Configure Imprivata MDA for Screensaver Tolerance

Configure Imprivata MDA to allow it to coexist with device screensavers and not block their use.

NOTE:

This feature is configured via the AppConfig using an MDM. It does not require a profile creation and deployment in Imprivata Enterprise Access Management.

See the Imprivata MDA AppConfig Reference for supported MDM AppConfig keys.

Overview

Imprivata MDA normally blocks any other apps' UI that requires the user to authenticated before using the apps on a device. Imprivata MDA treats the screensaver UI as a regular app UI that should be blocked. Therefore Imprivata MDA employs the persistent lock mechanism to the Imprivata MDA lock screen activity and pushes it to the background. Screensavers act similarly; actively trying to restart their activity.

Android system settings control the appearance and disappearance of the screensaver. Imprivata MDA reacts to these events and stops blocking the screensaver before it appears and starts the normal persistent lock function when the screensaver is complete. This functionality is based on the Critical Alarm functionality that bases the Critical Alarm session start on ACTION_DREAMING_STARTED and closes the session on ACTION_DREAMING_STOPPED.

Limitations

Consider the following limitations:

  • On Android 12 devices enrolled in Workspace ONE with the Workspace One Launcher, after the screensaver has appeared, Imprivata MDA displays a persistent Imprivata MDA blue loading screen.

    This behavior is the same whether the allowScreensaver key is set in the AppConfig or not.

Configure the MDM AppConfig

The feature is defined in the MDM AppConfig. For additional information on configuring apps via AppConfig, see your MDM documentation.

To enable the feature, add the following key to AppConfig in your MDM:

  • ConfigFlags - Allows Zebra Access Management System in Imprivata MDA.

    • The AppConfig Configuration Key field for this feature is "ConfigFlags".

    • The AppConfig Value Type for this feature is "String".

    • The AppConfig Value is allowScreensaver.

Instructions for Use

There are no specific instructions for use, as Imprivata MDA simply gives the device display to the screensaver app and gives back control of the device display after the screensaver is finished.