UHMB had been a long-standing customer of ITHealth, as well as users of Imprivata OneSign for many years. To improve the Trust’s shared device management efforts and minimise IT burden, ITHealth introduced the Trust to automated provisioning from Imprivata GroundControl.
UHMB liked how with Imprivata GroundControl users can leverage a badge-tap workflow for streamlined access to secured devices and that the devices could be allocated on a ‘per shift basis’. Additionally, with close integration of its MDM and Imprivata OneSign solutions, UHMB saw how it would be possible to image devices specifically for each user and eradicate manual authentication into individual applications.
UHMB chose to implement Imprivata GroundControl with iPhone 11s, initially rolling out 10 docking stations with approximately 200 iPhones. Paul Lewis, Server and Desktop Infrastructure Specialist at the Trust describes it as ‘simple, tidy set-up’. Each designated area on a ward has an Imprivata GroundControl charge and sync station with 20 x mini lightening cables, up to 20 x iPhone 11s, and a proximity reader for the tap-on/tap-off feature. Behind the docking station sits an SFF (Small Form Factor) Windows 10 PC – with no keyboard, mouse or monitor being required.
According to Paul, device check-out is an easy process that ‘takes less than 10 seconds’. The user goes through a one-time enrolment to match their Active Directory account against their NHS smartcard. At the start of each shift, the user then simply taps their smartcard against the Imprivata GroundControl proximity reader which checks the user details against the Imprivata OneSign appliance – to verify that the smartcard has been enrolled for the user. If it hasn’t, the reader bleeps and alerts IT that a user is trying to check-out a device which may not be configured for them and so the user is directed back to enrolment. If Imprivata OneSign recognises and verifies the user, the request is passed to Imprivata GroundControl to check out an optimal device (in terms of battery life and device health) which is then identified to the user in the form of first name and surname on the device’s screen.
The assigned iPhone has all the apps the clinician needs pre-installed and automatically connects to the Trust’s secure wi-fi-network. The device is checked out to the clinician for a maximum of 7 days (a time period set specifically by UHMB). Another device can’t be checked out by the user until the previous device is returned. Once a device is checked back in, UHMB have triggered a full device swipe to occur, so each device is completely re-configured for the next person to check-out again.
Additionally, UHMB has an in-house team of developers who can create Apps to distribute to devices (without the need for Apple ID, Google Play, etc). The Trust has developed an in-house app to work with Imprivata GroundControl that allows staff to assign a task or ‘bleep’ to a clinician if they’re on a shift. The task will come through to the iPhone in the form of a push notification which can then be dealt with.