour

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 1 day ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 20707
 

Hospital access is a workflow governance problem, not just an authentication problem: this study shows that clinicians will predictably work around access friction when identity controls slow care. The security programme therefore has to be designed around clinical reality, not only policy intent. In healthcare, the decisive question is whether access governance preserves both speed and attributable use.

A question worth separating out:

Q: Should healthcare IAM prioritise session control or faster access?

A: Hospitals need both, but session control should not be traded away for speed. Fast access is only defensible when the identity layer still enforces attribution, automatic locking, and reauthentication where required. If those controls disappear, the gain in efficiency comes with a privacy and governance cost.

👉 Read our full editorial: Single sign-on in hospitals shows the access-security trade-off



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.