Access can be approved in the IGA or removed from the IdP while the account inside a departmental, vendor, or clinical-adjacent application remains unchanged. Tickets and local administration add delay and make completion harder to verify.
Create, update, and disable accounts for employees, contractors, affiliates, and other approved populations in selected applications.
Send completion, target state, user and role data, and exceptions back to existing governance and access-review workflows.
Start with a bounded application set, define owners and stop conditions, and keep core clinical and patient-safety decisions in the approved architecture.