Federated Privileged Identity Management for Break-the-Glass: A Case Study with OpenAM

As next generation health monitoring and Ambient Assisted Living applications are opening up towards a variety of stakeholders and platforms, enforcing secure and reliable access to patient data by authorized users − anytime and anywhere − is paramount. However, static access control policies do not offer the flexibility to deal with unanticipated emergency situations where access to patient information is essential. In this paper, we discuss privileged identity management and share our experience obtained in a case study using OpenAM − a state-of-the-art open source federated identity and access management solution − for the implementation of a reusable policy for break-the-glass procedures in federated healthcare services.