AppConfig Reference

Sets the order of MDA logout operations to log the browser out last.

This AppConfig allows backwards compatibility to support the order of logout operations used in earlier releases of MDA.

When bootLockDelay is in effect, the device cannot be unlocked.
The purpose of this flag is to allow the SIM PIN to be entered into the device. The user cannot freely unlock and use the device normally.

The delay timer only starts when the device has finished rebooting.

• The assigned integer value defines the delay in seconds.

• The maximum delay time is 60 seconds.

• If the integer is not present, is 0 or negative, the flag is ignored.

• If the integer entered is more than 60 seconds, the flag applies the maximum delay of 60 seconds.

Allows users to enroll their unenrolled FIDO security keys from the Imprivata MDA app.

If treatNfcTapAsProx is set, Imprivata MDA will ignore fidoEnrollmentOn.

Use Samsung DeX functionality.

The device prompts for the required Device Administrator permissions and activates required Knox SDK license.

Enables the Samsung DeX session to stop when MDA is signed out.

For customers with proximity cards that communicate with the same protocol as FIDO security keys, treatNfcTapAsProx enables proximity card-only mode.

• If treatNfcTapAsProx is not set, FIDO security keys previously enrolled as proximity cards will fail to authenticate to MDA 8.1 and later.

• If treatNfcTapAsProx is set, Imprivata MDA will ignore fidoEnrollmentOn.

emergencyCalls

emergencyCalls:<phone number>

emergencyCalls:<phone number>|skipConfirmation

Allows the user access to the phone dial pad so they can make phone calls from the Imprivata MDA lock screen, without the user needing to authenticate to the device.

To define a preconfigured phone number, set the <phone number> value to the phone number needed.

Supports US and International phone number formats.

Sets the Imprivata MDA foreground service notification to be non-cancellable.

• The user will not be able to dismiss the notification from the Android notifications bar by swiping.

• The notification will always be available in the notification bar.

Overrides the MSAL sign-in timeout.

Default is 15000 ms.

Example: msalLoginTimeout=30000.

msalLoginOn

Allows a delay, in milliseconds, before Imprivata MDA starts processing AutostartApps.

Allows a delay, in milliseconds, between AutostartApps launch attempts.

Lock the device when Imprivata MDA detects the device is charging

Used with logoutOnCharge

Log the user out from the apps when Imprivata MDA detects the device is charging.

Used with lockOnCharge

Require the user to reauthenticate when Imprivata MDA transitions from offline to online, only when the user session was last unlocked in offline. The flag has no effect on online established sessions.

Used in combination with allowOfflineMode.

Set the domain selected by default when the user authenticates to Imprivata MDA with their username and password.

.

• Allows communication with an Imprivata appliance that contains any seIf-signed or expired or invalid certificate.

• This communication method is considered as not secure, but is for backward compatibility or for administrators to use while they resolve Imprivata appliance certificate issues.

• If allowUntrustedEAMCertificate is set, then forceTrustedEAMCertificate is ignored.

Imprivata MDA checks for Imprivata appliance server certificate validity and allows you to check whether Imprivata appliance certificate is configured correctly.

Use the Zebra SDK for all SDK based logout methods.

Setting deviceSdkLogout is equivalent to setting the following three values:

• deviceSdkClearData

• deviceSdkClearData

• deviceSdkForceStop

Prevent users from accidentally typing characters into credentials screens.

For the supported values, see the table of supported mobile policy values available for override.

Allows Zebra Access Management System

Upload the Imprivata appliance certificate to the MDM when deploying Imprivata MDA to a device

• {{SerialNumber}} - Microsoft Intune

• {DeviceSerialNumber} - Omnissa Workspace ONE

• %SERIALNUM% - Soti