Configure the User Policy

As detailed in Imprivata MDA Authentication and Single Sign–on Workflows, the user policy must be configured to support the required authentication workflow.

To configure the user policy:

1. In the Imprivata Admin Console, open the Users menu, and click User policies.

2. Open the required user policy, go to the Desktop Access Authentication section, and do one of the following to specify the primary and second authentication methods:

   • For a proximity card as the primary factor, select Proximity Card, and then select Password or Imprivata PIN as the second factor.

   • For a FIDO2 security key as the primary factor, select Security Key, and then select one of the following options as the second factor: No second factor, Password, Imprivata PIN, Face recognition or Password, or Face recognition or Imprivata PIN.

     NOTE:

     Imprivata MDA does not support the options for Fingerprint, Fingerprint or Password, and Fingerprint or Imprivata PIN as second factors when FIDO2 security key is the primary.

     The options for Face recognition or Password and Face recognition or Imprivata PIN require EAM 25.4 or later.

   • For username and password as the primary factor, select Password.

   • For face recognition, additional prerequisites and configurations are required in your IdP and in your Imprivata enterprise before you select Face recognition. See Face Recognition as an Authentication Method.

3. In the Authentication method options section, for your first and second authentication methods, configure the required settings for each authentication method.

   Example 1

   For Imprivata PIN, go to the Imprivata PIN section and configure settings for PIN length, expiration, PIN complexity, and other settings.

   NOTE:

   A complex Imprivata PIN is supported.

   Example 2

   For FIDO2 security keys, go to the Security key section and configure settings for the number of security keys, grace period, replacement enrollment, and other settings.