A healthcare provider is implementing a new patient management system. They need to ensure that patient records are only accessible to medical staff directly involved in the patient's care, and that access is automatically revoked when a staff member leaves their role or the organization. Which identity concept best supports these requirements?
- AFederated Identity
- BIdentity Governance
- CSingle Sign-On (SSO)
- DManaged Identities
Show answer & explanationAnswer & explanation
Correct answer: B. Identity Governance
Identity Governance is about managing the entire lifecycle of digital identities and their access rights, ensuring that access is granted, maintained, and revoked appropriately. The scenario's focus on ensuring 'only accessible to medical staff directly involved' and 'access is automatically revoked' strongly aligns with the principles of Identity Governance, which includes access reviews, entitlement management, and lifecycle workflows.
Why the other options are wrong
- A. Federated Identity allows users from one domain to access resources in another, not directly related to access lifecycle management.
- C. SSO simplifies user authentication across multiple applications, but doesn't manage the underlying access rights lifecycle.
- D. Managed Identities are for Azure resources to authenticate to services, not for human user access management.
Identity Governance
A framework that helps organizations manage digital identities and access rights across various systems, ensuring compliance, security, and efficiency throughout the identity lifecycle.
- Manages identity lifecycle: provisioning, de-provisioning, updates.
- Includes access reviews, entitlement management, and privileged access management.
- Ensures compliance and minimizes access risk.
Memory trick: Identity Governance is like a meticulous gardener, making sure every plant (user) has exactly what it needs, and removing weeds (unnecessary access) promptly.