Windows Login (Healthcare) - How to Configure Reauthentication Workflow for Epic EHR in Tenant Admin Portal

​

Introduction

The Reauthentication Workflow allows Tenant Admins to enforce additional authentication during an active Windows session for applications integrated with Epic EHR. This ensures that user identity is re-verified before performing sensitive actions or continuing access.

​

Prerequisites

• You must have access to Tenant Admin account.
• The Windows Login application must be created in the Tenant Admin Portal, for more information refer: How to create and configure Application Type - Passwordless

​

Steps to Configure Re-authentication Workflow

1. Log in to the Tenant Admin Portal.
2. On the Applications page, select the preferred Windows Login application. The application details page is displayed.
3. Click Configure tab> Epic EHR . The Epic EHR page is displayed.
4. Configure the following:
   1. Enable Reauthentication Workflow
   2. Configure Two User Authentication
   3. Reauthentication Current User (Second Factor)
5. Click Save. The Reauthentication workflow is successfully configured.

​

Enable Reauthentication Workflow

1. Turn on Enable Reauthentication Workflow toggle button.
2. Select one of the available reauthentication modes from dropdown: Application Factors: Uses authentication factors assigned at application level. First Factor Only: only reauthenticates using the first authentication factor configured. Second Factor Only: only reauthenticates using the second authentication factor configured.
3. Click Save. Reauthenticate Current User: Reauthenticates the currently logged-in Windows user using the configured authentication device.
4. Do the following:
   1. Select Reauthenticate Current User.
   2. From the Application Factor dropdown, choose the authentication factor assigned at the application level.
   3. Click Save.

​

Current User Editable

Reauthenticates the currently logged-in user but allows the authentication device to submit a different user if required.

​

Configure Two User Authentication

1. Under Mode for 1st user, select the authentication factor from dropdown.
2. Under Mode for 2nd user, select the authentication factor from dropdown.
3. Click Save.

​

Reauthenticate Current User - Second Factor

1. Select Reauthenticate Current User - Second Factor.
2. From the Application Factor dropdown, choose the authentication factor assigned at the application level:
   1. OLOID is Used as Primary and Secondary Auth Device
   2. OLOID is Used as Primary Authentication Device
   3. OLOID is Used as Secondary Authentication Device
3. Click Save.

​

Configure Factors

Configure the appropriate Primary and Secondary factors for second-factor reauthentication through Oloid. To configure factors, do the following:

1. Under Select Primary Factor, select the authentication factor from dropdown.
2. Under Select Secondary Factor, select the authentication factor from dropdown.
3. Click Save.

Reauthentication workflow successfully configured.