What's New in Imprivata Mobile Access Management

Imprivata Mobile Access Management 8.0 contains the following new features and technology updates.

8.0 User Acceptance Test (UAT) New Features

Grab and Go iOS Devices

Customers can now check out and check in iOS Devices that communicate directly with the MAM Server and not require Launchpad or Smart Hubs. Users can lock and unlock devices without returning to dock and have access to all the same login (SSO/Autofill) and automated logout (API, ULC, x-callback-url) methods that traditional MAM workflows offer. This workflow can be used alongside and interchangeable with standard Launchpad based workflows, and devices can still be provisioned by a Launchpad.

MAM Grab and Go allows organizations to extend their shared mobile device program to lower density workforce areas, or where devices and users do not start and end their session in the same location. Employees can grab a shared device, authenticate and get to work, while IT maintains the visibility, control and access experience needed to manage a shared-mobile program across the organization.

Ecosystem Qualifications

Lifecycle Updates

  • Support has ended for iOS 18.5 and below, starting with Imprivata Locker 4.2.1.

For questions or comments about this release, contact the Product Management and Product Marketing teams at mobile@imprivata.com.

Previous Releases

Features and fixed issues from previous releases.

Directory Group Role Mapping in SAML Configuration

MAM supports automated role assignment based on directory group memberships sent by SAML identity providers during MAM console user login.

Administrators can configure mappings between directory groups and console roles (Console Admin, Device Manager, Department Manager, etc.) at the parent organization level on the Admin > SAML page, eliminating the need to manually assign roles after SAML user auto-creation.

Launchpad Support for ICS Auto-Pairing without Apple Configurator

This feature enhances Launchpad to automatically capture and store the complete device pairing record, eliminating the dependency on Apple Configurator. By natively managing the pairing record, Launchpad enables the depleted battery recovery workflow for supported devices while simplifying deployment, reducing operational complexity, and removing the need for manual Configurator or command-line steps.

Additional Improvements

Server

  • Server performance improvements were made for activity export and activity-page searches.

  • Workflow and Automation Rule Editors now display information about who last changed a configuration and when.

  • The Admin Console will now keep a session active across multiple browser tabs.

Imprivata Locker

  • Locker can identify certain Check In failures immediately instead of waiting for a deployment timeout.

  • Additional diagnostic logging and display improvements provide more useful information for troubleshooting.

  • Activity log events are reported in the correct order when multiple events occur close together.

Launchpad

  • Improvement to Cisco ISE registration, which Improves device placement in Cisco ISE groups, including devices that have already been registered.

  • Launchpad supports firmware updates for Bretford Pro 2 devices using the latest firmware files.

Ecosystem Qualifications

  • Ascom Collaborate for iOS

  • Ascom Axess for Smart Devices for iOS

  • VirtuSense VSTNotify for iOS

  • Solvemed PuRe Pupillometer for iOS

  • Workday Web for Android

  • American Messaging AMSConnect for iOS

  • Bug fixes for the stability of the Imprivata MDA dashboard.

  • Enhancement to the MAM Device Dashboard to display the user's Name as a new column.

Automatic Badge Reader Configuration

Launchpads can now automatically configure supported badge readers using the settings from the EAM computer policy. This eliminates the previous requirement to pre-configure readers with an EAM workstation.

Badge readers, including the embedded reader in the Smart Hub Display Base, are ready to use immediately upon connection. For more information, see Automatic Badge Reader Configuration.

Epic Rover Witness Authentication Using Facial Recognition

Secondary users can now complete Epic Rover witness (“dual sign”) workflows on shared MAM devices using facial authentication through the Imprivata Hybrid Identity Provider (IdP). Witnesses can securely authenticate and complete sign-off without manually entering credentials.

Accelerates witness-required workflows by reducing authentication delays during medication administration and other clinical tasks. Clinicians can complete required sign-offs more efficiently without disrupting patient care or relying on shared credentials. For more information, see Epic Rover Witness Authentication.

NOTE:

Requires Imprivata appliances running EAM 26.2 or later.

Depleted Battery Workflow for Mac Launchpads

Mac Launchpads now support a depleted battery workflow that helps clear passcodes over USB when devices become unavailable due to a discharged battery.

Reduces device downtime by enabling the seamless checkin of devices returned to a Smart Hub with a depleted battery, eliminating the need for Force Recovery or other manual intervention by IT technicians. For more information, see Check In Devices with Depleted Batteries.

Additional Enhancements

Server

The Locker app version is now displayed in device details, activity log, and device export, and is available for use with Smart Folders and automation rule criteria.

Launchpad

The Launchpad End-user Display now supports localization including Spanish.

Locker

Locker iOS 4.4 and Locker Android 2.4 now supports localization including Spanish.

Fixed Issues

Server 7.4

  • For increased security, API keys are now partially obscured after creation.

  • Improved the Device is unpaired Dashboard tile to more accurately include devices in an unpaired state.

  • Improved the accuracy of the Users with more than one device Device Home Dashboard tile.

  • Express Checkout now initiates a reboot and check-in after a failure, even when it is not the first workflow in a chained workflow automation.

  • Fixed an issue that could cause Check Out to fail with the message: "Checkout Failed: The Checkout feature is not properly configured, no workflow is specified."

  • The Marketing Name for iPhone 17e is now displayed properly.

Launchpad 7.4

  • OTA Workflows now resolve Launchpad attribute tokens (for example, [Department]) for devices that are not currently connected to a Launchpad, by using the values from the Launchpad the device was last connected to. This resolves a case where bulk OTA deployments such as 'Set Device Home to [Department]' produced the literal string on unpaired devices

Locker iOS 4.4 and Locker Android 2.4

  • Personalized Lock Screen now re-activates when opening Locker if dismissed or closed.

  • Personalized Lock Screen now activates properly when a device is checked out with Username.

  • Fixed an issue that prevented the "This device is locked" message from appearing on the Check Out with Credentials screen on Spectralink and Zebra devices.

Ecosystem Qualifications

  • GLOBO Connect for iOS

  • AMSConnect for iOS

  • AirStrip One for iOS

Imprivata has released MAM server version 7.3.3 which includes bug fixes to address platform stability. This release is distributed to shared MAM server clusters only.

MAM 7.3.3 addressed server resource contention and exhaustion issues when large amounts of deployment activity coincide with background processes.

MAM 7.3.2 Server contains a fix that addresses API integration issues with Jamf Pro MDM.

MAM Server 7.3.2 now uses Jamf Pro API v2 for Jamf MDM commands, including Clear Passcode and Lost Mode actions. This improves compatibility with current Jamf Pro versions where Classic API mobile device command behavior has changed. The new behavior is enabled by default regardless of Jamf Pro version.

MAM 7.3.1 Server and Launchpad contain bug fixes designed to address key issues including an issue with iOS device passcode clearing that can result in check in failures.

  • Resolves checkin failures on passcode-locked devices by adding a Launchpad capability to detect when a passcode is set but the device is not locked.

  • Resolves an issue that could cause Launchpad to hang and prevent it from being restarted from the server.