Topic starter
25/06/2026 12:21 am
TL;DR: Single sign-on and access management cut desktop login time by 60%, sped application access by more than 50%, and redirected 3.3 million clinician hours annually across 55 hospitals, according to Imprivata research from Imprivata and George A. Gellert, published in AHISP. The security lesson is clear: in healthcare, access friction is itself an operational and privacy risk, not just a user-experience issue.
Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Making a difference to patient care: The true value of access in clinical workflows”.
By the numbers:
- Clinicians experienced a 60% reduction in desktop login time after the solution deployment.
- The study found over 50% faster application access after deployment.
Key questions
A: Healthcare teams should combine strong identity controls with a workflow designed around fast clinical access.
Q: Why does login friction increase operational and privacy risk in clinical settings?
A: Because clinicians under pressure will often adopt workarounds when authentication interrupts care, such as shared logins or staying signed in.
Q: Why do shared clinical devices create problems for standard IAM controls?
A: Shared devices weaken the assumption that one account maps cleanly to one person and one session.
Practitioner guidance
- Map clinical login friction to risk and workflow impact Measure how often authentication interrupts patient-facing tasks, where users switch devices, and which workarounds appear when access takes too long.
- Preserve strong authentication inside streamlined access flows Keep two-factor authentication, smartcard-based sign-in, and reauthentication controls in place while reducing repeated prompts across workstation and application access.
- Harden shared-device session handling Apply automatic locking and reauthentication on multi-user desktops and kiosks so session integrity remains tied to the active clinician rather than the device.
Bottom line: Repeated authentication in hospitals is a governance problem because it creates pressure for unsafe workarounds and weakens auditability.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 9:16 am
Clinical access friction is an identity governance issue, not a usability complaint. When clinicians need multiple passwords across many applications, the control surface becomes easy to bypass through shared logins, delayed logouts, and other compensating behaviors. That weakens privacy assurance and makes audit expectations harder to sustain. The practical conclusion is that identity programmes in healthcare must treat friction as a security design input, not an afterthought.
A question worth separating out:
Q: What should identity teams measure after deploying single sign-on in hospitals?
A: Identity teams should measure time saved, sign-out compliance, password reset volume, exception requests, and staff-reported workflow friction. If SSO improves speed but not behaviour, the control is incomplete. The best signal is whether clinicians can work faster while still following privacy and access policies consistently.
👉 Read our full editorial: Single sign-on and access management reduce clinical friction