Creating and Managing User Policies

User policy are assigned to users across the enterprise. User policies apply to the user wherever the user authenticates, even at a satellite office at another Imprivata site. User policies allow you to set different authentication parameters for different user groups. User policies are configured on the User policies page (Users menu > User policies).

Creating a User Policy

You can have as many user policies as necessary, however:

  • Each user must be assigned exactly one user policy.

  • You can edit and rename the Default User Policy, but you cannot delete it. The default user policy is marked with an asterisk (*).

NOTE: To edit an existing policy, click the policy, edit the settings and options as necessary, and then click Save at the bottom of the policy.

To create a user policy:

  1. On the User policies page, click Add.

  2. NOTE: Each new policy is based on the settings in the Default User Policy. When you click the Add button on the User policies page, a new user policy form opens. You can rename the user policy and configure the settings as necessary.

  3. Enter a name for the user policy.

  4. (Optional) Select Let all Administrators apply this policy at the top of the User policies page. This allows an Administrator who creates a policy to allow other Administrators to apply this policy to users within their scope.

  5. Enable desktop authentication methods

  6. Configure authentication method options

  7. Set user challenges (Imprivata OneSign desktop authentication only)

  8. Manage the Self-Service Password Reset Feature (Imprivata OneSign desktop authentication only)

  9. Configure SSO options (Imprivata OneSign desktop authentication only)

  10. Configure virtual desktop options

  11. When the user policy is complete, assign it to users via one of the following methods: