Setting Fingerprint Identification Parameters in a Computer Policy
Unlike fingerprint authentication, which requires the user to identify themselves in a separate action from authenticating with their finger, Imprivata OneSign Fingerprint Identification enables users to both identify themselves and authenticate their identity at one time, with their finger.
If your enterprise is licensed for fingerprint identification, you can suspend fingerprint identification in computer policy after a number of consecutive failures.
This is designed to prevent a non-user from placing their finger on the reader and attempting to log in repeatedly, and also to prevent a user from repeatedly using the wrong finger to log in.
- In the Imprivata Admin Console, go to the Computers menu > Computer policies option and select a computer policy.
- Select the Fingerprint tab. Change the default settings if needed:
- Fingerprint identification will be suspended after 3 consecutive failures within 5 minutes, for 5 minutes.
- Click Save.
During the suspension, even a proper fingerprint scan will not allow access. Other authentication methods are not affected during the suspension.
An Imprivata report is available to track computers that are suspended.
The administrator cannot manually override this setting and "un-suspend" fingerprint identification for this computer policy.
