UW Medicine Account IAM Audit

The annual Identity and Access Management (IAM) Access Certification Audit is scheduled to begin on January 16, 2024.
This audit of UW Medicine user accounts is a critical component in preserving the security of our business and clinical systems, and ensuring compliance with state and federal regulations.

Please refer to the Access Certification Guide for step-by-step instructions on using the Access Certification tool in SailPoint to complete your audit.

Frequently Asked Questions

What is Identity and Access Management (IAM)?

Identity and Access Management (IAM) is one of the many IT services delivered to UW Medicine and its affiliates. The IAM department provides UW Medicine (AMC) account administration and support, and manages access to protected information within UW Medicine’s business and clinical systems. IAM solutions make it possible to verify and manage identities, detect suspicious activity, and report incidents; all of which are necessary for meeting compliance and regulatory requirements.

Is iamaudit@uw.edu a legitimate UW Medicine email address?

Yes, IAM has a dedicated email address specifically for audit work performed by Identity and Access Management. Please add iamaudit@uw.edu to your email address book of safe email recipients so you do not miss any future correspondence.

Why am I receiving this?

You are receiving this audit request because you are listed as an approval contact for one or more active UW Medicine user accounts which have been included in this year's audit. To remain compliant, the status of all UW Medicine accounts must be routinely validated by their approver.

What is this for?

The purpose of this audit is to verify UW Medicine account user status, access approval and duration of access (if applicable) for compliance purposes (see UW Medicine Information Security Policies). The audit is performed to protect our business applications and clinical systems from unauthorized access.

I am no longer associated with UW Medicine. What should I do with this?

If you are no longer associated with UW Medicine, you are not required to complete the audit.
If you received a notice to certify user access, please email iamaudit@uw.edu to notify us that you are no longer with UW Medicine.

When is the deadline?

Please review and certify your audit by Friday, February 16, 2024

What if a user has more than one UW Medicine role, or is working in multiple positions?

In the SailPoint Certification Tool on the user's identity (next to the "Decision" buttons), you will see a message in the "Warning" column that reads, "This user may have more than one UW Medicine role. If you are not the user's current manager and/or are uncertain whether this user still needs the referenced access, please do not revoke the access. Please forward to the appropriate manager, if known, or mark approve."
Examples of this scenario include a Student who also works as a Researcher, or a UW Medicine Business Associate who is also a Fred Hutch employee.

I am having difficulties. What should I do?

If you are unable to access SailPoint or cannot log in with your AMC account, please contact the Service Desk at 206-520-2200 or uwmhelp@uw.edu
For help using the access certification tool in SailPoint, please refer to the Access Certification Guide for step-by-step instructions.
If you need further assistance, please email us for support.

Where does the user information come from?

IAM receives user information from many sources. Some of the primary sources are:

Human Resources and UW Workday
Credentialing databases (GME, OMSA)
UW Medicine Account Request froms submitted by managers and department coordinators
Responses to previous IAM Access Certification Audits

What if I have more questions?

If you have any questions at all, please email us at iamaudit@uw.edu or call the Service Desk at 206-520-2200.
We will get back to you as soon as possible.