OpenAthens Authentication

Procurement reference

P21.85

Procurement description

OpenAthens Authentication for NHS Wales e-Library Users not based at a fixed location/IP address

Digital Health & Care Wales

JISC SERVICES LTD

Procedure type

Direct award

Description of how these justifications apply

OpenAthens remains essential to ensuring continuous and secure access to NHS Wales e resources, a capability that has been in place since 2003 and remains fundamental to service delivery. The previous contract was due to expire on 30th June 2025, the awarded arrangement ensures there is no interruption to access or risk to operational continuity. OpenAthens is a trusted third party authentication solution that is already fully integrated within NHS Wales infrastructure and now works seamlessly with the Entra directory system. This integration continues to provide user friendly, efficient access by allowing staff to authenticate without repeated log ins when using authorised devices. Maintaining this level of accessibility after award is critical for supporting staff productivity and reducing technical barriers to resource use. The shift towards remote and flexible working across NHS Wales further reinforces the ongoing need for OpenAthens. Remote authentication capability is now a business critical function. Without OpenAthens, NHS Wales would lose the ability to support secure off site access to e Library resources, significantly affecting staff who rely on these tools for clinical decision making, training and daily operational tasks. Post award, reliance on alternative authentication methods particularly IP based access, would be inappropriate. IP authentication is outdated, insecure, and unable to verify user identity or support department specific access. Continuing to use OpenAthens ensures precise, auditable access control aligned with NHS Wales information governance and cyber security standards. Maintaining OpenAthens under the awarded contract therefore remains justified by the ongoing need for secure, flexible and remote access to NHS Wales digital resources. This supports both user security and the continuity of essential NHS Wales services.

Direct award justification

Single suppliers technical reasons

Extension end date (if all the extensions are used): 30 June 2030