TL;DR: A peer-reviewed study across 55 hospitals in four nations found clinicians can lose millions of hours each year to repeated logins, with SSO/AM freeing 3.3 million hours and £54.1 million in value according to Imprivata and AHISP. Authentication is no longer just a security gate in healthcare, because login friction directly affects care delivery, compliance, and staff burnout.
Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “New Data Shows Hospitals Lose Millions of Hours to Logins, Driving Demand for Single Sign-On”.
By the numbers:
- The study covered 55 hospitals across four nations.
- The research says the value created reached £54.1 million, or $68.7 million.
Key questions
A: Healthcare teams should combine strong identity controls with a workflow designed around fast clinical access.
Q: Why does repeated authentication create risk in healthcare environments?
A: Repeated authentication creates risk because it increases cognitive load, slows care delivery, and encourages workarounds.
Q: What are the signs that access controls are failing in a hospital workflow?
A: Warning signs include shared mobile devices disappearing from cabinets, unsecured desktops left open with applications running, staff using personal email or personal accounts for hospital information, and clinicians depending on shared passwords.
Practitioner guidance
- Map login burden across clinical workflows Measure how many separate authentications clinicians complete per shift across EHRs, lab tools, prescribing systems, and shared workstations.
- Consolidate high-frequency access into SSO Prioritise the systems clinicians touch most often and move those to a single session model first, while preserving downstream entitlement checks and logging.
- Align access policy to clinical tempo Review logout, re-authentication, and timeout settings against actual shift patterns so controls support privacy compliance without creating avoidable interruption.
Bottom line: Repeated logins in hospitals create both productivity loss and governance friction, which is why access design now affects care delivery as well as security.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Single sign-on in hospitals is now an identity governance control, not a convenience feature. The article shows that authentication friction has measurable operational cost in clinical environments, which means access design directly shapes staff behaviour. When clinicians spend time fighting logins, security policy competes with care delivery and often loses. The practical conclusion is that healthcare IAM has to be judged on whether it supports compliant work at shift speed.
A question worth separating out:
Q: Should healthcare organisations prioritise single sign-on over adding more login controls?
A: They should prioritise reducing authentication friction before layering on more checkpoints, because more prompts rarely fix the underlying workflow mismatch. In clinical settings, a control that slows care can undermine both compliance and adoption. SSO becomes useful when it reduces repeated logins while preserving entitlement governance.
👉 Read our full editorial: Single sign-on is becoming a clinical security control in hospitals