Enterprise Access Management package options
Secure, frictionless access delivered through modular licensing that is rational and value-driven.
Enterprise Access Management, built to fit how you work
EAM is packaged around a strong foundation with flexible add-on modules, so you can optimize licensing and workflows for only what your organization needs, whether that is shared device support, passwordless authentication, or risk-based access. Additionally, we offer modules to meet the unique needs of healthcare professionals. Choose and grow your capabilities based on your strategy and needs.
Core Access
The foundation of Enterprise Access Management, delivering secure single sign-on, directory and identity sync (e.g., sync to Active Directory, Entra ID) across applications and environments. Includes identity analytics to identify cost savings and improve security posture.
Key points:
- Badge, fingerprint, smart card, username/password
- SAML, OIDC, API-based SSO
- Identity analytics
- Application Profile Generator (legacy apps)
- Identity sync (AD, Entra ID)
- Analytics and reporting
*Core Access is required for all EAM deployments
Shared Device Access
Shared or frontline environments typically require Shared Device Access.
Key points:
- Shared workstation and kiosk access (Windows and macOS)
- Fast user switching
- Secure walkaway
- Pull-printing
* Requires Core Access
Advanced and Passwordless Access (APA)
Reduces reliance on passwords while strengthening security through context-aware authentication that adapts to user behavior and risk.
Top features:
- Passwordless authentication: Biometrics, FIDO2 passkeys, mobile push
- Identity threat detection**
- Adaptive and Risk-based Authentication**
- Risk mitigation and response**
- VPNs and gateway integrations
- VPN-less remote access**
- Remote access workflows
- Self-service password reset
- Helpdesk verification**
Note: features with ** are on our product roadmap and are provided for informational purposes only to give you visibility into our strategic direction. Purchasing decisions should be made solely on the features and functionality available today and not in reliance on these statements.
* Requires Core Access
Secure Workspace Access
One-tap access to virtualized environments, native thin and zero client operating systems, and secure browsers for faster access, seamless roaming, consistent security
Top features:
- Single sign-on and integration with leading VDI vendors
- Single sign-on and integration with leading Secure Enterprise Browsers
- Session roaming for fast user switching
- Native support for thin and zero client support
* Requires Core Access and Shared Device Access
Clinical Workflows Plus
Who it’s for: Healthcare clinicians
Short description: Streamlined EHR workflows to remove manual reauthentication steps inside the EHR and connected devices for faster care delivery, reduced disruption, and improved compliance.
Top features:
- EHR re-authentication
- Witness signing
- Epic Narrator and Monitor
- Authentication for leading medical devices
* Requires Core Access and Shared Device Access
EPCS Plus
Who it’s for: Prescribing clinicians
Fast, simple, DEA-compliant prescribing from any device or location. Meet federal and state EPCS requirements directly within the EHR for compliance, clinician efficiency, and audit readiness.
Top features:
- Desktop and mobile EPCS workflows
- Hands-free and biometric authentication
- Offline fallback for uninterrupted prescribing
- Compliance and audit reporting
- Includes all features of Clinical Workflows Plus
* Requires Core Access and APA
National Access (for national healthcare systems in UK and France)
Who it’s for: UK NHS organizations and France Pro Sante organizations
Eliminate smartcard friction while meeting National Healthcare System (NHS) security and governance requirements for faster access, fewer workarounds, and improved compliance.
Top features:
- National Access SSO
- Virtual smartcard access to the NHS Spine (UK)
- Detailed Spine usage reporting
- Access for Pro Santé Connect** (France)
Note: features with ** are on our product roadmap and are provided for informational purposes only to give you visibility into our strategic direction. Purchasing decisions should be made solely on the features and functionality available today and not in reliance on these statements.
* Requires Core Access and Shared Device Access
Scenarios
Frequently asked questions
Skip list contentWhat is the new EAM packaging model?
Do all users need Core Access?
How do I know which add-on modules I need?
How does this packaging model support future growth?
How do existing customers migrate to the new EAM packaging and licensing model?
