Imprivate, a leading company in Access Management solutions for healthcare and other critical sectors, presented the solution Agentic Identity Management, designed to manage and protect the access of autonomous AI agents to organizational systems, including in the healthcare world.
As healthcare facilities adopt Agentic AI to support clinicians and automate administrative and operational workflows, they face a growing challenge: ensuring that AI agents can access systems while maintaining rigorous healthcare-specific governance, compliance and security requirements.
Imprivata is uniquely positioned to address this challenge, with decades of experience managing access and identity and enabling efficient and secure workflows in thousands of hospitals and healthcare organizations globally. The company has now extended its recognized Access Management platform to securely integrate AI agents into both modern systems and legacy infrastructures, allowing organizations to benefit from the productivity benefits of AI without impacting existing operations.
“The healthcare sector is entering the era of agentic AI, technologies capable of taking on part of the tasks, helping healthcare professionals manage growing workloads and supporting facilities to provide better care to patients,” said Fran Rosch, CEO of Imprivata. “Imprivata enables these agents to operate at both a clinical and operational level, ensuring that every action is safe, verifiable and compliant with healthcare regulations.”
Enable AI productivity while staying in control
AI agents are increasingly being used to assist staff with tasks such as clinical documentation, patient triage, care coordination and prescription management. These technologies can dramatically reduce administrative burden and improve clinical outcomes by freeing healthcare professionals from manual processes, allowing them to focus on direct patient care. However, with the increase in complexity and regulatory relevance of the tasks entrusted to AI agents, organizations must at the same time guarantee adequate personnel supervision in decision-making processes and subject agents to the same Identity & Access Management controls envisaged for human users.
Imprivata's Agentic Identity Management capabilities govern AI agents as managed identities within the organization's identity and security framework. Through agent authentication, the application of the principle of least privilege and real-time activity monitoring, Imprivata allows healthcare organizations to deploy AI agents securely, increasing the productivity of doctors, without sacrificing the necessary human supervision and traceability of activities.
Because Imprivata already protects access in a wide variety of healthcare environments, the platform can enable secure access for AI agents to EHRs, clinical systems and legacy infrastructures that are often difficult to integrate with other Access Management and Identity Security solutions. This allows healthcare organizations to adopt AI agents quickly while maintaining tight access control.
Manage AI-specific security risks in healthcare
Healthcare environments present particularly complex governance challenges in the adoption of AI: stringent regulatory requirements, safeguarding patient safety and the need for operational continuity of systems. Furthermore, recent studies have demonstrated how AI systems can be manipulated through prompt injection attacks, generating malicious or unauthorized actions. In the absence of structured management, AI agents could introduce critical risks, including:
- Threats to patient health resulting from corrupted or manipulated clinical data;
- Operational disruption due to uncontrolled automation in planning, pharmacy or laboratory management systems;
- Financial fraud or breaches of privacy of protected health information (PHI).
The solution Agentic Identity Management Imprivata extends its established identity security model to AI-driven systems, enabling organizations to securely adopt AI agents while maintaining visibility and control over how they interact with critical infrastructure. In particular, organizations can:
- Configure AI agents as managed identities, with defined roles and access permissions;
- Establish secure connections using short-expiring tokens to protect credentials
- Maintain a register of authorized agents and detect unregistered agents
- Monitor and verify the activity of agents in the various systems
- Revoke or limit access to the real-time agent when necessary
- Apply the principle of least privilege access in both modern and legacy healthcare systems
With a Zero Trust approach, privileged access control and continuous monitoring of AI agents, Imprivata helps the healthcare sector integrate artificial intelligence quickly and securely, while ensuring patient safety, system integrity and regulatory compliance.
“Our goal is to help the healthcare industry unlock the benefits of AI without introducing new risks“, added the CEO of Imprivata. “By governing AI agents with the same logic with which we manage human identities, and keeping clinicians actively involved, we enable organizations to adopt AI safely across the entire structureJean Pierre Abbadia, Regional Director South EMEA di Arrow
