Updates to Imprivata Log-in Process

In March, we asked all employees to be extra vigilant about Imprivata multi-factor authentication requests after cyberattacks at 2 other healthcare organizations. 

Imprivata is the app we use to verify your identity when you log in to a Carilion application outside of work. This helps ensure that no one else can use your credentials to access your AD account and Carilion’s systems, such as Epic, Outlook, or Workday. If cybercriminals can access your AD account, they can steal your information or even change where your paycheck is sent. 

To keep our information secure and reduce the risk of attacks happening here, we are making some updates to our process. 

The current/old process: When you log in to a Carilion app outside of work, you receive an Imprivata notification on your phone and click “yes” to verify it’s you making the log-in attempt. Cybercriminals try to exploit this process by sending many rapid notifications, in the hopes that people will click “yes” to stop the influx of notifications. 

New process beginning Thursday, June 11: When you log in to a Carilion app outside of work, you’ll see an Imprivata notification with a 2-digit code. You’ll enter the 2-digit code on your phone to verify your identity and log in to the application. Screenshots are shown below. This is more secure, because only you will have both the 2-digit code and the smartphone you registered with TSG for notifications. 

Resources 

To learn more about Imprivata multi-factor authentication and enroll your device, visit the Multi-Factor Authentication page on the TSG hub. 

If you have questions or need help, contact the Technology Service Center through Employee Center.