Configure Enterprise Password AutoFill

Created: Modified: Checkout

Once you’ve set up, tested and automated your check out workflows and also validated your environment is supports Password AutoFill,  you’re ready to get started.

Password AutoFill is available only when Admin > Check Out > Identity Web Service is set to “Imprivata OneSign”.

Set up AutoFill in GroundControl

  1. In GroundControl, Admin > Check Out > Password AutoFill enable Password AutoFill.
  2. Set the option for Second factor authentication to match your OneSign configuration.

2FA is needed for Password AutoFill, but not for device Check Out. Users will be prompted to enter 2FA only when attempting to use the Password AutoFill extension when logging into an app.

Enable AutoFill on the device

Each device will need to be set up by hand to use the Imprivata’s AutoFill extension — unfortunately there is no way to do this automatically using MDM or GroundControl.

To enable Password AutoFill on the device, navigate to Settings> Passwords> AutoFill Passwords> Turn ON.  Allow filling from Locker and make sure Keychain is not checked.

This setting will persist between check outs, if you’re not erasing it the device. We highly recommend not erasing devices between check out for this reason!

Create upload and deploy OneSign Profiles

Refer to another article for detailed instructions on how to create application profiles for OneSign.


Check out our Password AutoFill FAQ.


Next: Custom Identity Web Services