Skip to main content

​
Introduction

Oloid’s Windows Login – Healthcare application enables secure, fast, and passwordless access to shared clinical systems using physical identity factors such as Face, Badge, NFC, and PIN. This solution is purpose-built for healthcare environments such as hospitals, clinics, pharmacies, and labs where:
  • Multiple clinicians share workstations (e.g., nursing stations, EHR terminals)
  • Fast access to systems like EHR is critical
  • Compliance and auditability (HIPAA, etc.) are required
With Oloid’s passwordless authentication:
  • Users do not need to remember or enter passwords
  • Access is instantly revoked when a user leaves
  • Clinicians can quickly log in/out, reducing delays in patient care
  • Shared credentials are secured and controlled centrally

​
Prerequisites

Before setting up Windows Login (Healthcare), ensure:
  • You have access to the Tenant Admin Portal
  • Supervisor App is installed on the target device
  • Device meets Windows Login system requirements
  • Healthcare workflows (e.g., shared workstation, EHR access) are defined
  • Users are created in the system and mapped to roles/departments

​
Installation and Device Configuration

Step 1: Install Windows Login Healthcare Build.

​
Platform Configuration (Tenant Admin Portal)

​
Initial Setup

​
1. Set Up Application and Connection

  • Log in to Tenant Admin Portal
  • Navigate to Connections
  • Create a Windows Login connection for healthcare devices
  • Configure authentication flow (single-factor or multi-factor)

​
2. Assign Users to Connection

  • Create or import healthcare staff (doctors, nurses, pharmacists, etc.)
  • Assign users to the Windows Login connection
For more information, refer: Platform Configuration for Windows Login How to create and configure Windows Login application in the Tenant Admin Portal

​
3. Epic Configurations

  • Enable Epic SSO
  • Configure the Epic Subspace
  • Configure Re-authentication Workflow
For more information, refer: How to Configure Reauthentication Workflow for Epic EHR in Tenant Admin Portal Windows Login (Healthcare) - How to Enable Epic SSO in the Tenant Admin Portal Windows Login - How to Configure Badge Out option

​
Credential Setup

Credential configuration depends on clinical workflow and security requirements. Windows Login supports:
  • Single-factor authentication
    • Face
    • Badge
    • NFC
    • PIN
  • Multi-factor authentication
    • Badge + PIN
    • NFC + PIN
    • Face + PIN (for higher security areas)
Refer to Credential set up using Oloid Platform - Windows Login guide. The credential setup is also done using the Supervisor App. Refer to Credential Management - Supervisor App

​
Credential Types (Healthcare Use Cases)

​
Individual Credentials

  • Individual Domain credentials (for personalized login)
  • Individual Local credentials

​
Shared Credentials (Common in Healthcare)

  • Shared Domain credentials (e.g., nurse station login)
  • Shared Local credentials
These are ideal for:
  • Shared workstations in ICU, ER, pharmacy counters
  • Quick shift-based access
For more information, refer:

​
Using Windows Login (Healthcare) with Epic

Healthcare professionals can log in quickly using different authentication methods:

​
Using User Switch and Sign Out using Badge Out

The Switch User workflow in Epic Hyperspace enables secure session transfer on shared Windows devices. For more information, refer:

​
Reauthentication Workflows

The Reauthentication Workflow allows additional authentication during an active Windows session for applications integrated with Epic EHR. This ensures that user identity is re-verified before performing sensitive actions or continuing access. For more information, refer: