Last update:
Application lifecycle management overview
Aug 21, 2026
Application lifecycle management refers to the end-to-end process of registering an application, and configuring its authentication and authorization settings, while managing access, and governance policies throughout its lifecycle using the Aikyam Identity Console.
Overview
Aikyam Identity Console enables administrators and business advocates to govern the application’s identity footprint, enforce security policies, and deliver tailored user experiences across the application’s lifespan, without requiring in-depth technical expertise or coding skills.Tenants
The identity infrastructure supports multiple tenants to meet the needs of distinct user groups. This overview focuses on two primary tenants: HealthSafe ID (HSID) for B2C applications, and One Healthcare ID (OHID) for B2B applications.
OHID tenant One Healthcare ID
OHID tenant One Healthcare ID (OHID) is a secure, centralized identity management solution for B2B applications that allows users to use a single sign-on for any applications connected to One Healthcare ID. They simply register for a One Healthcare ID once and then use it to seamlessly access any associated applications.
HealthSafe ID (HSID)
HSID tenant HealthSafe ID is an updated, secure way for B2C users to sign in to their HSID accounts. It lets them choose a unique email address as their username and use one password to access nearly all their health benefits information. HSID account types HSID supports three types of accounts:
- HSID matched account: This account type is associated with EiMP1 (Enterprise Individual Mastering Platform) Golden Record (GR). It is used when the portal needs to authorize the HSID account holder to access their application (also known as the “member experience”) by leveraging EiMP Golden Record identity data and portal-owned authorization data.
- HSID unmatched account: This account type has no association with any EiMP GR. It is used when the portal does not need to authorize the HSID account holder.
- HSID hybrid account: The hybrid experience allows individuals to create either member or guest identities within the digital platform. Users can choose to register without an identification number by selecting the “Skip for now” option, which enables them to register as a ‘Guest’ with limited access and features.
Sign-in behavior based on account type
Let us explore how sign-in behavior varies based on account type.
- Matched registration portal
When an HSID unmatched account attempts to sign in to a portal configured for matched registration, the system presents a “step-up” page. This page prompts the user to input their EiMP Golden Record identifier, effectively converting the unmatched account into a matched account before granting access to the portal.
- Hybrid registration portal
In a hybrid configuration, the same “step-up” page is displayed. However, users are given the option to skip this step—mirroring the behavior available during the initial registration process. This allows users to proceed as guests with limited access, while still offering a path to full account matching if desired.
Note: The selection of the appropriate HSID account configuration, Matched, Unmatched, or Hybrid, should be evaluated and finalized during the portal onboarding process. This decision has a direct and significant impact on the user experience during both sign-in and registration workflows.
Previous:
Delegate access to app advocates
Next:
Standard workflow
Share additional feedback to help us improve.
0/255
|
Powered by Aikyam @2025 All rights reserved
+1 866 451 2735
+1 866 451 2735
+1 855 819 5909