Deploying and Managing Epic Apps with Microsoft Intune

Transcription

1 Deploying and Managing Epic Apps with Microsoft Intune Introduction Many healthcare facilities use Microsoft Intune to manage their mobile devices and the apps on those devices. This document is a how-to guide for customers who are both Microsoft Intune customers and Epic customers. If there is additional functionality or integration that you need, please contact your Microsoft or Epic representative. Microsoft Intune Microsoft Intune is a cloud-based mobile device management, mobile app management, and PC management product. We do not exhaustively cover all Intune topics in this document. We only cover those that pertain to the scenario we focus on: deploying and managing Epic s Haiku and Canto apps in an Intune deployment. More information about Microsoft Intune can be found by following the links listed in the reference content that is listed at the end of this note. Epic Mobile Apps Haiku and Canto, Epic's mobile apps, are designed to give physicians Electronic Medical Record (EMR) access outside the clinic or hospital and to increase physicians' opportunities to provide care. Clinicians can use Haiku and Canto to review a patient's chart, respond to In Basket messages, prescribe medications, take clinical photos, and capture professional charges. With Rover, authorized clinical users of Epic s electronic health records have secure access to tools for clinical review, patient list management, medication administration, specimen collection, vitals, and Intake & Output (I/O) right on their mobile device. Deploying the Apps with Microsoft Intune Deploying the Epic mobile apps on ios via Microsoft Intune is a four-step process: 1. Author a VPN policy. 2. Author an App Configuration Policy. 3. Add the apps to Microsoft Intune. 4. Deploy the apps to groups of users. This document is focused on deploying the ios apps. When deploying on Android, adding and deploying the apps is the same, but the VPN and App Configuration policies are different. All of these operations are performed using the Microsoft Intune administration console. In order to use the console you need an Intune subscription. To get started, launch the console by logging in here:

2 The management console is a Silverlight app, so your browser must support Silverlight. Adding an app to Microsoft Intune is done by using a Microsoft ClickOnce app, so your platform must support ClickOnce apps. Author App Configuration and VPN Policies App Configuration allows you to optionally specify XML with which to preconfigure the Epic apps. If you choose to use Microsoft Intune to specify the configuration, use the configuration key EpicMobileConfigurationURL and the URL hosting your configuration to Apple's managed app configuration. Please see the Connect Securely to Your Interconnect Server section of the Setup and Support Guide in Galaxy for more information on creating the configuration file. Additionally, Intune documentation has more details on App Configuration and VPN support. You create the policy by selecting Policy, then Configuration Policies: Click Add.., then select Mobile App Configuration Policy from the list:

3 To specify the configuration XML that will be used to preconfigure the app, use the following format (following the guidelines from Epic to get the exact URL string below): <dict> <key> EpicMobileConfigurationURL</key> <string>epiccanto://handheld/config/ee7d dea75e9a</string> </dict> Paste the XML into the policy screen, as seen below. Validate it and then save it.

4 A VPN policy is another type of policy, created by choosing VPN Profile from the list of configuration templates: When both policies have been created, you will see them listed:

5 Add the apps to Microsoft Intune Navigate to the Apps screen shown below, and click Add App. In the ClickOnce app that opens, choose Managed ios App from the App Store if deploying an ios app, or External link if deploying an Android app. After making your selection, you will see this screen:

6 Your next step is to copy the deep link to the Haiku or Canto store app into the URL dialog. To find the deep link, follow these steps: App Epic Canto app for ios Epic Haiku app for ios Rover app for ios Deep Link 1. Open this deep link in a browser: 2. When the browser resolves the URL address, copy that URL address into your clipboard. For example, the above deep link resolves to this URL address: 3. Paste the URL address into the box for specifying the URL. See the screen below this table. Follow the same steps as for the Epic Canto app, but start with this deep link: Follow the same steps as for the Epic Canto app, but start with this deep link:

7 Click Next to continue. Complete the app info. Note that you need to use an icon that is no bigger than 250x250 pixels. Click Next to continue. Select the required platform. In this case, Epic Canto is an ipad app, so we select an ipad requirement:

8 Click Next and review the summary information: Click Upload to complete the process. You will see this screen if you have completed this successfully.

9 Close the dialog. If you are adding the Haiku app for Android, you will follow the same steps, with these differences: 1. In the screen below, select External link. 2. When specifying the path to the Google Play store app, enter this link directly: Deploy the app to groups of users To deploy the app, select it and open it in the Intune Management console:

10 Double-click it to open it, then click Manage Deployment. Select the groups, add them to the selected groups, then click Next:

11 Choose the type of installation:

12 Choose the VPN policy you created earlier, and click Next.

13 Next, choose the App Configuration policy you also created earlier :

14 Click Finish. You can now look at the list of apps and see that Epic Canto is deployed: Where to Learn More Epic Apps Contact your Epic representative if you have any questions. Microsoft Intune Please use the online documentation: The Microsoft Intune evaluation guide: The Microsoft Intune quick start guide: App Configuration support in Microsoft Intune: VPN support in Microsoft Intune: