Enrolling Authentication Methods for Imprivata Confirm ID

After you install and configure Imprivata Confirm ID, users can enroll their authentication methods for Imprivata Confirm ID workflows.

Users cannot authenticate with Imprivata Confirm ID until they enroll their authentication methods with the Imprivata Confirm ID enrollment utility, or enroll while logging in remotely. See Imprivata Confirm ID Enrollment Workflows for instructions on enrolling each authentication method.

Supervised Enrollment

If your providers will be:

  • e-prescribing controlled substances, and
  • "Institutional providers" (not identity proofed by a Certificate Authority (CA) such as DigiCert, or a Credential Services Provider (CSP) such as Symantec Norton Secure Login)

Then by default, supervision is required to enroll their first facial biometric, fingerprint, OTP token, or Imprivata ID. Supervision of subsequent facial biometrics, fingerprints, OTP tokens, or Imprivata IDs for e-prescribing controlled substances is also enabled by default.

See Witnessing and Attesting to Provider Enrollment for more information about supervised enrollment.

Supervision is not required for users who are not allowed to e-prescribe controlled substances.

Enrollment Notifications

You can configure email notifications for the following enrollment events:

  • Each time a user enrolls an authentication method using the Imprivata Confirm ID enrollment utility, they receive an email containing details about the enrollment. This feature increases security around enrollment by allowing the user to review their enrollment details and report any suspicious activity. By default, this notification is enabled. See Configuring User Messages for complete details.
  • When providers enroll their first authentication method for e-prescribing controlled substances after completing identity proofing, specified recipients receive an email notification. This notification is intended for individuals who need to know when a provider is ready for e-prescribing controlled substances via Imprivata Confirm ID. For example, this feature can be used to notify administrators who are responsible for enabling providers for EPCS in the EMR. By default, this notification is disabled. See Configuring Administrator Messages for complete details.