Identity & Access Management (IAM) is the security discipline that enables the right individual to access the right resource at the right times for the right reason.

1. 8K Miles Software Services || http://www.8kmiles.com 1
Healthcare Challenges With Identity &
Access Management
Meet 8K Miles @ HIMSS 2016 Booth # 10421

2. Identity & Access Management
 Identity & Access Management (IAM) is the security discipline that enables the right
individual to access the right resource at the right time for the right reason .
 A Compliance Management Technology which helps an employee in an organization
to access right resource that may be a portal , library .
 The technology helps in managing the E2E activity of an employee/user starting from
hiring till exit.
8K Miles Software Services || http://www.8kmiles.com 2

3. Key Feature & Components of Identity & Access
Management
 Self-Service
 Work Flow Automation
 Access Management
 Campaigns
 Policy Enforcement
 Single Sign-on
8K Miles Software Services || http://www.8kmiles.com 3
 Provisioning
 Fine-Grained Authorization
/ Entitlements
 Directory Services
 Authentication methods
 Attestation, Auditing &
Reporting
 Federation and Federated
Identity Management .
 Role Based Access Control
(RBAC).

4. Business Case 1 - Self-Service
8K Miles Software Services || http://www.8kmiles.com 4
Creates a New
User
System Generates
Mail to New
Employee
Clicks Self
Registration URL
Log in
Admin
View/
Request/
Delete – Access
The Admin creates a New User Name
from any of the HRMS or DB which
can be integrated with IDM
Hey , I got a new mail ,
which contains a URL,
now I will create a new
Login Id and Password .
Milton
The Pharmacist

5. Business Case 2 - Provisioning
8K Miles Software Services || http://www.8kmiles.com 5
Admin defines
default
application based
on Role/ Job Title
Raise Request to
Access Patient
Database Application
Admin
Milton
The Pharmacist
The Admin Creates a New User Name
from any of the HRMS or DB which
can be integrated with IDM
Jerald
The Manager
Approve Milton’s request for
accessing application
Approve Jerald’s request
for Milton to access
application
Data Owners
of Patient
Database
Multilevel Approval
 Registering an user access to applications and facility access.
 It Includes all business workflow processes of approvals or denials.
Access Approved for Patient Database

6. Business Case 3 – (SSO) Before Single Sign On
Implementation
Pharmacist
Leave Management
System
Payroll Portal
Medicine Portal
Billing Portal
• User need to bookmark
multiple portals
• User need to remember
multiple username and
passwords .
Enterprise Portals

7. Business Case 3 – (SSO) After Single Sign On
Implementation
Pharmacist
 One username & password to access multiple
resource in an enterprise .
 Save time in escalations .
 More of self service than relying in tech support .
Leave Management System
Billing Portal
Payroll Management
Medicine Portal
Education Portal
HR Portal
Enterprise Portals

8. Business Case 4 – Before Access Governance
Implementation ( Attestation for Application Access)
Job Change/
Promotion
Nurse Patient Specialist
Ming Ma
Calorie
Counter
Ming Ma
Current Job Title
Change in Job Title for
Ming Ma
Nutricheck
Today does your organization
track what access to resource
your employee has even after
a shift in Job Title/Role ?
Calorie
Counter
Nutricheck

9. Job Change/
Promotion
Nurse Patient Specialist
Ming Ma
Calorie
Counter
Ming Ma
Current Job Title
Change in Job Title for
Ming Ma
Nutricheck
EZIAM will automatically detect
the user’s information that are
sent to it as a daily feed and
administrator will identify the
Change and dis-regards the
pervious resource access from
Ming Ma
Business Case 4 – After Access Governance
Implementation ( Attestation for Application Access)

10. Business Case 5 – Application Access Approval
Workflow (Re-Assignment)
Ming Ma
Calorie
Counter
Nutricheck
Manager 1
Ming Ma
Manager 2
Job Change/
Promotion
Calorie
Counter
Nutricheck
When Ming Ma changes the job or role
from one department to another , the
Manager 2 who now attest Ming Ma
rejects her pervious access to the
resources and approves the current
resource “Patient Database”.
When MingMa Changes her Job Title ,
Her Manager Re-Assign her
Information to another Manager 2 Re-Assign Task to Manager 2
Nurse
Patient Specialist Reject
Patient
Database
Approve

11. Business Case 6 – (IDM)
Before Identity Management Implementation
Randy -
Patient Specialist
John -
Patient Specialist
Theresa being a Super Admin needs to grant
permission to Randy & John for accessing
Patient Database, but Theresa leaves for a
vacation :
• Today does your system allows Abraham
to grant permission to Randy & John for
accessing patient database?
Theresa -
Master Admin
Patient
Database
Theresa Going in a medical
leave , but Randy & John
need to get permission to
access Patient Database
Portal.
• Will Randy & John wait
to get access
permission until
Theresa returns from
vacation ?
Abraham -
Master Admin

12. Business Case 6 – (IDM)
After Identity Management Implementation
Randy -
Clinical Analyst
John -
Clinical Analyst
• A Mail is triggered by IDM to Abraham on behalf of
Theresa for providing permission to Randy & John
to access Patient Database.
Theresa -
Master Admin
Patient
Database
Abraham -
Super Admin
Theresa going on a
vacation , hence
reassign the task to
Abraham for
providing
permission to
Randy & John for
accessing patient
database
Theresa Re-Assign the work to Abraham ,
hence a mail is Triggered to Abraham
Now Abraham Login
as an admin and
provides permission
to Randy & John On
behalf of Theresa

13. Example -Access Certification Campaign &
Audits :
1
3
1. User Logs in as an
Manager .
2. Checks the
certification
complete
Percentage .
3. Opens the
Campaign and now
he will certify a
particular person
2

14. Example -Access Certification Campaign &
Audits :
4 5
67
 The Manager has the Option to
Approve / Reject /Consult /
Reassign a Particular Employee
according to the Employee’s
Action .
 If the Employee Reports
directly to the Manager ,
the Manager has the
Privilege to Approve or
Attest .
 If the Employee Quits his
present Organization, the
Manager has an option to
Reject the particular
Employee .
 If the employee moved to
a different team or No
longer reports to him , the
Manager can Select
Consult or Reassign to
Another Role

15. Reports
9
10
 The User Can Log In to
 View Report
 Manager Report
 Legacy Report
 The User can opt to choose any
reports that requires him to do
Audit and pull data by Providing
various Parameters to view the
reports .

16. Reports
12
11
 The User can view the
reports and has an option to
Export Reports to various
Known Sources available in
the Tool .

17. 8K Miles Software Services || http://www.8kmiles.com 17
“Knowledge Is What Happens When
Presentation Meets Opportunity “
Meet 8K Miles @
HIMSS 2016 Booth # 10421
?