Requires Free Membership to View
When you register you’ll also receive the latest news, advice and technical tips designed specifically for midmarket IT leaders like yourself. Our award-winning editorial team will give you immediate access to emerging business and technology trends.
Scot Petersen, Editorial Director, SearchCIO-Midmarket
 |
||||
|
|
|||
|
||||
With SSO, "We needed to find something that fit into our budget and was not cumbersome to operate and maintain," he said. Many of the high-profile single sign-on solutions in the marketplace came with a lot of add-ons and the assumption that if you bought the one, you bought them all. He needed a solution that integrated with Microsoft's Active Directory and allowed users to log on to workstations one time to be given access to all the applications they would need.
"We didn't want the one thing plus everything else. I just wanted the truck," he said.
He and his business analysts came across an article about an enterprise single sign-on appliance that was easy to use from Imprivata Inc., then a startup company in Lexington, Mass. "You could call it dumb luck." But the claim that the appliance would basically run itself was met with skepticism. "I told them we live a little bit too close to Missouri [the Show-Me state] to believe you," Christian said.
Imprivata sent out a technician with an appliance so Christian could try it out for 30 days. The technician arrived in the morning and by the afternoon, seven applications used by the clinical staff were ready to go. Christian's staff rolled it out to the nursing unit the next day.
"Things that work great for the propeller heads in the IT department don't necessarily transplant well when you move them out to clinical staff. We wanted user feedback," he said.
With the SSO appliance, a client is loaded on each of the hospital's workstations and made active on those where users are likely to need access to multiple applications throughout the day. (However, it is not active on all of them, Christian said. "It does not make sense if you have someone, for example, in accounting who is going to use one application all day long. The security built in to that application is sufficient.") According to the Imprivata website, the administrator console provides a Web-based interface that makes SSO easy to install, configure and deploy. Users can log on to applications as always. The system creates unique strong passwords behind the scenes to ensure compliance and patient data privacy.
|
||||
|
|
|||
|
||||
One lesson learned in the month-long trial was to keep the look and feel of single sign-on solutions simple, especially for users who might log on to multiple applications during the workday.
"We were trying to be a little bit too flexible at first. You can leave the workstation in a variety of ways when you sign off, and it was creating frustration with our physicians. We are all creatures of habit. If they are walking up to eight, nine, 10 workstations in a given day, and they are all a different state, even though they are secure, it causes confusion."
"We re-implemented it and took away the choices," he said.
Christian said he did not do a formal ROI for what was essentially a must-have tool that, in his setting, can save lives if it helps busy physicians and nurses log on faster; the SSO solution has reduced help desk calls for passwords. Another form of ROI is hiring nurses who are already familiar with it. Good Samaritan exports its clinical applications, including SSO, to the nursing program at the local university. "When they walk in the door, they know how to use it, which helps with out training costs," he said.
|  | ||||||||||||||||
| |||||||||||||||||
"We have had employees who left under less-than-friendly conditions. We're a healthcare organization. We take a dim view of people who look at things they shouldn't have looked at," Christian said.
In addition to worrying about people inappropriately accessing patient medical records, IT must keep vigilant watch for people who want to steal patient identities for financial gain. The SSO appliance generates audit trails, allowing IT to track who logs into what -- a point Christian makes clear during his orientations for new hires.
"I basically tell them Big Brother lives and breathes at Good Samaritan hospital and he is standing right in front of them. I explain that I have audit trails on every one of the systems, and I can tell what they looked at, how long they looked at it and from there they looked at it," Christian said. "The last person they want to see walk in their director's office is me with the audit logs, because they next person they're going to see are the folks in HR, as they are being processed out of the building."
Let us know what you think about the story; email: Linda Tucci, Senior News Writer
This was first published in March 2009