Compliance and sectors
IAM in healthcare: access that follows employment, under NEN 7510
IAM in healthcare makes sure permanent staff, flexible workers and people with several contracts get exactly the access their job requires, with evidence under NEN 7510. KoppelHet does this with Joinly, which connects HR systems such as AFAS, Visma Raet YouForce and BCS to Microsoft 365 and care applications such as Nedap ONS.
What it is
Care has three added difficulties: high turnover, often several contracts per person and access to special categories of personal data. Shared ward logins make it impossible to show who did what.
NEN 7510 asks for segregation of duties, access based on job and periodic review. Care is also a designated sector under NIS2.
How Joinly handles it
- An account is ready for the first shift and closes after the last one.
- With two contracts Joinly recognises the same person, determines the primary contract and manager and gives one account with the permissions of both jobs.
- Roles on job, department and location decide who may access the care record.
- For Nedap ONS Joinly has a direct connector. Other care applications connect through SCIM, the API or the SCIM Gateway.
- Flexible workers, interns and externals get a mandatory end date.
- Segregation of duties and access review as standard controls, with an audit log per change.
- Personal accounts with a role replace shared logins.
What KoppelHet does
In care KoppelHet also connects Nedap ONS, for example AFAS to Nedap ONS and Nedap ONS to Active Directory and Entra ID.
Joinly
Continue at Joinly
Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.
Common integrations
Nedap ONS → Microsoft Entra ID
Nedap ONS to Entra ID integration: Microsoft accounts and team groups for care staff
Nedap ONS → Active Directory
Nedap ONS to Active Directory integration: accounts per care location, automatically
Visma Raet YouForce → Microsoft Entra ID
YouForce to Entra ID integration: Microsoft accounts and managers from Visma Raet
Frequently asked questions
How does Joinly handle someone with two contracts?
Joinly recognises it is the same person, determines the primary contract and manager, and gives one account with the permissions of both jobs. If one contract ends, only those permissions go.
What happens to a flexible worker after the last shift?
A flexible worker gets a mandatory end date. After that the account is deactivated automatically, sessions are revoked and licences released. Extension is possible with approval.
How does this help with NEN 7510?
NEN 7510 asks for segregation of duties, access based on job and periodic review. Joinly provides segregation of duties as a standard control, roles on HR attributes, an access review and an audit log per change.
More on Identity and access management
Identity and access management: the overview
Lifecycle
Roles and governance
Integrations
- HR as the sourceThe HR system decides who gets an account, with which data.
- Microsoft Entra IDAccounts, groups and licences in Entra ID from HR.
- Active DirectoryOn-premises AD and hybrid Exchange through an agent without an open port.
- Application provisioningAccounts and roles in your business applications, from HR.
- SCIM and SCIM GatewayThe provisioning standard, also for applications without SCIM.
Compliance and sectors
- NIS2 and the Dutch Cyber Security ActWhat the duty of care asks of access management, and what it does not.
- IAM in educationSchool board staff, ready for the IBP standards framework.
- IAM in governmentMunicipalities, provinces and water boards, with BIO and ENSIA.
- IAM in healthcareFlexible staff, multiple contracts and NEN 7510.