Managing portals

Managing OHID provider portals involves using the Aikyam Identity Console to control access, configure authentication, and enforce security policies for applications serving providers, brokers, and employers. Administrators sign in with MSID or OHID credentials and work within assigned roles such as Super Admin or Application Owner.

The process begins by registering portals in the console, where you configure OIDC or SAML authentication, define callback URLs, and apply branding. Security is central to portal management—MFA methods like phone verification, TOTP, and passkeys must be enabled, password policies maintained, and COPPA compliance ensured. Administrators also manage client secrets through regular rotation, provision and deactivate users, and assign roles to maintain least-privilege access. Continuous auditing and governance are essential to monitor activity, validate configurations, and align with HIPAA and enterprise standards.

In short, managing OHID portals is about combining strong identity controls with operational oversight to deliver secure, compliant, and user-friendly access for all provider-facing applications.