Using 42Gears SureMDM to Deploy Imprivata MDA

Use 42Gears SureMDM to deploy Imprivata MDA.

The following sections detail how to:

  • Set up 42Gears SureMDM to integrate with MDA.

  • Add the Imprivata MDA app to 42Gears SureMDM.

  • Enroll devices

NOTE:

See the Imprivata MDA AppConfig Reference for supported MDM AppConfig key/value pairs.

Prerequisites

Take note of the following prerequisites:

42Gears SureMDM Prerequisites

  • Your 42Gears SureMDM account must be registered with Android Enterprise (Google Play EMM API).

  • Managed Google Play must be enabled and configured.

  • Administrator must have completed the Managed Google Play agreement.

Imprivata MDA Prerequisites

Configure 42Gears SureMDM

Create a device group to organize and target Imprivata MDA deployments.

  1. In the SureMDM console, navigate to Device Management > Device Groups.

  2. Create a new device group (e.g., "MDA Devices" or "Healthcare Tablets").

  3. Define the membership criteria (manual assignment or dynamic rules).

Deploy the Imprivata MDA App

Deploy the Imprivata Mobile Device Access app from the Managed Google Play store:

  1. In the 42Gears SureMDM console, navigate to Application Management > Android > Add Application.

  2. Select Managed Google Play as the source.

  3. Search for "Imprivata Mobile Device Access".

  4. Select the IImprivata MDA app from the search results.

  5. Click Approve to add the app to your SureMDM catalog.

  6. Configure approval settings:

    1. Approval Type: Select Automatic to keep the app automatically updated.

    2. Permissions: Review and approve requested permissions.

  7. Click Save.

The Imprivata MDA app is now available in your SureMDM application catalog for deployment.

Configure the Imprivata MDA app with required settings using AppConfig:

  1. In the 42Gears SureMDM console, navigate to Jobs & Profiles > Profiles > Android.

  2. Click Add Profile.

  3. Enter a profile name, for example "Imprivata MDA Configuration".

  4. Select Application Configuration as the profile type.

  5. Select Imprivata MDA from the application list.

  6. Enter the required and optional AppConfig values:

    1. EAM server address. Type the address of the Imprivata appliance. Required.

    2. Device Serial Number.Required.

    3. Admin Access code.

    4. LockMode

    5. CountdownToLockMinutes

    6. Device Info pattern

    7. Configuration Flags

    8. Mobile Policy Override

  1. Assign the profile to the device group you created in an earlier step.

  2. Click Save and publish.

  1. In the 42Gears SureMDM console, go to Application Management > Android > Applications.

  2. Locate Imprivata MDA in the application list.

  3. Click the application to open its details.

  4. Select Deploy.

  5. Configure deployment settings:

    1. Deployment Type: Select Required (app installs automatically).

    2. Installation Type: Select Silent (no user interaction required).

    3. Target: Select the device group configured for Imprivata MDA.

  6. Click Deploy.

    The Imprivata MDA app will be automatically installed on all devices in the selected group upon their next check-in with SureMDM.

To automatically grant the required permissions to the Imprivata MDA app:

  1. In the 42 Gears SureMDM console, go to Jobs & Profiles > Profiles > Android.

  2. Click Add Profile.

  3. Enter a profile name, for example: "MDA App Permissions".

  4. Select App Permissions as the profile type.

  5. Select Imprivata MDA from the application list.

  6. Configure the following permissions:

    1. Accessibility Service: Auto-grant. Required for app management.

    2. Notification Access: Auto-grant. Required for notification management.

    3. Draw Over Other Apps: Auto-grant. Required for lock screen overlay.

    4. Location (if using): Auto-grant. Optional, for location-based policies.

    5. Camera (if using biometrics): Auto-grant. Optional, for face recognition.

  7. Grant All Permissions: Toggle ON. Recommended for simplified management.

  8. Assign the profile to the device group.

  9. Click Save and Publish.

IMPORTANT:

Some permissions like Accessibility Service may require manual activation on the device after initial installation. Ensure these are enabled during device setup.

Enroll Devices

42Gears SureMDM device enrollment begins with a factory reset of the device.

To enroll a device:

  1. Wipe the device by using the full factory reset.

  2. Turn on the newly reset device.

  3. On the Welcome screen, select your language.

  4. Connect to the Wi-Fi, and then choose NEXT.

  5. Accept the Google Terms and conditions, and then choose NEXT.

  6. On the Google sign-in screen, enter afw#suremdm instead of a Gmail account, and then tap NEXT

  7. Install SureMDM Agent as prompted on the Android Enterprise screen.

  8. In the Let’s set up your work device screen, tap Accept and Continue after reading the terms.

  9. Complete the other setup Wizard on the device. Once the device is set up, launch the SureMDM Agent on the device.

  10. Click Get Started and configure the SureMDM Agent.

  11. SureMDM Agent requests a set of system permissions before proceeding with the configurations. Grant the permissions and tap Continue:

    1. Configure Runtime Permissions

    2. Activate Device Admin.

    3. Enable Usage Access

    4. Ignore Battery Optimization

    5. Allow Screen Capture

    6. Enable Accessibility Settings

    7. Configure System Permission

    8. Enable Display Over Other Apps.