Configure Duo Integration Settings

Multi-Factor Authentication User Guide

Create a Duo Application

Sign up for a Duo Account You can create a Duo account by following the instructions at https://signup.duo.com/. Once you have an account, login to the Duo Admin Panel at https://admin.duosecurity.com/. Create a new Application In the Duo admin panel, select the Applications link on the left-hand side. Selecting Applications in the Duo Admin Panel Select Protect an Application, then scroll down to Web SDK and select Protect this Application. Protect this Application link for Web SDK The Details page for your new application appears. Scroll down to the Settings section and fill out all applicable information, such as a name for your application (for example, Mirth® Connect by NextGen Healthcare). Settings section with Name field Select Save Changes at the bottom of the window. Parent topic: Using Duo Multi-Factor Authentication

Multi-Factor Authentication User Guide

Duo User Enrollment

By default, Duo enables users to self-enroll. Self-enrolling means that after logging on, users are presented with a welcome window that guides them through the process of registering their second-factor device with their Mirth® Connect by NextGen Healthcare username. Duo Authentication window with button to start setup of two-factor authentication For more information on how this process works, refer to the Duo User Guide: https://guide.duo.com/enrollment. Tip: Duo also provides options to bulk enroll users. Parent topic: Using Duo Multi-Factor Authentication

Multi-Factor Authentication User Guide

Multi-Factor Authentication Extension - Installation

The Multi-Factor Authentication extension is installed like any other Mirth® Connect by NextGen Healthcare extension. This can be done through the Mirth® Connect Administrator in the Extensions view or by extracting the contents of the provided ZIP file into the extensions directory inside the Mirth® Connect installation directory. For older versions of Mirth® Connect, the plug in can be installed through Plugins > Extension Manager. Warning: This extension is previously known as "Duo Multi-Factor Authentication". If you have that earlier version installed, then after installing the new extension you should uninstall the older Duo Multi-Factor Authentication extension. After uninstalling the old extension, you need to restart the Mirth® Connect server again. Note: After restarting the server, make sure that you open the Mirth® Connect Administrator by selecting the Launch Mirth Connect Administrator button and not using a previously downloaded JNLP file. For details on installing an ex

Multi-Factor Authentication User Guide

Configure TOTP Integration Settings

Log on to the Mirth® Connect by NextGen Healthcare Administrator, and open the Settings view: The Settings link opens the Mirth Connect Settings View Select the MFA settings tab to view the current Multi-Factor Authentication Settings. Next to Enabled, select Yes to enable MFA. Next to MFA Type, select TOTP. Select the Save task on the left-hand side to save changes. Multi-Factor Authentication Settings Advanced Settings Typically none of these settings need to be changed beyond the default values, which should work with most multi-factor authenticator apps (such as, Google Authenticator, Authy, and so on). Account Name: The name associated with the private key. This is used when importing a key into an authenticator app to give the key a unique name. This name is also embedded into the generated QR code. Time Step Size: The amount of time (in milliseconds) to create time windows from. These windows are used to account for differences between the client and server clocks. The larger th

Multi-Factor Authentication User Guide

Using the Duo Universal API Integration

Note: You must use Mirth® Connect 4.5.0 or higher with Duo Universal. Note: Instructions on working with the DUO Administrator are available at https://duo.com/docs/duoweb#detailed-sdk-workflow. First Call The first call posts to the /users/_login endpoint in order to get authorization. To authenticate the Duo Administrator, it is necessary to provide a X-Mirth-Server-Url header containing the Mirth server URL. After invoking the /users/_login endpoint, you will receive a payload that looks, for example, like this:<com.mirth.connect.plugins.mfa.model.DuoLoginStatus> .... <primaryStatus>SUCCESS</primaryStatus> <apiHostname>api-ff51bcf3.duosecurity.com</apiHostname> <authURL>https://api-ff51bcf3.duosecurity.com/oauth/v1/authorize?scope=openid&response_type=code&redirect_uri=https://localhost:8443/api/4.5.0/extensions/mfa/duocallback&client_id=DIZ4Q0FEZGOK8ZVOWN2O&request=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJkdW9fdW5hbWUiOiJ0ZXN0MSIsInNjb3BlIjoib3BlbmlkIiwicmVzcG9uc2Vfd

License Manager User Guide

Step 2: Enter Your License Key

Launch the Mirth® Connect by NextGen Healthcare Administrator, and go to the Settings > License tab. Set the Validation Type to Online, enter your license key, and Save Changes. License Tab Parent topic: Online Validation

Configure Duo Integration Settings

Recommendations

Create a Duo Application

Duo User Enrollment

Multi-Factor Authentication Extension - Installation

Configure TOTP Integration Settings

Using the Duo Universal API Integration

Step 2: Enter Your License Key

Configure Duo Integration Settings

Create a Duo Application

Duo User Enrollment

Multi-Factor Authentication Extension - Installation

Configure TOTP Integration Settings

Using the Duo Universal API Integration

Step 2: Enter Your License Key