UAF Case Study by MedImpact
•
1 like•693 views
Case study from MedImpact for UAF. Learn about how FIDO-enabled products using UAF have helped MedImpact reach their goals in achieving simple and secure authentication.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (12)
Similar to UAF Case Study by MedImpact
Similar to UAF Case Study by MedImpact (20)
More from FIDO Alliance
More from FIDO Alliance (20)
Recently uploaded
Recently uploaded (20)
UAF Case Study by MedImpact
- 1. © 2015 MedImpact, Inc. All rights reserved. The contents of this presentation are confidential and proprietary to MedImpact Healthcare Systems, Inc. and may contain material MedImpact considers Trade Secrets. This presentation may not be reproduced, transmitted, published, or disclosed to others without MedImpact’s prior written authorization. MedImpact and FIDO A Case Study of a UAF Deployment FIDO Alliance Seminar Washington DC Oct 6th 2015 Presented by Steven Secker MedImpact Healthcare Systems, Inc.
- 9. © 2015 MedImpact, Inc. All rights reserved. Use Cases for MedImpact Members of Health Insurance Plans: • What drugs are covered? • What’s my copay for this drug? • Do I need a Prior Authorization? • Have I met my deductible? • What pharmacies are in my network? • How much did I spend on prescriptions for taxes or Flex Spending Account (FSA) reimbursement? • How good have I been about taking my maintenance meds (getting them refilled on time)?
- 12. © 2015 MedImpact, Inc. All rights reserved. Use Cases for MedImpact Health Insurance Companies, MCOs, HMOs, Self-Insured Plans: • Manage Member Eligibility • Benefit Design • Formulary Management • Prior Authorization Management • Manage Denied Claims Appeals • All manor of reporting
- 14. © 2015 MedImpact, Inc. All rights reserved. User Community Profiles – Where to Start? # of Users Frequency of Use OS/Browser Mobile Brower App Potentially Millions +90 days between visits All Uncontrolled Yes Future Potentially Thousands Varies Greatly Windows IE11/Firefox No No Plans Tens of Thousands Weekly to Monthly Windows IE11/Firefox No No Plans Thousands Daily Windows IE11/Firefox No Future Thousands Daily Windows IE11/Firefox No Plans No Plans
- 16. © 2015 MedImpact, Inc. All rights reserved. UAF vs. U2F • Follow the lead of early deployments (Google, Dropbox) • User experience builds on top of on good old, familiar username password • Less potential for confusion about using multiple computers U2F UAF • Gets rid of the password completely • Users always have their phones, and millions of those phones have fingerprint readers Arguably, U2F would have been an easier path given our target user community and their use cases for the initial deployment. But you still force users to chose and remember a password “Gets rid of the password completely” won the day for us
- 20. © 2015 MedImpact, Inc. All rights reserved. Challenges / Discussion Points • Prioritization: getting the business to agree to allocate development cycles to adding FIDO support requires education, internal and external marketing, evangelism and high-level executive sponsorship • Fallback Solution: what do users do if they need to login and don’t have their laptop (or in the future, phone) with the fingerprint reader? • Messaging: how do you explain this to users who are not likely to go read www.fidoalliance.organd realize what a great solution this is? Do you call attention to the FIDO brand? How do you overcome fears like “I can reset a password if it’s stolen from your server, but I can’t reset my fingerprint!” • Client-Side Obstacles: Lack of built-in support for FIDO client at OS level means users need install/configure a FIDO client for their browser (FIDO 2.0 I believe aims to solve this and already Win10 has built-in support) • Support: Rolling out FIDO successfully requires educating the entire IT support team, from front-line call center staff to Level 2 and 3 engineers.