Resetting TOTP User Credentials

Multi-Factor Authentication User Guide

Logging In With TOTP

After self-enrolling and logging in for the first time, on subsequent login attempts you will no longer be shown the QR code / secret key. Instead you'll be prompted to enter in the latest verification code: Enter Verification Code window Open the authenticator app you used, and find the key associated with your server. Enter the verification code displayed in the app, and select OK. If the code was correct, the Administrator will log in as usual. Parent topic: Using TOTP Multi-Factor Authentication

Multi-Factor Authentication User Guide

TOTP User Enrollment

After TOTP multi-factor authentication is enabled, your next log on prompts you to enroll with a secondary device. After logging on with the primary credentials, a window like this appears: Enter Verification Code window has a QR code to scan with your camera and a field to enter the code manually Add account in device authenticator app Enter verification code Parent topic: Using TOTP Multi-Factor Authentication

Multi-Factor Authentication User Guide

Configure TOTP Integration Settings

Log on to the Mirth® Connect by NextGen Healthcare Administrator, and open the Settings view: The Settings link opens the Mirth Connect Settings View Select the MFA settings tab to view the current Multi-Factor Authentication Settings. Next to Enabled, select Yes to enable MFA. Next to MFA Type, select TOTP. Select the Save task on the left-hand side to save changes. Multi-Factor Authentication Settings Advanced Settings Typically none of these settings need to be changed beyond the default values, which should work with most multi-factor authenticator apps (such as, Google Authenticator, Authy, and so on). Account Name: The name associated with the private key. This is used when importing a key into an authenticator app to give the key a unique name. This name is also embedded into the generated QR code. Time Step Size: The amount of time (in milliseconds) to create time windows from. These windows are used to account for differences between the client and server clocks. The larger th

Multi-Factor Authentication User Guide

Using TOTP Multi-Factor Authentication

Configure TOTP Integration Settings TOTP User Enrollment Logging In With TOTP Resetting TOTP User Credentials Preventing Brute-Force Attacks Configure TOTP Integration Settings TOTP User Enrollment Logging In With TOTP Resetting TOTP User Credentials Preventing Brute-Force Attacks

Multi-Factor Authentication User Guide

Add account in device authenticator app

Open a TOTP-compatible authenticator app (such as Google Authenticator or Authy) and add a new account. Option 1: Scan the QR code using your device's camera. The account name and secret key are automatically imported. Option 2: Select the blue "Enter manual code instead" link. The QR code are replaced with text fields showing the account name and secret key: Enter Verification Code window with fields showing the account name and account key Enter both of these values into the authenticator app. If there is an option to choose between Time Based or Counter Based, select Time Based. Parent topic: TOTP User Enrollment

Multi-Factor Authentication User Guide

Enter verification code

Once you've imported the key into your app, let it generate a new verification code, then enter it into the text field at the bottom: Field with a verification code entered Select OK, and if the code was correct the Administrator will login as usual. Parent topic: TOTP User Enrollment

Resetting TOTP User Credentials

Recommendations

Logging In With TOTP

TOTP User Enrollment

Configure TOTP Integration Settings

Using TOTP Multi-Factor Authentication

Add account in device authenticator app

Enter verification code

Logging In With TOTP

TOTP User Enrollment

Configure TOTP Integration Settings

Using TOTP Multi-Factor Authentication

Add account in device authenticator app

Enter verification code