Imprivata Documentation | Imprivata Enterprise Access Management (Confirm ID) 25.1 | Topic updated: April 18, 2025

Imprivata Licensed Features

Licensed features are available for Enterprise Access Management for SSO (Imprivata OneSign), Enterprise Access Management for MFA (Imprivata Confirm ID), or for both products:

SSO Licensed Features	MFA Licensed Features	Additional Licensed Features
Authentication Management	Enterprise Access Management for Remote Access	Fingerprint Identification
Single Sign-On	Enterprise Access Management for EPCS	Connector for Epic Hyperspace
Self-Service Password Reset	Enterprise Access Management for Clinical Workflows	Connector for Epic Warp Drive
Spine Combined Workflow	Enterprise Access Management for Medical Devices	ProveID Web API
	Mobile EPCS	Mobile Device Access
	DigiCert Individual Identity Proofing	OneSpan (VASCO) OTP Token Authentication
	Symantec VIP Credential Authentication	Virtual Desktop Access
	Hands Free Authentication

The License page in the Imprivata Admin Console (gear icon > License) shows all Imprivata licensed features, in bold if purchased for your environment, grayed out if not yet purchased or if the license has expired. If an Enterprise Access Management SSO license has expired, all SSO licensed features also appear grayed out. If an Enterprise Access Management MFA license has expired, all MFA licensed features also appear grayed out.

A tooltip displays the license usage for a given feature, based on the license file. The license usage includes the license seats allowed based on purchases, enabled seats, and remaining seats.
A warning appears if all licenses for a given feature are used, or if only a few licenses remain available.

Add a New License

You can upload new licenses from the License page.

Check License Usage

You can see how many Imprivata licenses you are currently using for most features.

License Page

On the License page, hover over the information icon for a given feature. The license usage collected from the license file is displayed for allowed, enabled and remaining seats.

User Policies Page

Go to the Users menu > User policies option.
Click the Download License Usage button at the top of the policy list to download a spreadsheet showing the features you have enabled, and licensed user numbers for each.

The spreadsheet does not include Connector for Epic Hyperspace, Connector for Epic Warp Drive, and ProveID Web API, which are licensed once for your enterprise.

NOTE: Some Imprivata features are configured in user policy. When a license is required to enable a feature, a message is displayed in the Imprivata Admin Console. For example:

OneSign Licensed Features

Authentication Management

An Authentication Management license includes:

fingerprint verification
proximity cards, smart cards
non-integrated VASCO (now OneSpan) OTP tokens
multi-factor authentication (proximity card plus Imprivata PIN, for example)

When you enable fingerprint, proximity card, smart card, or ID token in a user policy, each user in that policy counts towards your Authentication Management license total. When you configure a user policy for desktop authentication with VASCO (OneSpan) OTP tokens, each user in that policy also counts towards your Authentication Management license total.

Single Sign-On

To check your license usage, open a user policy and go to the Single Sign-On tab. When Allow users single sign-on access to applications is selected, each user in that user policy counts towards your license total.

Imprivata OneSign Single Sign-On is only configurable on a per-user basis with Imprivata OneSign 5.0 or later.

NOTE: Authentication Management (AM) and Single Sign-On (SSO) may be purchased separately or as a combined license. If you have purchased a combination SSO/AM license, AM and SSO are counted together and cannot be used separately. For example, if you are licensed for 100 SSO/AM users, you cannot configure 100 users for AM and a different 100 users for SSO.

Self-Service Password Reset

The Self-Service Password license allows users to reset their password via the "forgot password" option on the Imprivata OneSign login screen. To check your license usage, open a user policy and go to the Self-Service Password Reset tab. When Allow users to reset their primary authentication password is selected, each user in that user policy counts towards your Self-Service Password Reset license total.

Spine Combined Workflow

The Spine Combined Workflow license enables support of NHS Spine applications and is licensed on a per-user basis. When licensed, you can configure a user policy to provide fast, secure, and auditable clinical access to the Spine-enabled applications of an authenticated user. For a period of up to 12 hours after the initial authentication to the Spine, users who require access to Spine applications can re-authenticate without needing to insert a Spine smart card or enter a passcode.

When you enable the Spine Combined Workflow, each user in that policy counts towards your license total.

Imprivata Confirm ID Licensed Features

License usage for Imprivata Confirm ID for Remote Access, EPCS, Clinical Workflows, and Medical Devices are determined by their Imprivata Confirm ID workflows. To check your license usage, go to the Confirm ID workflow policy page (Users menu > Workflow policy option). When a user policy is associated with a workflow, each user in that user policy counts towards your license total.

