Configure Enterprise Password AutoFill on iOS Devices

Created: Modified: Checkout

NOTE: This article applies to iOS devices only.

After you’ve set up, tested and automated your check out workflows and also validated your environment supports Password AutoFill, you’re ready to get started.

Password AutoFill is available only when Admin > Check Out > Identity Provider is set to Imprivata OneSign.

Configure AutoFill in GroundControl

Two Factor Authentication is needed for Password AutoFill, but not for device Check Out. Users will be prompted to enter 2FA only when attempting to use the Password AutoFill extension when logging into an app.

    1. In GroundControl, Admin > Check Out > Password AutoFill enable Password AutoFill.
    2. Set the option for Second factor authentication to match your Imprivata OneSign configuration.

Add a Set Restrictions Action to the Workflow

Adding a Set Restrictions action with the Disable Safari Auto-fill checkbox selected disables the built-in iOS keychain, but should allow for Locker iOS to still be selected.

To add a Set Restrictions action to the Workflow:

  1. Edit the Workflow. From the Add action menu, select Set Restrictions.
  2. On the Other Restrictions tab, select Disable Safari Auto-fill and click Save.
Enable AutoFill on the iOS Device

Each iOS device must be manually configured to the Imprivata AutoFill extension — unfortunately there is no way to do this automatically using MDM or GroundControl.

To enable Password AutoFill on the iOS device:

  1. Navigate to Settings > Passwords > AutoFill Passwords > Turn ON.
  2. Allow filling from Locker.
  3. Make sure Keychain is not checked.

This setting will persist between check outs, if you’re not erasing it the device. We highly recommend not erasing devices between check out for this reason!

If AutoFill is enabled on the GroundControl server, but a device does not have AutoFill set in Settings, the device will show the following reminder screen on Check Out.

Create Upload and Deploy Imprivata OneSign Profiles

For detailed instructions on creating application profiles for Imprivata OneSign, see this article.

Questions?

Check out our Password AutoFill FAQ.

Next: Custom Identity Web Services