The Kipu EMR allows you to configure additional layers of security by only allowing EMR access for specific users on approved devices and networks (identified by IP addresses).
Required Permissions: Super Admins or users with the Manage Users feature can complete the following setup steps.
This security setting contains three specific features:
- Restrict device access: This is a user-specific feature and should only be assigned to individuals that will work exclusively on authorized devices or networks. These devices are typically within the workplace premises.
- Authorize IP Addresses: This requires the user to be on an approved network to access the Kipu EMR.
- Authorize Devices: Authorize select devices for Kipu EMR access. Users with the Restrict Device Access feature will only be able to use the authorized browser (typically a device within the facility).
You can use the restrict device access user feature with IP address restrictions, device restrictions, or both.
Enable Two-Factor Authentication: Authorizing IP addresses and devices will bypass two-factor authentication for those specified devices and/or networks. We highly recommend enabling two-factor authentication for all other users to maintain system security.
Restrict Device Access
Let's review how to assign the Restrict Device Access feature to a user profile.
Important: If a user with Restrict Device Access tries to log in from an unauthorized location or device, the user will get an error message "Your account does not allow access from this browser."
- Click on your initials and choose Manage Users.
- From the Active Users list, locate the user and click Edit.
- From the Features section, check Restrict Device Access.
- Click Update to save changes.
Note: If you don't see the Restrict Device Access feature, please reach out to the Support team. They can enable this functionality for your instance.
Add Allowed IP Addresses
To ensure users with the Restrict Device Access feature can access the Kipu EMR, please add all approved facility IP addresses to your instance using the following steps.
- Click on your initials and choose Manage Users.
- Open the Security tab.
- Enter all IP addresses your users are allowed to log in from in Authorize IP Numbers box. Please separate values with a comma and a space.
- Need help finding your IP Addresses? Try completing a Google search for "what's my IP address."
- Click on Save IP numbers.
IP Address Expected Behavior
Setting up IP Addresses will only impact users with the Restrict Device Access feature enabled on their profile.
- Users with Restrict Device Access will be able to log in from the added IP addresses/networks only.
- Users without Restrict Device Access feature will be able to log in from any IP address.
Add an Approved Device
You can add approved devices in addition to IP restrictions. To authorize a device:
- The Super Admin or user with Manage Users permission must log into Kipu EMR using their credentials from the user's workstation.
- Click on your initials and choose Manage Users.
- Open the Security tab.
- Click on Authorize this device button.
- Log out.
- Have the user with Restrict Device Access log into the EMR from using this device.
- If you are using IP limitations as well, the user will be able to access the Kipu EMR from the authorized device even outside of the allowed IP address(es).
Comments
0 comments
Article is closed for comments.