Many organizations have outsourced their IT and OT to external service providers. Generic parts of the infrastructure such as the network and workplaces, as well as components such as process automation, have been invested with third parties when it comes to maintenance. Appropriate measures are required to control the work carried out by external service providers.

Healthcare organizations often work with a dynamic schedule; on the same day, an employee at two care locations may have to work with another group of clients. In addition, healthcare has a higher than average deployment of self-employed workers and the information that healthcare workers work with is highly sensitive to privacy. These properties make Healthcare a domain with specific requirements for the lifecycle of identities and access control to applications and information.