Multi-Factor Authentication

Mirth® Connect by NextGen Healthcare User Guide

LDAP Authorization

The LDAP Authorization extension replaces the existing authentication mechanism and instead authenticates against an LDAP server so you can manage user accounts on a centralized LDAP server. Any user contained within the specified User Base DN on the LDAP server can log in to Mirth® Connect. When a user logs in, Mirth® Connect copies the user’s attributes from the LDAP server. The connection to the LDAP server can optionally use SSL or STARTTLS encryption. Contact Us if you have any questions. Image of the LDAP authorization configuration settings. Parent topic: Services and Extensions

Multi-Factor Authentication User Guide

Introduction

The Multi-Factor Authentication extension provides an extra layer of security for all user accounts. A secondary device such as a phone, tablet, or landline is used to ensure that no one but the actual user can login, even if they know the correct username and password. Both Duo and generic apps like Google Authenticator / Authy are supported. When using Duo, advanced options such as lockout protection, automatic enrollment, and policy management are available in the Duo administrator dashboard. Note: For technical and purchasing information about this extension, Contact Us or e-mailing mirthconnectsales@nextgen.com.

Multi-Factor Authentication User Guide

Logging On with Duo

Users log on as usual with their regular username and password. If primary authentication succeeds, the user is presented with authentication methods in the Duo Prompt. Duo Authentication window displaying a selection of authentication methods The specific authentication methods available depends on the type of device the user has registered, and what policy you have configured in Duo. You can read more information about the policy here: https://duo.com/docs/policy. For an in-depth guide on how to use the Duo Prompt, go here: https://guide.duo.com/prompt. Parent topic: Using Duo Multi-Factor Authentication

Mirth® Connect by NextGen Healthcare User Guide

§170.315(d)(13) Multi-Factor Authentication

(d)(13) Multi-factor authentication requires that the system mandates access with multi-factor authentication. Required Extensions Multi-Factor Authentication Features that Support the Certification Multi-Factor Authentication Extension Required Actions Using the Mirth® Connect Multi-Factor Authentication Extension with Duo or TOTP, set up all users to be required to use the selected authentication method. Parent topic: Cures Certification

Multi-Factor Authentication User Guide

Using Duo Multi-Factor Authentication

Create a Duo Application Configure Duo Integration Settings Duo User Enrollment Logging On with Duo Create a Duo Application Configure Duo Integration Settings Duo User Enrollment User self-enrollment with Duo. Logging On with Duo How to log on with Duo.

Multi-Factor Authentication User Guide

Multi-Factor Authentication Extension - Installation

The Multi-Factor Authentication extension is installed like any other Mirth® Connect by NextGen Healthcare extension. This can be done through the Mirth® Connect Administrator in the Extensions view or by extracting the contents of the provided ZIP file into the extensions directory inside the Mirth® Connect installation directory. For older versions of Mirth® Connect, the plug in can be installed through Plugins > Extension Manager. Warning: This extension is previously known as "Duo Multi-Factor Authentication". If you have that earlier version installed, then after installing the new extension you should uninstall the older Duo Multi-Factor Authentication extension. After uninstalling the old extension, you need to restart the Mirth® Connect server again. Note: After restarting the server, make sure that you open the Mirth® Connect Administrator by selecting the Launch Mirth Connect Administrator button and not using a previously downloaded JNLP file. For details on installing an ex

Multi-Factor Authentication

Recommendations

LDAP Authorization

Introduction

Logging On with Duo

§170.315(d)(13) Multi-Factor Authentication

Using Duo Multi-Factor Authentication

Multi-Factor Authentication Extension - Installation

LDAP Authorization

Introduction

Logging On with Duo

§170.315(d)(13) Multi-Factor Authentication

Using Duo Multi-Factor Authentication

Multi-Factor Authentication Extension - Installation