Dell Wyse ThinOS Version 9.0 Administrator’s Guide

ThinOS supports the Imprivata OneSign ProveID Embedded (PIE) feature that enables secure authentication to virtual desktops and applications. Using this feature, you can seamlessly access the clinical applications. The PIE solution simplifies access to roaming desktops with Citrix Virtual Apps and Desktops. You can also deploy a Citrix Virtual App hosted desktop with Fast User Switching (FUS) to eliminate the need for generic user log-ins. For more information about the Imprivata OneSign ProveID Embedded, see the documentation available at www.imprivata.com.

Table 1. Supported environment Supported environment

Component	Supported environment
Endpoints (Thin Clients)	Wyse 5470 All-in-One Thin Client Wyse 5470 Thin Client Wyse 5070 Thin Client Wyse 3040 Thin Client
Citrix environment	Citrix Virtual Apps and Desktop 7.15 CU5 Citrix Virtual Apps and Desktop 7 1912 LTSR
OneSign server	7.1.000.13
PIE Agent on the thin client	7.1.099.0153
Authentication methods	Network password Proximity card Security questions PIN (as a secondary factor) Fingerprint biometrics

Table 2. Imprivata ProveID Embedded feature matrixImprivata ProveID Embedded feature matrix

Feature	Description	ThinOS 9.0
General Features and Workflows	Imprivata Appliance failover	Supported
	Imprivata offline mode	Not applicable
	Imprivata self- service password reset	Supported
	Third-party self- service password reset	Not applicable
	Non- OneSign user workflow	Supported
	Spine Combined workflow	Not applicable
	Smartcard as proximity card workflow	Supported
Imprivata Walk Away Security	Honors lock command	Not applicable
	Fade to Lock screensaver	Supported
	Notification balloon	Not applicable
Citrix Workflows	Citrix Virtual Desktops	Supported
	Citrix Virtual Applications	Supported
	Virtual Kiosk Citrix for Virtual Desktops for Desktops	Supported
	Virtual Kiosk for Citrix Published Applications	Supported
Primary Authentication Modalities using Endpoint Operating System	Password	Supported
	Proximity card	Supported
	Smart card	Not applicable
	Fingerprint biometrics	Supported
	Question and Answer	Supported
Authentication/ Re-Authentication Modalities using Virtual Channel	Proximity card	Supported
	Smart card	Not applicable
	Fingerprint biometrics	Supported
	Imprivata Hands Free Authentication	Supported

The overall PIE configuration on ThinOS includes the following tasks:

1. Configure the OneSign Appliance. See, Configure the OneSign Appliance.
2. Configure the OneSign Admin Console. See, Configure the OneSign Admin Console.
3. Install the Imprivata PIE agent package on ThinOS. See, Install the Imprivata PIE package on ThinOS.
4. Enable the PIE mode on ThinOS using Admin Policy Tool or Wyse Management Suite. See, Enable PIE mode on ThinOS.
5. If the Security Mode for Imprivata settings is set to High, upload the appliance SSL certificate using any of the following methods:
   • Import the SSL certificate manually.
   • Import the SSL certificate automatically.
6. Configure the FUS on ThinOS (optional step). See, Configure the Fast User Switching on ThinOS.