Mobile EPCS

Mobile EPCS integrates with your EMR to authenticate care providers for signing EPCS prescriptions using mobile devices.

Requires the following licenses: Imprivata Confirm ID for EPCS, Mobile EPCS, and VASCO OTP Token Authentication.

DigiCert Individual Identity Proofing

Enables individual providers to complete identity proofing with DigiCert and enroll their authentication methods. Individual providers, who may not prescribe using an institution's DEA number, must complete identity proofing with a Certificate Authority (CA) such as DigiCert before e-prescribing controlled substances.

Requires the following licenses: DigiCert Individual Identity Proofing, Confirm ID for EPCS, Confirm ID for Clinical Workflows.

To check your license usage, go to the Confirm ID workflow policy page (Users menu > Workflow policy option) and scroll down to the EPCS workflows section. The DigiCert individual identify proofing option specifies any user policies associated with that ID proofing. Each user in an associated user policy counts toward your license total.

Symantec VIP Credential Authentication

The Symantec VIP Credential Authentication license allows for strong authentication using Symantec VIP credentials.

To check your license usage, open a user policy and go to the Authentication tab > Licensed options section. When Symantec VIP Credential Authentication is selected, each user in that user policy counts toward your Symantec VIP Credential Authentication license total.

Hands Free Authentication

The Hands Free Authentication license provides authentication by automatically and securely retrieving a one-time password from a mobile device with Imprivata ID installed.

To check your license usage, open a user policy and go to the Authentication tab > Licensed options section. When Hands Free Authentication is selected, each user in that user policy counts towards your Hands Free Authentication license total.

Facial Biometrics

Facial biometrics does not appear on the License page and does not require its own license. However, it does require the following licenses: Imprivata Confirm ID for EPCS and Mobile EPCS.

Additional Licensed Features

Fingerprint Identification

The Fingerprint Identification license allows users to sign into Imprivata OneSign with just their finger. The user does not need to type their username or password.

To check your license usage, open a user policy and go to the Authentication tab > Licensed options section. When Fingerprint Identification is selected, each user in that user policy counts towards your Fingerprint Identification license total.

Connector for Epic Hyperspace

The Imprivata Connector for Epic Hyperdrive license provides single sign-on, fast user switching, and secondary authentication for Epic Hyperspace.

The Connector is licensed for your whole enterprise. It is not configurable on a per-user or per-computer basis.

Connector for Epic Warp Drive

The Imprivata Connector for Epic Warp Drive license provides single sign-on, fast user switching, and secondary authentication for Epic Warp Drive.

The Connector is licensed for your whole enterprise. It is not configurable on a per-user or per-computer basis.

ProveID Web API

The ProvedID Web API delivers strong authentication to third-party products. Applications use ProveID Web API calls to perform authentication.

The ProveID Web API is licensed for your whole enterprise. It is not configurable on a per-user or per-computer basis.

Mobile Device Access

The Imprivata Mobile Device Access license enables authentication management and single sign-on support for mobile devices and apps.

Imprivata MDA is licensed on a per-device basis. When licensed, you configure and deploy a mobile policy and one or more mobile app profiles to provide secure access to your mobile apps. When you enable Imprivata MDA, each device that has the Imprivata MDA app installed counts towards your license total.
The Imprivata MDA workflow includes proximity card and Imprivata PIN (optional) authentication and single sign-on. This functionality is not included as part of this license. Authentication Management and Single Sign-On licenses are also required. Each user associated with a mobile app profile counts towards your license total.

VASCO OTP Token Authentication

The VASCO Token Authentication license provides strong authentication using VASCO (OneSpan) OTP tokens.

To check your license usage, open a user policy and go to the Authentication tab > Licensed options section. When VASCO OTP Token Authentication is selected, each user in that user policy counts towards your VASCO OTP Token Authentication license total.

Virtual Desktop Access

A Virtual Desktop Access license provides extended integration, automation, and strong authentication support for VMware, Citrix, and Microsoft VDI; it also includes ProveID Embedded.

To check your license usage, open a user policy and go to the Virtual Desktops tab. When Enable virtual desktop automation is selected, each user in that user policy counts towards your Virtual Desktop Access license total.

A typical Virtual Desktop Access workflow includes proximity card, fingerprint, and/or smart card authentication, but these authentication methods are not included as part of this license. An Authentication Management license or bundled SSO/AM license is also required in the typical case.