Join our Newsletter — 33% off our NHI Course

Hospital SSO and access management: what changes for IAM teams?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 17435
Topic starter  

TL;DR: A peer-reviewed study across 55 hospitals in the UK and Ireland found that single sign-on and access management cut desktop login time by 60%, sped application access by more than 50%, and redirected 3.3 million clinician hours to patient care, according to Imprivata. The core lesson is that healthcare IAM succeeds when it reduces friction without weakening auditability or session control.

Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Making a difference to patient care: The true value of access in clinical workflows”.

By the numbers:

  • Using single sign-on and access management cut desktop login time by 60% across the study hospitals.
  • Application access became over 50% faster after deployment.

Key questions

Q: How should healthcare organisations reduce login friction without weakening access control for clinical systems?

A: Healthcare teams should combine strong identity controls with a workflow designed around fast clinical access.

Q: Why do clinicians create workarounds when access controls are too slow?

A: When authentication interrupts urgent workflows, clinicians often optimise for care delivery by staying logged in, sharing credentials, or avoiding logout steps.

Q: What are the signs that hospital SSO is working properly?

A: Look for shorter login times, fewer authentication interruptions, less reliance on shared accounts, and preserved auditability after deployment.

Practitioner guidance

  • Map login friction to workaround risk Measure where clinicians abandon logouts, reuse sessions, or rely on shared access because authentication interrupts care.
  • Preserve session integrity on shared endpoints Require automatic locking and reauthentication on multi-user desktops, kiosks, and roaming workstations so a session stays attributable when control of the device changes hands.
  • Anchor streamlined access in strong primary authentication Keep two-factor authentication or comparable proofing at the point of initial access, then reduce downstream prompts through SSO rather than by weakening assurance.

Bottom line: Hospitals face a recurring access-security trade-off: if login is too slow, clinicians work around it, but if access is loosened too far, auditability and privacy suffer.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 17367
 

Hospital access is a workflow governance problem, not just an authentication problem: this study shows that clinicians will predictably work around access friction when identity controls slow care. The security programme therefore has to be designed around clinical reality, not only policy intent. In healthcare, the decisive question is whether access governance preserves both speed and attributable use.

A question worth separating out:

Q: Should healthcare IAM prioritise session control or faster access?

A: Hospitals need both, but session control should not be traded away for speed. Fast access is only defensible when the identity layer still enforces attribution, automatic locking, and reauthentication where required. If those controls disappear, the gain in efficiency comes with a privacy and governance cost.

👉 Read our full editorial: Single sign-on in hospitals shows the access-security trade-off



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.