Saptarshi Purkayastha1, Judy W Gichoya, Siva Abhishek Addepally. 1. Saptarshi Purkayastha, PhD, Assistant Professor, Department of BioHealth Informatics, School of Informatics and Computing, Indiana University Purdue University Indianapolis, 719 Indiana Avenue, WK 119, Indianapolis, IN 46202., Email: saptpurk@iupui.edu, Phone: 317-274-0439.
Abstract
BACKGROUND: Multiple specialized electronic medical systems are utilized in the health enterprise. Each of these systems has their own user management, authentication and authorization process, which makes it a complex web for navigation and use without a coherent process workflow. Users often have to remember multiple passwords, login/logout between systems that disrupt their clinical workflow. Challenges exist in managing permissions for various cadres of health care providers. OBJECTIVES: This case report describes our experience of implementing a single sign-on system, used between an electronic medical records system and a learning management system at a large academic institution with an informatics department responsible for student education and a medical school affiliated with a hospital system caring for patients and conducting research. METHODS: At our institution, we use OpenMRS for research registry tracking of interventional radiology patients as well as to provide access to medical records to students studying health informatics. To provide authentication across different users of the system with different permissions, we developed a Central Authentication Service (CAS) module for OpenMRS, released under the Mozilla Public License and deployed it for single sign-on across the academic enterprise. The module has been in implementation since August 2015 to present, and we assessed usability of the registry and education system before and after implementation of the CAS module. 54 students and 3 researchers were interviewed. RESULTS: The module authenticates users with appropriate privileges in the medical records system, providing secure access with minimal disruption to their workflow. No passwords requests were sent and users reported ease of use, with streamlined workflow. CONCLUSIONS: The project demonstrates that enterprise-wide single sign-on systems should be used in healthcare to reduce complexity like "password hell", improve usability and user navigation. We plan to extend this to work with other systems used in the health care enterprise.
BACKGROUND: Multiple specialized electronic medical systems are utilized in the health enterprise. Each of these systems has their own user management, authentication and authorization process, which makes it a complex web for navigation and use without a coherent process workflow. Users often have to remember multiple passwords, login/logout between systems that disrupt their clinical workflow. Challenges exist in managing permissions for various cadres of health care providers. OBJECTIVES: This case report describes our experience of implementing a single sign-on system, used between an electronic medical records system and a learning management system at a large academic institution with an informatics department responsible for student education and a medical school affiliated with a hospital system caring for patients and conducting research. METHODS: At our institution, we use OpenMRS for research registry tracking of interventional radiology patients as well as to provide access to medical records to students studying health informatics. To provide authentication across different users of the system with different permissions, we developed a Central Authentication Service (CAS) module for OpenMRS, released under the Mozilla Public License and deployed it for single sign-on across the academic enterprise. The module has been in implementation since August 2015 to present, and we assessed usability of the registry and education system before and after implementation of the CAS module. 54 students and 3 researchers were interviewed. RESULTS: The module authenticates users with appropriate privileges in the medical records system, providing secure access with minimal disruption to their workflow. No passwords requests were sent and users reported ease of use, with streamlined workflow. CONCLUSIONS: The project demonstrates that enterprise-wide single sign-on systems should be used in healthcare to reduce complexity like "password hell", improve usability and user navigation. We plan to extend this to work with other systems used in the health care enterprise.
Entities:
Keywords:
CAS; Central Authentication System; Integrated information systems; SAML; Security Assertion Markup Language; educational needs; electronic health records; single sign-on
Authors: Kai Zheng; Hilary M Haftel; Ronald B Hirschl; Michael O'Reilly; David A Hanauer Journal: J Am Med Inform Assoc Date: 2010 Jul-Aug Impact factor: 4.497
Authors: Ashish K Jha; Catherine M DesRoches; Eric G Campbell; Karen Donelan; Sowmya R Rao; Timothy G Ferris; Alexandra Shields; Sara Rosenbaum; David Blumenthal Journal: N Engl J Med Date: 2009-03-25 Impact factor: 91.245
Authors: Julie Gandrup; Syed Mustafa Ali; John McBeth; Sabine N van der Veer; William G Dixon Journal: J Am Med Inform Assoc Date: 2020-11-01 Impact factor: 4.497