Biometric

The biometric authentication type can be configured as a primary or secondary authentication into ExactAccess SSO. During enrollment, the user will still provide their Active Directory password in order to maintain passthrough authentication scenarios.

Supported Readers

• EikonTouch-710
• IMP-1C

Setting Biometric as Primary Authentication Method

1. Log-in as a Local Administrator to the workstation you would like to make changes on.

   • Note: The XA Client Configuration tool will only run under an account with Local Administrator privileges.

2. Open the XA Client Configuration tool and click the Kiosk Mode tab.
   

   
   

3. To enable fingerprint support, select "Fingerprint" from the Primary Authentication Method drop-down box located in the section titled Other.

4. To change server or refresh policies, select the Biometric tab and configure as needed.

   • Note: This setting should already have a value present after running the RapidIdentity plugin for Biometrics installation, but can be updated here. If this value is blank, ensure the RapidIdentity plugin for Biometrics installation has been completed.
     
   ℹ️ MFA Policy Settings & Synchronization

   It will be necessary to synchronize the client to the MFA server in order for the MFA client to receive the correct registry settings for biometrics configured in the MFA policy. This includes the device driver name, the MFA server name, and server timeout values. Other values may be retrieved as needed. See our MFA Policy articles for more information:

   • Creating an MFA Policy
   • Available Hardware Settings for MFA Policy

   
   
   Not all policies are applicable or will be used by the XA Client.

5. Click OK.

6. Lock or Logoff of ExactAccess for the setting change(s) to take effect.

Enrolling Users

See the following articles regarding user enrollment for biometrics:

• Installation of RapidIdentity MFA Client
• Configuration of MFA Enrollment Workstation
• User enrollment process for biometrics

Registry Settings

In order to set or push out the primary authentication method to biometric via registry, set the following registry value(s):

Registry Path

HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ExactAccess\XAServerManager

Value

Alternate Values