Authentication Methods

The Authentication Methods page enables Vendor Reps to enroll the multi-factor authentication (MFA) methods they use to access VPAM. If the System Admin has configured MFA for accessing the server, the system displays an indicator on the Authentication Methods page.

To open the Authentication Methods page:

  1. Open My Account in the VPAM user portal.
  2. Select Authentication Methods.
NOTE:

Depending on your customer and their system configuration, Vendor Reps can enroll in Face Authentication, Mobile Authentication, or both. Contact your customer to get more information.

Face Authentication

Face Authentication provides a passwordless authentication method for accessing applications and systems protected by VPAM.

IMPORTANT:

Face Authentication is part of the Identity Assurance and Threat Detection package. This package includes Facial Biometric Authentication and Identity Threat Detection and Response (ITDR). Contact your Imprivata Support representative for more information: support@imprivata.com

If Face Authentication is set to Yes in Authentication Requirements, users are prompted to enroll in Face Authentication the next time they log in.

  1. Click Continue.

    NOTE:

    If Face Authentication is required, you must complete enrollment before logging in. If you click Do this later the system prevents login until enrollment is complete.

  2. Capture a clear face image.
  3. Click Done after the system confirms successful enrollment.

After enrollment, Face Authentication is available as a second factor authentication method.

You can revoke Face Authentication enrollment from Authentication Methods at anytime.

  1. Open My Account > Authentication Methods in the VPAM user portal.
  2. Confirm the Face Authentication description indicates the method is set up.
  3. Click Revoke enrollment.
    IMPORTANT:

    If Face Authentication is required to access VPAM, you cannot login after revoking enrollment until you complete enrollment again.

If Face Authentication is required, revoking enrollment immediately logs you out of the VPAM user portal.

Mobile Authentication

Mobile Authentication uses a time-based one-time code generated by a supported authenticator application installed on your mobile device. Select an authenticator application from the options listed on the enrollment screen.

To enroll in Mobile Authentication, follow these steps:

  1. Open My Account > Authentication Methods in the VPAM user portal.
  2. Confirm the Mobile Authentication description indicates the method is not set up.
  3. Click Start enrollment.
  4. Download one of the supported authenticator applications to your mobile device.
  5. Open the authenticator application and scan the QR code displayed on the enrollment screen.
  6. Enter the authentication code generated by the application.
  7. Click Configure Authenticator.

Depending on your organization’s configuration, Mobile Authentication can be:

  • Required. If Mobile Authentication is set to Required, administrators can click Mobile Authentication Options. This opens a configuration dialog where administrators can exclude specific user groups from the requirement or enforce Mobile Authentication based on user type.

  • Not required.

  • Required only when logging in outside authorized trusted networks.