Creating and Managing User Policies
User policy are assigned to users across the enterprise. User policies apply to the user wherever the user authenticates, even at a satellite office at another Imprivata site. User policies allow you to set different authentication parameters for different user groups. User policies are configured on the User policies page (Users menu > User policies).
Creating a User Policy
You can have as many user policies as necessary, however:
-
Each user must be assigned exactly one user policy.
-
You can edit and rename the Default User Policy, but you cannot delete it. The default user policy is marked with an asterisk (*).
NOTE: To edit an existing policy, click the policy, edit the settings and options as necessary, and then click Save at the bottom of the policy.
To create a user policy:
-
On the User policies page, click Add.
-
NOTE: Each new policy is based on the settings in the Default User Policy. When you click the Add button on the User policies page, a new user policy form opens. You can rename the user policy and configure the settings as necessary.
-
Enter a name for the user policy.
-
(Optional) Select Let all Administrators apply this policy at the top of the User policies page. This allows an Administrator who creates a policy to allow other Administrators to apply this policy to users within their scope.
-
Set user challenges (Imprivata OneSign desktop authentication only)
-
Manage the Self-Service Password Reset Feature (Imprivata OneSign desktop authentication only)
-
Configure SSO options (Imprivata OneSign desktop authentication only)
-
When the user policy is complete, assign it to users via one of the following methods:
-
-
To assign user policies to existing Imprivata OneSign accounts, or to change a user’s user policy, see Applying User Policies to User Accounts.
-
To assign a user policy as users are imported, see Set Rules for this Synchronization.
-