Application Profile Generator Support for Chrome and Edge Chromium

Imprivata Enterprise Access Management 7.11 and later, which run only on G4 (fourth generation) enterprises, supports running the Imprivata Application Profile Generator (APG) on Google Chrome and Microsoft Edge Chromium browsers for all the application types listed in the topic Application Types.

Enterprise Access Management 7.10 for G4 enterprises, and Enterprise Access Management 7.10 and 7.9 for G3 (third generation) enterprises, support running the APG on Chrome and Edge Chromium for most of those same Application Types, but not for terminal emulators, other host-based applications, and hybrid applications that contain host-based applications.

To run Imprivata APG on Chrome or Edge Chromium for G4 enterprises, you first must either migrate your G3 enterprise to a G4 enterprise, including Imprivata appliances and endpoint agents, or install new G4 appliances and endpoint agents in a new G4 enterprise.

To run Imprivata APG on Chrome or Edge Chromium for G3 enterprises, you first must upgrade to 7.10 or 7.9 the Imprivata G3 appliances and the Imprivata endpoint agents in your G3 enterprise. 

On both G4 and G3 enterprises, the affected endpoint agents include the agents on administrators' computers, where the agents must be running. The agent installer installs, but does not enable, an Imprivata Single Sign On (SSO) browser extension from the Chrome web store. You must enable this extension on administrators' computers to be able to open and run the Imprivata APG. For instructions on enabling the extension, see either Support for Applications that Run in Google Chrome or Support for Applications that Run in Edge Chromium. For the minimum supported version of Chrome, see the "Browsers" section of Imprivata Enterprise Access Management Supported Components.

Support for Existing and New Application Profiles in 7.9 and Later

Existing application profiles created before 7.9 continue to work for SSO in 7.9 and later.

You can deploy new application profiles only to Imprivata agents that have the same or a later release as the release on which the profile was created. Therefore, to deploy a new profile created on Enterprise Access Management 7.9 or later, you must first upgrade the endpoint agents to 7.9 or later.

You can deploy an edited version of an existing profile to all agents that match the original version or later. Therefore, using Enterprise Access Management 7.9 or later, you can modify application profiles created before 7.9, and deploy them to endpoint agents that have previous releases. When saving such an edited profile, click OK to deploy it when you see a message such as, "Saving this profile with the addition of V7.9 features will require upgrading the Imprivata Agent for all users with SSO to the application." In this case, you do not have to upgrade those agents to 7.9 or later. However, the updated version of the profile may use features that the older agents do not support.