EMR Login: Federated Authentication

This feature is available by request and comes with a one-time set-up fee. Contact your implementation specialist to set up your instance.

The Federated Authentication feature allows organizations to use their preferred identity provider credentials (such as Microsoft Azure, Active Directory, OneLogin, etc.) to log into the Kipu EMR. Doing so means one less login for users to remember, makes it easier for organizations to shut off accounts if users are terminated, and also allows them to have more control over the password requirements and resets.

Federated Authentication Set-Up

If you are interested in adding this paid feature, contact your Kipu implementation specialist. 

You can confirm that the feature is enabled or confirm which email domains are included by navigating to Settings > Instance and then scrolling down to the Federated Authentication section. 

Users whose email addresses contain the SSO email domain will be able to log in using their SSO credentials. 

Note: If your organization has users from third parties (such as billing companies, Kipu employees, etc.) they will continue to log in as usual.

When this setting is enabled, users who are currently signed in will not be impacted until the next time they log in.

The User Information page appears differently when Federated Authentication is enabled.

Logging in Using Federated Authentication

Once the Federated Authentication feature has been enabled, login will proceed as follows for users whose emails contain the set SSO email domain.

1. Navigate to your Kipu instance and enter your email address. Click Continue.
   1. If you are already logged into the chosen identity provider, you will be automatically taken to the Kipu EMR Dashboard.
   2. If you have not already logged in, enter the email and password tied to the chosen identity provider. This screen is unique to each organization.

Note: The first time you log into the EMR using federated authentication, the process may take longer as multiple verifications will be occurring in the background.

Lock Screen Feature / PIN Functionality

When the feature is enabled, there is a different workflow for logging in using a lock screen. Usually to unlock the screen you have to enter your Kipu password. However, since the Kipu password is no longer relevant, you will log in using the PIN you use for signing notes.

1. Click on the PIN field and enter the PIN you use for signing notes, then click Confirm PIN.
2. If you need to set up a PIN you will be prompted to do so when you return to lock the screen.
3. If you have forgotten your PIN, click Forgot PIN?
4. You will receive an email prompting you to reset your PIN by clicking on the Reset PIN text. Follow the prompts to reset your PIN.