EPSM Morbihan
Profile• Hospital founded in 1880.
• Covers an area of330,000 inhabitants.
• Capacity for 1000
patients.
Users• 1300 IT users.
• 20 applications.
• 700 PCs with Citrix
XenApp.

A psychiatric hospital maintains the confidentiality of patient records.
Ensure safe mobility of clinicians
The primary mission of EPSM (Public Institution of Mental Health) in Morbihan, France, is toprovide psychiatric care for children, adults and seniors. It combines a number of health andsocial facilities for consultation, medical care and accommodation. Besides its main hospital site
in the city of Saint-Avé, EPSM Morbihan manages 40 decentralized consultation sites psychological, medical and day hospital centers that facilitate the social reintegration ofpatients.

Challenges

To treat and manage patients, doctors and nurses are required to walk frequently around manybuildings and sites in the main hospital. EPSM Morbihan has therefore deployed a Citrix-based
virtualized architecture to realize substantial savings on IT investment and enable healthprofessionals to access medical applications everywhere. Via simple terminals, doctors andnurses use 20 medical applications, including patient record management.

• Strong authentication
access.
• Use professional smart
card for login.
• Single sign-on toapplications.

But are clinicians really mobile if they have to enter passwords whenever they access thestations and launch applications? This lost time penalizes their relationship with patients, most ofwhom require constant attention. EPSM Morbihan therefore decided to strengthen security
while eliminating the constraints of passwords, using instead France's CPS healthcare
professional smart card for authentication.

BenefitsIncreasing time spent with patients• Increased confidentiality ofpatient records.
• Procedures simplified andsecured on kiosk PCs.
• Strong reductionof help-desk calls.

EPSM Morbihan selected Evidian Enterprise SSO for its compatibility with the national healthprofessional smart card and its many features specially adapted to hospital activity (kioskmode, roaming sessions, delegation...) Enterprise SSO is coupled with Evidian's directorysynchronization utility, resulting in an end-to-end security solution: from the registration of a userand her access rights to strong authentication on kiosk PCs.
"Ensuring patient access to care is a major requirement for our institution, as well as privacy,"says Claude Salomon, head of information system of the EPSM Morbihan. "We chose Evidianfor its integrated solution, which provides identity management, connects to our identity
repositories and forward individual roles to applications by validating users' access rights."

Case study > Healthcare

www.evidian.com

Facilitating the job of clinicians
It was important for EPSM Morbihan’s staff to spend as little time as possible on purely
technical aspects and focus on how the solution was to be used. The Evidian solution natively
takes into account kiosk stations, roaming sessions, the CPS smart card, Citrix environments andtypical medical applications. Therefore, the project was able to focus on the needs of clinicians.
"The Evidian solution brings us
substantial benefits on a daily
basis. Security is ensured withstrong authentication andname-based access to kiosk
sessions.
Clinicians have quickly
adopted the system. Their work
is made easier by the roaming
session and SSO access toapplications, so they have moretime to dedicate to theirpatients. "Claude Salomon,
Head of Information System,EPSM Morbihan.

"With Evidian, we chose a non-intrusive solution. We are not a development center and don't
want to modify applications from public and private publishers" says Claude Salomon.
Traditionally in psychiatric care units, clinicians share a workstation in a nurses' office. This
workstation is therefore used as a kiosk, and individual sessions are usually very short typically 5 to 10 minutes. During these sessions, a nurse will write comments on the patient andleave monitoring instructions. After this brief session, another nurse takes the place of his or hercolleague. When nurses have completed their tasks, they remove their smart card and the next
user inserts his or her own smart card and is rapidly presented with his or her own environment.
Data confidentiality is preserved by inserting and removing the smart card from the reader.
"Evidian allows us to manage all our use cases. For instance, clinicians share desktops in kioskmode - most of them do not have an office of their own. A nurse may be required to work in acommon office, a pharmacy or even a doctor's office in his or her absence - roaming sessions
are fundamental to us. So we wanted to enable mobile work: when clinicians move around incare units, they are followed by their work environment" says Claude Salomon.

Enhanced security
The project made it possible for EPSM to streamline its security policy. While clinicianspreviously logged into generic sessions, the solution now links every login to a clearly
identified health professional.
"Each smart card is linked to an individual. The Evidian solution maintains a genuinely
comprehensive identity repository from human resources data. It includes health professionals
employed in the hospital, but also nursing students, interns, trainees or suppliers" says Claude
Salomon. "Every time a card is assigned to an individual, the Evidian ID Synchronization
tool updates our LDAP identity repository. And when the person leaves, he or she vanishes fromthe directory and can no longer access EPSM Morbihan’s information system."

39 A2 83LV 03

For the 6 people in the IT department, the project has significantly reduced the number of calls
due to password loss. While users previously needed to remember up to three passwords, they
now only need a PIN code. And when they lose their card or forget their PIN code, a simple
procedure allows them to obtain a temporary password to perform their work.

© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service marks, trademarks and other names mentioned in this document areproprietary to their respective owners and are protected by applicable trademark and copyright laws. Evidian reserves the right to modify the characteristics of its products
without prior notice.