Administrator Guide

The following OneSign features or actions are supported:
● Client and Broker authentication
○ Citrix Virtual Apps (formerly Citrix XenApp)
○ Citrix Virtual Apps and Desktops (formerly Citrix XenDesktop)
● Kiosk Mode
● Fast User Switching
● Non-OneSign user VDI access
● Hotkey Disconnect
● Proximity card reader redirection
● Guided Question and Answer login
● Authenticate w/Password
● Authenticate w/Password + Password Change
● Authenticate w/Password + Password Change | New Password is Invalid
● Authenticate w/Proximity Card + Password
● Authenticate w/Proximity Card + Pin
● Authenticate w/Proximity Card + Pin | Pin not enrolled
● Authenticate w/Proximity Card Alone | Retrieve Password
● Retrieve User Identity Password
● Reset User Identity Password
● Update User Identity Password
● Enroll Proximity Card
● Lock/Unlock Terminal with Proximity CardLock/Unlock Terminal with Proximity Card
NOTE:
ThinOS supports Imprivata WebAPI version 13. It includes OneSign Objects (WebAPI v13) and Fingerprint
Authentication (WebAPI v13).
Configure objects on Imprivata Server
About this task
This section describes how to configure different objects on the Imprivata server.
Steps
1. To configure the general configuration object, do the following:
a. On the Imprivata server, click Computer policy, and then click General tab.
b. Select the check box to enable users to shut down and restart the device from the lock screen.
● Shutdown Allow
○ Select the check box to enable the feature. If enabled, the shutdown and restart icons are displayed in the
ThinOS login and locked windows.
○ Clear the check box to disable the feature. If disabled, the shutdown and restart icons are not available.
● FailedOneSignAuth Allow—Click either Yes or No. If you are a non-OneSign user, click No to log in to the broker.
● Display name format— Use this option to set different formats for the account name that is displayed in pop-up
notifications.
2. To configure the walkway configuration object, do the following:
a. On the Imprivata server, click Computer policy, and then click the Walk Away tab.
● Key mouse inactivity enabled and behavior—Use this option to set the action when the keyboard and mouse are left
idle or inactive. The In addition to keyboard and mouse inactivity check box is not supported.
● Passive proximity cards—Use this option to enable the proximity card usage.
○ If you want to use a proximity card to lock the thin client, select the Tap to lock check box.
○ If you want to lock the thin client and log in as a different user. Select the Switch users check box.
● Lock warning enabled and type—Use this option to enable or disable warning messages. The following three types are
supported:
○ None—No warning messages are displayed.
○ Notification balloon—ThinOS displays a notification window.
○ Screensaver—Hide the display contents before the thin client locks.
● Warning message—Use this option to customize your warning messages
56
Configuring connectivity