Enable Imprivata MDA and Deploy Profiles

  • Enable Imprivata MDA in your Imprivata enterprise.

  • Import and deploy the Imprivata mobile app profiles.

Complete the following steps to configure Imprivata MDA.

Imprivata MDA requires access to the Imprivata ProveID Web API.

To enable access to the Imprivata ProveID Web API:

  1. In the Imprivata Admin Console, click the gear icon , and then click API Access.

  2. Select Allow full API access via ProveID Web API and ProveID Embedded.

  3. Select Imprivata Mobile for Android.

  4. Click Save.

Imprivata provides pre-configured mobile app profiles. Deploying the profile enables the app for single sign–on.

To import the profiles:

  1. Log in to the Imprivata Customer Experience Center.

  2. Click Product Downloads > Mobile and select Imprivata Mobile Device Access.

  3. Download the MDA Application profiles (all versions) package. The application profiles download to your computer.

  4. Extract the profiles to a location that is accessible to the Imprivata Admin Console.

    A single XML file (MDA_AppProfiles_<date>.xml) includes all of the supported profiles.

  5. In the Imprivata Admin Console, open the Applications menu, and click Single sign–on application profiles.

  6. Click Add App Profile > Import from file.

  7. Browse to the XML file, and import it.

The following sections detail how to modify a Web or native mobile app profile.

Web App — Add the Login URL

Before deploying a Web app, you must configure the login URL.

To configure a web app profile with a login URL:

  1. In the Imprivata Admin Console, open the Applications menu, and click Single sign–on application profiles.

  2. Locate the required web app profile, and click Edit Profile.

  3. Enter the login URL, and save the profile.

Native App — Configure User Switch and Logout Behavior

(Optional) By default, on user switch or logout a native app is quit. Additional behavior can be enabled.

To configure user switch and logout behavior:

  1. In the Imprivata Admin Console, open the Applications menu, and click Single sign–on application profiles.

  2. Locate the required native app profile, and click Edit Profile.

  3. Select one or more of the following, and save the profile:

    • Force stop — Stops all related app services.

    • Clear cache — Clears all cached images and files.

    • Clear all data — Clears the cache and deletes all data associated with the app.

    • Do nothing

Native and Web App — Enable a Profile to Automatically Submit User Credentials

(Optional) With the exception a mobile app that is integrated with the Imprivata MDA SDK (partner app), users must manually submit their credentials when the application opens.

You must enable the profile to automatically submit user credentials.

To enable the profile:

  1. In the Imprivata Admin Console, open the Applications menu, and click Single sign–on application profiles.

  2. Locate the required app profile, and click Edit profile.

  3. Select Automatically submit user credentials, and click Save.

NOTE:

No additional app configuration is required. If credentials are not successfully submitted, the app does not support the behavior. In this case, an authentication failure does not occur. The default behavior is enforced, and users must submit their credentials manually.

App Credential Considerations

When you deploy an Imprivata mobile app profile, you specify the type of credentials the app uses. The type of credentials an app can use depends on whether it is a partner app. A partner app is one that has been integrated with Imprivata MDA using the Imprivata MDA SDK:

  • Partner apps can:

    • Use their own credentials

    • Share credentials with the Imprivata domain or another desktop application.

  • All other supported apps can only share credentials with the Imprivata domain or another desktop application only.

NOTE:

If an app is sharing credentials with a desktop application, be sure that the single sign–on profile associated with desktop application has been added to a credential store.

You can view existing credential stores in the Imprivata Admin Console from the Shared credential stores page (Applications menu > Credential stores). For more information about creating and managing a credential store, see Using Shared Credential Stores.

Deploy an App Profile

To deploy an app profile:

  1. In the Imprivata Admin Console, select the app profile, and click Deploy.

  2. Go to the Deployment section, and select Deploy This Application?.

  3. (Optional) To deploy the application to a subset of users, deselect Deploy to All Users and Groups?, and specify the membership.

  4. (Optional) If the app is sharing credentials, go to the Credentials section, select This application shares credentials?, and do one of the following:

    1. To use the Imprivata domain credentials, select with the domain only, and select the required domain username format.

    2. To share credentials with a desktop application, select with other applications, and select the credential store that is configured with the other application.

  5. Click Save.

NOTE:

For more information about either option, see Credential Sharing.