Kiosk Tap & Go in Companion Mode
Starting in eLux® 7.2609.0, an eLux endpoint can run the Imprivata virtual channel even when Imprivata is not the endpoint's own authentication type — previously, the virtual channel only came up when Imprivata was the login method. This is companion mode: the endpoint stays set to no authentication (
AuthType = None), and Imprivata only manages the session inside the VDA (Virtual Delivery Agent, the Citrix® component that hosts the session) by forwarding badge taps into it.
This is different from the Tap & Go behavior described in eLux Usage, where Imprivata is the eLux device's own login method. In companion mode, the eLux login screen never shows Imprivata at all.
What the user sees
| Action | Result |
|---|---|
| Tap badge at the Imprivata lock screen | Signs in to their applications inside the Citrix session. |
| Tap out | The VDI session locks. The eLux desktop does not show a lock screen, and the Citrix session stays connected — no reconnect happens. |
| Another user taps in | The VDI user switches in place. eLux does not log off or restart the session. |
Requirements
-
eLux 7.2609.0 or later on the endpoint.
-
The eLux endpoint set to no authentication (
AuthType = None).
Configuration
| # | Side | Setting | Where | Value | Required |
|---|---|---|---|---|---|
| 1 | Endpoint | Authentication type | Scout Board → Device Configuration → User Authentication | None |
Yes |
| 2 | Endpoint | [Imprivata] BootstrapUrl |
Scout advanced file entry on /setup/terminal.ini |
Your OneSign URL, for example https://onesign.example.com |
Yes |
| 3 | Endpoint | [Imprivata] AgentType |
Scout advanced file entry on /setup/terminal.ini |
1, 2, or 3. Defaults to 3. |
Only if you need Agent Type 2 |
| 4 | VDA | Type |
Registry key HKLM\SOFTWARE\SSOProvider\ISXAgent |
Must match the endpoint's AgentType. Restart the VDA after changing it. |
Yes |
| 5 | VDA | LockRemoteSessionWithAgentOnClient |
Registry key HKLM\SOFTWARE\SSOProvider\ISXAgent |
1 |
Yes |