Streamlining Kiosk Workflows & Reducing Password Usage


Overview

HITS is working to reduce the number of required application logins and improve the overall experience at Kiosks.

Across our clinics and hospitals, clinicians rely on shared computers—known as CoreImage Kiosk mode computers, or simply Kiosks—for patient care and daily operations. Currently, the login process requires entering UMICH credentials multiple times per session as each new application is opened.

Our ultimate goal is to streamline the use of Kiosks by reducing the total number of logins. After you unlock the computer, you'll only need to launch an authenticated Edge browser to access commonly used web-based applications. 

 

Current Challenges

Today, UMICH credentials are required to access multiple applications in the same session, even at computers with badge scanners. Entering the 15-character password many times per day is frustrating and disruptive to regular workflows. 

Known Issues Description
Separate Logins for Applications Besides MiChart, which uses passthrough authentication, clinicians must log in separately to other apps with their 15-character UMICH password.
Limited Badge Readers

Only 70% of Kiosks have badge readers. The rest require manual UMICH credential entry.

Frequent Logins
Many clinicians log in to multiple different workstations every day. 

Improvements In-Progress

To reduce login fatigue and boost workflow efficiency, HITS and Nursing Informatics are partnering to implement improvements to the Kiosk experience.

Improvements Description
Reducing # of Required Logins
We aim to enable access to at least 6 core applications and sites with a single password entry.
 
Applications and sites include: MiChart, Web Scheduler (ANSOS), Michigan Medicine Help Center (ServiceNow), Policy Stat, Paging website, and Microsoft 365, and RL6 (patient safety reporting).
Deploying More Badge Readers

125 additional card readers were installed to high-use workstations in October 2024.

Timeline & Goal

The targeted completion for all of these improvements is January 2025. Combatting login fatigue remains a priority and ongoing efforts are focused on ensuring seamless integration of existing systems.

 

Our goal is to enable you to do the following during a session at a kiosk workstation:

  • When using a badge reader, enter your credentials to unlock a Kiosk only at the beginning of your shift and once every four hours.
  • While using a Kiosk workstation, launch the authenticated Edge browser to access commonly used online applications. Credentials will passthrough on all enabled apps.

 

Timeline Expected Experience
Today
When using a tap-and-go badge scanner today, you should expect to enter your password only at the start of your shift and every 4 hours after. This is a security requirement and not expected to change.
 
January 2025

Once the authenticated browser is available, you should expect to: 

  • Tap your badge to unlock a Kiosk desktop and launch MiChart, entering your password at the beginning of a shift and once every 4 hours
  • Launch the authenticated Edge browser, which will open to SharePoint and automatically sign you in to your Microsoft account. You can also access additional applications without entering your password: Policystat, the full Microsoft 365 suite, ANSOS Staff Scheduler and Web Scheduler, RL6, and the paging website.