> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Login (Healthcare) - How to Configure Epic EHR in the Tenant Admin Portal

> This document provides a step by step guide on how to configure Epic EHR for Windows Authenticator (Healthcare) in the tenant admin portal.

## Introduction

Tenant Admin can configure **Epic EHR for Windows Login** in the Tenant Admin Portal which enables secure authentication into Epic applications using Windows Authenticator (Healthcare). This setup allows Tenant Admins to define how users are authenticated into Epic

## Prerequisites

* You must have a Tenant Admin account.

* The Windows Login application must be created in the Tenant Admin Portal, for more information see: [How to create and configure Application Type - Passwordless](https://oloid.help/en/articles/8300330-how-to-create-and-configure-application-type-passwordless)

* Windows Authenticator Healthcare build must be installed in the system.

* Epic Vault Password must be created for both the user.

  > [!NOTE]
  >
  > **Note:** Vault Password is required for Username/ Password flow. For more information, refer: [Chrome Vault - How to create Vault Password for a user](https://oloid.help/en/articles/9936961-chrome-vault-how-to-create-vault-password-for-a-user)

* Ensure that Epic Hyperspace is installed. For more Information. refer: [How to Install Epic Hyperspace for Epic EHR](https://oloid.help/en/articles/13722773-windows-authenticator-healthcare-how-to-install-epic-hyperspace-for-epic-ehr)

* Ensure Epic Subspace Config is configured from the sys admin portal.

## Steps to configure Epic EHR for Windows Login

1. Login to the Tenant Admin Portal.
2. On the homepage on the left menu panel select **Home** > **Applications.**

   ![How to Configure Epic EHR in the Tenant... - screenshot 1](https://mintcdn.com/oloid-999c42b2/OjAp6nOvYA-0A3Ej/images/intercom/13714282/image-94b1b089.png?fit=max\&auto=format\&n=OjAp6nOvYA-0A3Ej\&q=85\&s=656551d9970ba3f4b043ddeefb172f8d)
3. Select the application that is configured in the Supervisor App (Windows Authenticator App).
   The application details page is displayed.
4. Click **Configure** tab> **Epic EHR** tab.

   ![How to Configure Epic EHR in the Tenant... - screenshot 2](https://mintcdn.com/oloid-999c42b2/OjAp6nOvYA-0A3Ej/images/intercom/13714282/image-8a13928b.png?fit=max\&auto=format\&n=OjAp6nOvYA-0A3Ej\&q=85\&s=f897846e5996895bffdd898bf306d2c8)

   The Epic EHR page is displayed.
5. Turn on the **Enable Epic SSO** toggle. For more information, refer: [Windows Login (Healthcare) - How to Enable Epic SSO in the Tenant Admin Portal](https://oloid.help/en/articles/13713982-windows-login-healthcare-how-to-enable-epic-sso-in-the-tenant-admin-portal)

   ![How to Configure Epic EHR in the Tenant... - screenshot 3](https://mintcdn.com/oloid-999c42b2/OjAp6nOvYA-0A3Ej/images/intercom/13714282/image-9e3ec7fa.png?fit=max\&auto=format\&n=OjAp6nOvYA-0A3Ej\&q=85\&s=664fa10b08ce206d61cdb8b69c04ec71)
6. [Configure Epic Authentication Mode](#configure-epic-authentication-mode)
7. Click **Save** to apply changes.
   Epic EHR is successfully configured.

### Configure Epic Authentication Mode

This section allows admins to define how Oloid authenticates users into Epic.

You can configure authentication using either:

* Stored Epic username/password (metadata-based authentication), or
* [Epic-configured SAML Identity Provider (SAML Flow)](#saml-flow)

#### Username / Password Flow

1. Select **Username / Password Flow**.

   > [!NOTE]
   >
   > **Note:** Ensure each user has a valid Epic username and password stored under their metadata.

2. Enable **Validate EPIC Credentials** if required.

   > [!NOTE]
   >
   > **Note:** Check **Validate EPIC Credentials** to prompt users to enter Epic credentials if previously stored credentials are incorrect or invalid.

3. Click **Save**.

   ![How to Configure Epic EHR in the Tenant... - screenshot 4](https://mintcdn.com/oloid-999c42b2/OjAp6nOvYA-0A3Ej/images/intercom/13714282/image-87cfa40a.png?fit=max\&auto=format\&n=OjAp6nOvYA-0A3Ej\&q=85\&s=86dc0875a4795e9094d73e50aae28771)

#### SAML Flow

Use this option to authenticate users using an Epic-configured SAML Identity Provider.

1. Select **SAML Flow**.

2. From the **SAML IDP** dropdown, select the configured Identity Provider.

   > [!NOTE]
   >
   > **Note:** Ensure the SAML IDP configuration has been completed in Epic and Oloid prior to selection. For More: [How to Create IDP Profile for Security Assertion Markup Language (SAML) in the Tenant Admin Portal](https://oloid.help/en/articles/12808717-how-to-create-idp-profile-for-security-assertion-markup-language-saml-in-the-tenant-admin-portal)

3. Click **Save**.

![How to Configure Epic EHR in the Tenant... - screenshot 5](https://mintcdn.com/oloid-999c42b2/OjAp6nOvYA-0A3Ej/images/intercom/13714282/image-cbe1734c.png?fit=max\&auto=format\&n=OjAp6nOvYA-0A3Ej\&q=85\&s=6c4014b721ab91187c8cbdcf4c9579ca)

Epic EHR is successfully configured.

![How to Configure Epic EHR in the Tenant... - screenshot 6](https://mintcdn.com/oloid-999c42b2/OjAp6nOvYA-0A3Ej/images/intercom/13714282/image-bb6f87a0.png?fit=max\&auto=format\&n=OjAp6nOvYA-0A3Ej\&q=85\&s=31626021f38a1f511aed957f008409fd)

***

##### Related Documents

**[How to Configure Re-authentication Workflow for Epic EHR in Tenant Admin Portal](https://oloid.help/en/articles/14650126-how-to-configure-re-authentication-workflow-for-epic-ehr-in-tenant-admin-portal)**

***

##### Sync Configuration to Apply Changes

You must sync configuration in the supervisor app to apply changes . For Detailed steps, see [How to sync configuration in Supervisor App](https://oloid.help/en/articles/9329264-how-to-sync-configuration-in-supervisor-app)