Integration of HelseID with Third-Party Role Assignments Data

Abstract

The Norwegian healthcare sector is vast, with a substantial number of organizations employing plenty of people, and thereof, 7,300 are customers of Norsk Helsenett. Maintaining and keeping up-to-date information about access rights for these customers is a difficult, time-consuming, and manual task, especially since organizations often change personnel without notifying the system administrators. The task is worsened since the access rights are often tied to an account using username and password as login credentials, which are easy to forget in the midst of many other login credentials.

This thesis proposes a proof of concept system for solving these problems. The proof of concept system utilizes HelseID, a unified login solution designed for health care personnel, offering authentication through known identity providers. Further, Altinn, a trusted third-party state enterprise, offers an API for service owners to extract information about organizational roles. The system acquires role assignments data from Altinn and delegates it to users when they are authenticated. The main goal is to automatically and dynamically keep information about access rights up-to-date, alleviate the task from system administrators, and make login simpler for the end-user by using a login solution they are familiar with.