Support for Applications that Run in Island Browser

Imprivata Enterprise Access Management supports SSO for applications that run in Island Enterprise browser.

Consider the following:

  • The Imprivata agent does not install nor register the extension in the Island browser. Administrators must do it manually through the Island Management Console.

    This extension is required for SSO to work with applications that are profiled in Google Chrome or Edge Chromium. EAM Admin Console is not supported.

  • The Imprivata agent and extension does not allow you to profile applications in the Island browser. You must profile applications in Google Chrome or Edge Chromium beforehand.

  • The SSO user experience is identical for applications that run in Google Chrome and Edge Chromium.

NOTE:
For more information on the minimum required version of Chrome, see the Imprivata Enterprise Access Management Supported Components matrix.
For more information on the minimum required version of Edge Chromium, see the Imprivata Enterprise Access Management Supported Components matrix.

Administrators manage the Island browser through its cloud-based Island Management Console.

When you install the Imprivata agent, the agent does not automatically install the extension. Instead, you must configure he extension through the Island Management Console by using the Extension Policy feature:

  1. Open the Island Management Console.

  2. Navigate to Modules > Device Management > Extensions > Extension Policy.

  3. Edit the Default Policy.

  4. Add the following Imprivata extension ID to the Run extension on browser login setting:
    bpgncafocbpieaeigfcookhgmeamglgo

  5. Save your changes.
    These steps enables you to run the extension on Island browser. Continue to enable the extension:

  6. Create or Edit a rule for extensions.

  7. Complete the Source Conditions form.

  8. Add the following Imprivata extension ID to the Force-installed extensions setting:
    bpgncafocbpieaeigfcookhgmeamglgo

  9. Save your changes.

After both of your changes are saved, you must continue to apply the changes. Click the Pending Changes notification, and click Apply Changes.

It is not necessary to create separate APG profiles for the same application in the Island browser, Google Chrome, and Edge Chromium. Nevertheless, you can not create APG profiles in Island browser. You must create profiles in Google Chrome or Edge Chromium. The Imprivata agent then pushes the profiles to the Island browser.

  • You can create a single application profile using either Google Chrome or Edge Chromium, and deploy it to endpoints that are running on Island browser.

  • Existing Google Chrome or Edge Chromium profiles are backward compatible with Island browser.

NOTE: The exception to the latter is an application that prompts for credentials with the Windows Security Authentication dialog. If an application prompts for credentials with this dialog, you must create separate profiles, as each browser launches the dialog differently.

For more information, see Profiling Applications that use the Windows Security Authentication Dialog.

While installing the Imprivata agent does not require an Internet connection, the endpoint must have one for Edge Chromium to acquire the extension from the Chrome Web store. Additionally, an Internet connection is required to receive any updates or upgrades to the extension through the Chrome Web store.