Check Out and Password AutoFill Prerequisites

Created: Modified: Checkout

Check Out and Password AutoFill have the following prerequisites.

Check Out Prerequisites
  • Imprivata must enable this feature for you. There may be an additional charge depending on your current Mobile Access Management license. When it is available in your organization, turn on the feature in Admin > Check Out.
  • Imprivata Locker App:
    • iOS app. To obtain the Imprivata Locker app for iOS devices, your organization must be enrolled in Apple’s iTunes Volume Purchase Program. See the next section for more information.
    • Android app. Obtain the Imprivata Locker app for Android devices from your Managed Google Play account.
  • MDM: Your devices must be managed by an MDM.
    • Devices enrolled in Apple Business Manager (formerly known as Device Enrollment Program or DEP), non-DEP devices are supported. If using DEP, DEP Supervision Identity features must be enabled.
    • Android devices must be managed by an MDM. For the list of supported MDMs for Android, see the system requirements.
  • Network:
    • The locked devices must be able to reach your MAM server (usually www.groundctl.com) on HTTPS/443.
    • Devices using Password AutoFill require access to the Imprivata appliance over the network. Make sure your network firewall allows access. For more information, see the system requirements.
  • Notifications: The Imprivata Locker app requires notification access. You must set up a profile in your MDM to allow Locker to display notifications.
    • NOTE:  iOS only allows for a single notification profile to be installed on a device.
      If you already have an existing profile in your MDM that sets notifications, add the Imprivata Locker app to it, rather than create a new profile.
  • Passcode Management: Mobile Access Management cannot automatically connect to passcode locked devices.
    If you are enforcing passcodes in your organization, the passcode must be cleared via MDM when using Check Out. For more information, see this article.
  • Imprivata Licensing: When using Check Out integrated with Imprivata Enterprise Management (formerly Imprivata OneSign), an EAM Authentication Management license is required.
Password AutoFill Specific Prerequisites
  • For iOS devices:
    • Imprivata Locker app (iOS) 3.0 or later.
    • Devices must be on a supported iOS version. See the system requirements.
    • Each device must be set up manually to use the Imprivata’s AutoFill extension — unfortunately there is no way to do this automatically using MDM or Imprivata Mobile Access Management. To configure, see these instructions.
  • For Android devices:
    • Imprivata Locker app (Android) 1.1 or later.
    • Devices must be on a supported Android version. See the system requirements.
  • Imprivata Enterprise Access Management (Imprivata OneSign) is required. All currently maintained versions of Imprivata Enterprise Access Management are supported.
  • Imprivata Enterprise Access Management licenses:
    SSO licenses are required for AutoFill users, in addition to Authentication Management licenses.
  • MDM must allow autofill features via Restrictions profile, if disabled.
Required Hardware
Known Issues
  • On Android 10 and later devices, Imprivata Locker for Android’s Autofill framework takes two passes to learn the password for apps that have two login pages.
    When an app (such as Microsoft Teams) has two login pages, one for Username input and one for Password input, Locker Android’s Autofill framework only saves the Username credentials.
    To work around this issue, the user should save the credentials again during the next authentication attempt.
  • Imprivata Locker for Android’s Autofill framework cannot capture credentials from masked fields in web applications.
    The fields can be learned if they are unmasked.

Next: The Locker App