®

IGA capabilities
for Epic integration
Seamlessly connect and manage healthcare system
identities and access policies with Epic integration

Overview
One Identity Manager’s integration with Epic gives
customers identity access governance solutions
that ensure controls are in place to meet the everstringent security and compliance requirements
around Epic user accounts and access to sensitive
applications.
One Identity Manager Epic health care systemmodule provides the ability to connect to Epic
health care systems and help manage the healthcare system identities and their access policies
from One Identity Manager. Identity and accessgovernance processes such as attesting, identityauditing, user account management and system
entitlements, IT Shop and report subscriptions
can be used for Epic health care systems. The
integration provides a one-stop shop for managing
Epic health care identities and their access policies
while ensuring a strong identity governance.
This integration streamlines administrative
tasks typically performed manually by Epic
administrators. It efficiently handles tasks including
EMP and SER user lifecycle management, templateassignments and Epic attribute management.
Furthermore, the connector fully supports
features available through the Epic API, enhancing
operational efficiency. This consolidation offunctionalities not only reduces administration
costs but also enhances access control, ensuring
better governance.

Benefits• Enable healthcare organizations
to seamlessly integrate
Epic into IGA lifecycle• Enhance Epic with Identity
Manager governance platform forcompliance and security controls• Reduce IT costs with automatedchanges to access rights in Epic

Through One Identity Epic integration, healthcare
institutions can prioritize securely and efficiently
managing access to protected health information.

Features
User synchronization• Facilitates the synchronization of Epic EMP andSER records sourced from Epic, establishingseamless links to individual identities.

One Identity
Manager

User provisioning• Automatically generates Epic EMP andSER records within the Epic system,
employing birthright access and role-based
entitlements and attributes determinedby predefined business logic.
• Manages automated provisioning of new Epicuser accounts, updating existing accounts anddisabling accounts when a person no longer
needs access after leaving or changing roles.

Entitlement assignment• Entitlement for Epic EMP accounts include EMP
tyemplates and subtemplates. Efficiently assigns
EMP templates and subtemplates to departments,locations, cost centers or business roles, enabling
dynamic and streamlined allocation to identities.

Security matrix• Facilitates seamless maintenance of EMP
templates and sub templates assignments
for Epic user accounts through a userfriendly table interface, directly mapped toorganizational data or business roles.
• Epic user accounts can effortlessly inherit
EMP templates and sub templates froma security matrix, leveraging mapped
properties between the identity and thematrix for streamlined management.

SOAPWeb Service

EMP(employees)

ImportDataAPI

SER(providers)

Epic architecture

About One Identity
One Identity delivers unified identity security
solutions that help customers strengthen theiroverall cybersecurity posture and protect thepeople, applications and data essential to business.
Our Unified Identity Security Platform brings
together best-in-class Identity Governance andAdministration (IGA), Access Management (AM),Privileged Access Management (PAM) and Active
Directory Management (ADMgmt) capabilities toenable organizations to shift from a fragmented
to a holistic approach to identity security. OneIdentity is trusted and proven on a global scale –managing more than 500 million identities for morethan 11,000 organizations worldwide. For more
information, visit www.oneidentity.com.

SER• Build SER records based on SER blueprints
or SER templates (custom approach).
• SER blueprints and SER templates could
be assigned to departments, locations,cost centers or business roles enabling
dynamic and streamlined building ofSER records for the identities.
• Allows linking of EMP account to SER record.

© 2024 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. Datasheet-2024-Epic-OIDM-Connector-PG-90186®