Imprivata OneSign ProveID Embedded
ThinOS supports the Imprivata OneSign ProveID Embedded (PIE) feature that enables secure authentication to virtual desktops and applications. Using this feature, you can seamlessly access the clinical applications. The PIE solution simplifies access to roaming desktops with Citrix Virtual Apps and Desktops, VMware Horizon Desktops and Applications, and Remote Desktop Services. You can also deploy a Citrix Virtual App hosted desktop with Fast User Switching (FUS) to eliminate the need for generic user log-ins. For more information about the Imprivata OneSign ProveID Embedded, see the documentation available at
www.imprivata.com .
Table 1. Supported environment Supported environment
Component
Supported environment
Endpoints (Thin Clients)
Wyse 5470 All-in-One Thin Client
Wyse 5470 Thin Client
Wyse 5070 Thin Client
Wyse 3040 Thin Client
VDI environment
Citrix Desktop
Citrix XenApp
Microsoft Remote Desktop Services session based and virtual desktop
Microsoft Remote Desktop Services Remote PC
VMware Horizon - Desktops
OneSign server (tested)
7.1.005.42
PIE Agent on the thin client
7.1.005.0039
Authentication methods
Network password
Proximity card
Security questions
PIN (as a secondary factor)
Fingerprint biometrics
Table 2. Imprivata ProveID Embedded feature matrix Imprivata ProveID Embedded feature matrix
Feature
Description
ThinOS PIE
ThinOS PIW
General Features and Workflows
Imprivata Appliance failover
Supported
Supported
Imprivata offline mode
Not applicable
Not applicable
Imprivata self- service password reset
Supported
Supported
Third-party self- service password reset
Not applicable
Not applicable
Non- OneSign user workflow
Supported
Supported
Spine Combined workflow
Not applicable
Not applicable
Smartcard as proximity card workflow
Supported
Supported
Imprivata Walk Away Security
Honors lock command
Not applicable
Not applicable
Fade to Lock screensaver
Supported
Supported
Notification balloon
Not applicable
Supported
Citrix Workflows
Citrix Virtual Desktops
Supported
Supported
Citrix Virtual Applications
Supported
Supported
Virtual Kiosk Citrix for Virtual Desktops for Desktops
Supported
Supported
Virtual Kiosk for Citrix Published Applications
Supported
Supported
VMware Workflows
VMware Horizon Desktops
Supported
Supported
VMware Published Application Support
Not applicable
Supported
Virtual Kiosk for VMware Desktops
Not applicable
Supported
Virtual Kiosk for VMware Published Applications
Not applicable
Supported
Microsoft Workflows
Microsoft RDS/Remote PC Desktops
Supported
Supported
Microsoft RDS Applications
Not applicable
Supported
Virtual Kiosk for RDS/Remote PC Desktops
Not applicable
Supported
Virtual Kiosk for RDS Published Applications
Not applicable
Supported
Primary Authentication Modalities using Endpoint Operating System
Password
Supported
Supported
Proximity card
Supported
Supported
Smart card
Not applicable
Not applicable
Fingerprint biometrics
Supported
Supported
Question and Answer
Supported
Supported
Authentication/ Re-Authentication Modalities using Virtual Channel
Proximity card
Supported
Supported
Smart card
Not applicable
Not applicable
Fingerprint biometrics
Supported
Supported
Imprivata Hands Free Authentication
Supported
Not applicable
The overall PIE configuration on ThinOS includes the following tasks:
Configure the OneSign Admin Console. See,
Configure the OneSign Admin Console .
Install the Imprivata PIE agent package on ThinOS. See,
Install the Imprivata PIE package on ThinOS .
Enable the PIE mode on ThinOS using Admin Policy Tool or Wyse Management Suite. See,
Enable PIE mode on ThinOS .
If the
Security Mode for Imprivata settings is set to
High , upload the appliance SSL certificate using any of the following methods:
Configure the FUS on ThinOS (optional step). See,
Configure the Fast User Switching on ThinOS .