Limitations of MFA

Multi-Factor Authentication User Guide

Client API Browser

You can still access the Client API documentation and browse the various methods available. However, logging in and testing operations from this browser using an MFA-enabled user is not yet supported. However, if the user is excluded from MFA, see Excluding Users from MFA, then that user will still be able to log on and perform actions here. Mirth Connect window with sign in fields and links to documentation Parent topic: Limitations of MFA

Multi-Factor Authentication User Guide

Web Dashboard

Logging into the Web Dashboard with an MFA-enabled user is not yet supported. However, if the user is excluded from MFA, then that user will still be able to login here. Web Dashboard Sign In Panel Parent topic: Limitations of MFA

Multi-Factor Authentication User Guide

Client API Integrations

If you have built any custom integrations that use the REST API and require automatic, programmatic access, most likely you will want to exclude the user tied with the integration from MFA. No additional development is needed. See Excluding Users from MFA. If your custom integration still interacts with the user, you can elect to handle the multifactor signatures and codes manually. Because of the nature of multifactor authentication, Basic HTTP Auth is not supported when MFA is enabled. Instead invoke the /users/_login and /users/_logout endpoints to perform session-based auth. Using the TOTP API Integration Using the TOTP API integration. Using the Duo API Integration Using the Duo Universal API Integration Using the Duo Universal API integration Parent topic: Limitations of MFA

Multi-Factor Authentication User Guide

Multi-Factor Authentication Extension - Installation

The Multi-Factor Authentication extension is installed like any other Mirth® Connect by NextGen Healthcare extension. This can be done through the Mirth® Connect Administrator in the Extensions view or by extracting the contents of the provided ZIP file into the extensions directory inside the Mirth® Connect installation directory. For older versions of Mirth® Connect, the plug in can be installed through Plugins > Extension Manager. Warning: This extension is previously known as "Duo Multi-Factor Authentication". If you have that earlier version installed, then after installing the new extension you should uninstall the older Duo Multi-Factor Authentication extension. After uninstalling the old extension, you need to restart the Mirth® Connect server again. Note: After restarting the server, make sure that you open the Mirth® Connect Administrator by selecting the Launch Mirth Connect Administrator button and not using a previously downloaded JNLP file. For details on installing an ex

Multi-Factor Authentication User Guide

Configure Duo Integration Settings

Log on to the Mirth® Connect by NextGen Healthcare Administrator, and open the Settings view: Selecting the Settings View Select the MFA settings tab to view the current Multi-Factor Authentication Settings. Next to Enabled, select Yes to enable MFA. Next to MFA Type, select Duo. Copy the Client ID, Client Secret, and API Hostname from the Duo Admin Panel. Copying Values from the Duo Admin Panel When you are done, select the Save task on the left-hand side to save changes. Parent topic: Using Duo Multi-Factor Authentication

Mirth® Connect by NextGen Healthcare M3 User Guide

Using M3 with Multi-factor Authentication

In order for M3 to monitor a Connect server with the multi-factor authentication extension enabled, the following steps are needed: Create a dedicated user for M3 in Mirth® Connect Uncheck the "MFA Required?" checkbox in the MFA settings panel. In M3, connect to the server using the dedicated user account that was created in Step 1.

Limitations of MFA

Recommendations

Client API Browser

Web Dashboard

Client API Integrations

Multi-Factor Authentication Extension - Installation

Configure Duo Integration Settings

Using M3 with Multi-factor Authentication

Client API Browser

Web Dashboard

Client API Integrations

Multi-Factor Authentication Extension - Installation

Configure Duo Integration Settings

Using M3 with Multi-factor Authentication