> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Login (Healthcare) - How to Configure Reauthentication Workflow for Epic EHR in Tenant Admin Portal

> The Reauthentication Workflow allows Tenant Admins to enforce additional authentication during an active Windows session for applications integrated with Epic...

## Introduction

The **Reauthentication Workflow** allows Tenant Admins to enforce additional authentication during an active Windows session for applications integrated with Epic EHR. This ensures that user identity is re-verified before performing sensitive actions or continuing access.

## Prerequisites

* You must have access to Tenant Admin account.
* The Windows Login application must be created in the Tenant Admin Portal, for more information refer: [How to create and configure Application Type - Passwordless](https://oloid.help/en/articles/8300330-how-to-create-and-configure-application-type-passwordless)

## Steps to Configure Re-authentication Workflow

1. Log in to the Tenant Admin Portal.
2. On the **Applications** page, select the preferred **Windows Login application**.

   ![How to Configure Reauthentication... - screenshot 1](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-94b1b089.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=078b65d87ed547ab87c2dc10c96d3284)

   The application details page is displayed.

   ![How to Configure Reauthentication... - screenshot 2](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-307351e4.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=931276d9f4190460176c029d13c71596)
3. Click **Configure** tab> **Epic EHR** .

   ![How to Configure Reauthentication... - screenshot 3](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-86235462.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=2f7c4eca664a9eaea2de2d270d6880ae)

   The Epic EHR page is displayed.
4. Configure the following:
   1. **[Enable Reauthentication Workflow](#enable-reauthentication-workflow)**
   2. **[Configure Two User Authentication](#configure-two-user-authentication)**
   3. **Reauthentication Current User (Second Factor)**
5. Click **Save.**
   The Reauthentication workflow is successfully configured.

#### Enable Reauthentication Workflow

1. Turn on **Enable Reauthentication Workflow** toggle button.
2. Select one of the available reauthentication modes from dropdown:
   **Application Factors**: Uses authentication factors assigned at application level.
   **First Factor Only**: only reauthenticates using the first authentication factor configured.
   **Second Factor Only**: only reauthenticates using the second authentication factor configured.
3. Click **Save**.

   ![How to Configure Reauthentication... - screenshot 4](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-112cac0e.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=662f0cd69e2ada796ac52f52b3b0bf43)

   Reauthenticate Current User: Reauthenticates the currently logged-in Windows user using the configured authentication device.
4. Do the following:
   1. Select **Reauthenticate Current User**.
   2. From the Application Factor dropdown, choose the authentication factor assigned at the application level.
   3. Click **Save**.

#### Current User Editable

Reauthenticates the currently logged-in user but allows the authentication device to submit a different user if required.

> [!NOTE]
>
> **Note:** The default factor for this authentication is set to application factor and cannot be changed.

![How to Configure Reauthentication... - screenshot 5](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-7a2a4b88.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=52be46ed05b083a85e31af3f416f43e1)

#### Configure Two User Authentication

1. Under Mode for 1st user, select the **authentication factor** from dropdown.
2. Under Mode for 2nd user, select the **authentication factor** from dropdown.
3. Click **Save**.

![How to Configure Reauthentication... - screenshot 6](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-330a2f0f.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=d54bd8af442b0e7648ab269d6ee34e83)

#### Reauthenticate Current User - Second Factor

1. Select **Reauthenticate Current User - Second Factor**.
2. From the Application Factor dropdown, choose the authentication factor assigned at the application level:
   1. OLOID is Used as Primary and Secondary Auth Device
   2. OLOID is Used as Primary Authentication Device
   3. OLOID is Used as Secondary Authentication Device
3. Click **Save**.

![How to Configure Reauthentication... - screenshot 7](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-e9ee625e.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=6885ea99bb77d6ad36c506ac8aea2bb6)

#### Configure Factors

Configure the appropriate Primary and Secondary factors for second-factor reauthentication through Oloid.
To configure factors, do the following:

1. Under **Select Primary Factor**, select the **authentication factor** from dropdown.
2. Under **Select Secondary Factor**, select the **authentication factor** from dropdown.
3. Click **Save**.

> [!NOTE]
>
> **Note:** When both options are enabled, ensure that the Primary and Secondary factors must be different.

![How to Configure Reauthentication... - screenshot 8](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-bfe68bbb.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=966f5a24b0e183f58e43859ccd3eccba)

Reauthentication workflow successfully configured.

![How to Configure Reauthentication... - screenshot 9](https://mintcdn.com/oloid-999c42b2/lUxk1EoVdjyJmA39/images/intercom/14650126/image-cb466221.png?fit=max\&auto=format\&n=lUxk1EoVdjyJmA39\&q=85\&s=5d3ff9a2e85d5d602feb5cd7137468c8)