Sykehuspartner HF Creates Vibrant Employee Portals

Challenge

The Trusts within the authority lacked a Single Sign-On (SSO) solution. Sykehuspartner needed a way to exchange identity information across organizational boundaries without relying on proprietary protocols like Kerberos or establishing complex domain trusts. The solution had to be agile, scalable, and capable of loosely coupling PKI infrastructures between various Identity Providers (IdP) and Service Providers (SP) involved in the regional healthcare network.

Solution

Sykehuspartner installed PingFederate as its central federation server, operating in both IdP and SP modes depending on the specific use case. The system integrates with Microsoft Active Directory and Quest Identity Manager. While the initial architectural planning took several months to ensure rigorous security risk and vulnerability assessments, the actual implementation of the production environment was completed in just a few days.

Results

The introduction of SSO has simplified the workday for healthcare personnel by reducing the number of required logons. PingFederate currently secures nearly a dozen critical applications, including Office 365, Oracle EBS, and a custom Birth Registration service for reporting to Norwegian authorities. The organization saw a significant drop in support tickets for its planning portal, and the technical team was able to integrate new e-learning services into the infrastructure in a single day.