MULTI-FACTOR AUTHENTICATION, SINGLE SIGN-ON, AND IDENTITY MANAGEMENT IN CLOUD-BASED HEALTHCARE MOBILE APPLICATIONS A Reference Architecture and STRIDE Threat-Model Evaluation
Healthcare mobile applications increasingly expose scheduling, messaging, billing, medication, and clinical-information services through cloud APIs. This creates an identity boundary that must resist credential theft, token interception, session replay, privilege misuse, and fragmented account governance without imposi...