Dell ThinOS 2402 Administrator’s Guide

ThinOS supports the Imprivata OneSign ProveID Embedded (PIE) feature that enables secure authentication to virtual desktops and applications. Using this feature, you can seamlessly access the clinical applications. The PIE solution simplifies access to roaming desktops with Citrix Virtual Apps and Desktops, VMware Horizon Desktops and Applications, and Remote Desktop Services. You can also deploy a Citrix Virtual App hosted desktop with Fast User Switching (FUS) to eliminate the need for generic user log-ins. For more information about the Imprivata OneSign ProveID Embedded, see the documentation available at www.imprivata.com.

Table 1. Supported environment Supported environment

Component	Supported environment
Endpoints (Thin Clients)	Wyse 5470 All-in-One Thin Client Wyse 5470 Thin Client Wyse 5070 Thin Client Wyse 3040 Thin Client
VDI environment	Citrix Desktop Citrix XenApp Microsoft Remote Desktop Services session based and virtual desktop Microsoft Remote Desktop Services Remote PC VMware Horizon - Desktops
Authentication methods	Network password Proximity card Security questions PIN (as a secondary factor) Fingerprint biometrics

Table 2. Imprivata ProveID Embedded feature matrixImprivata ProveID Embedded feature matrix

Feature	Description	ThinOS PIE	ThinOS PIW
General Features and Workflows	Imprivata Appliance failover	Supported	Supported
	Imprivata offline mode	Not applicable	Not applicable
	Imprivata self- service password reset	Supported	Supported
	Third-party self-service password reset	Not applicable	Not applicable
	Non- OneSign user workflow	Supported	Supported
	Spine Combined workflow	Not applicable	Not applicable
	Smartcard as proximity card workflow	Supported	Supported
Imprivata Walk Away Security	Honors lock command	Not applicable	Not applicable
	Fade to Lock screensaver	Supported	Supported
	Notification balloon	Not applicable	Supported
Citrix Workflows	Citrix Virtual Desktops	Supported	Supported
	Citrix Virtual Applications	Supported	Supported
	Virtual Kiosk Citrix for Virtual Desktops for Desktops	Supported	Supported
	Virtual Kiosk for Citrix Published Applications	Supported	Supported
VMware Workflows	VMware Horizon Desktops	Supported	Supported
	VMware Published Application Support	Not applicable	Supported
	Virtual Kiosk for VMware Desktops	Not applicable	Supported
	Virtual Kiosk for VMware Published Applications	Not applicable	Supported
Microsoft Workflows	Microsoft RDS/Remote PC Desktops	Supported	Supported
	Microsoft RDS Applications	Not applicable	Supported
	Virtual Kiosk for RDS/Remote PC Desktops	Not applicable	Supported
	Virtual Kiosk for RDS Published Applications	Not applicable	Supported
Primary Authentication Modalities using Endpoint Operating System	Password	Supported	Supported
	Proximity card	Supported	Supported
	Smart card	Not applicable	Not applicable
	Fingerprint biometrics	Supported	Supported
	Question and Answer	Supported	Supported
Authentication/ Re-Authentication Modalities using Virtual Channel	Proximity card	Supported	Supported
	Smart card	Not applicable	Not applicable
	Fingerprint biometrics	Supported	Supported
	Imprivata Hands Free Authentication	Supported	Not applicable

The overall PIE configuration on ThinOS includes the following tasks:

1. Configure the OneSign Admin Console. See, Configure the OneSign Admin Console.
2. Install the Imprivata PIE agent package on ThinOS. See, Install the Imprivata PIE package on ThinOS.
3. Enable the PIE mode on ThinOS using Admin Policy Tool or Wyse Management Suite. See, Enable PIE mode on ThinOS.
4. If the Security Mode for Imprivata settings is set to High, upload the appliance SSL certificate using any of the following methods:
   • Import the SSL certificate manually.
   • Import the SSL certificate automatically.
5. Configure the FUS on ThinOS (optional step). See, Configure the Fast User Switching on ThinOS.