Two-Factor Authentication Credentials for ePCS

System Administrator Help

Two-Factor Authentication Credentials for ePCS

According to the Drug Enforcement Administration (DEA) regulations, providers who want to send Electronic Prescriptions of Controlled Substances (ePCS) must be identity-proofed by appropriate persons within a practice. As a step in this process, the NextGen Healthcare administrator must associate a two-factor authentication (TFA) credential with the provider’s NextGen Healthcare user ID and activate that credential. The credential works only with NextGen® Enterprise applications. You can activate a provider's token to enable TFA. The token can be either an issued VIP or IndenTrust hard token or a software token that was downloaded onto a smartphone. Because at least one ePCS registrar must have TFA to grant user ePCS prescriber rights, non-ePCS prescribers can also have TFA tokens activated. The user must be present for the activation. Although users can have multiple credentials, only one is necessary. Note: If you do not set up a credential for a provider, the provider can send the p

NextGen® Enterprise EHR Help

Two-Factor Authentication Credentials for ePCS

According to the Drug Enforcement Administration (DEA) regulations, providers who want to send Electronic Prescriptions of Controlled Substances (ePCS) must be identity-proofed by appropriate persons within a practice. As a step in this process, you, as an administrator, must associate a two-factor authentication (TFA) credential with the provider’s NextGen Healthcare user ID and activate that credential. The credential works only with NextGen Enterprise applications. You can activate a provider's token or devices to enable TFA. The token can be an issued Symantec VIP, software token that was downloaded to a device, or a push notification to a device. Because at least one ePCS registrar must have TFA to grant ePCS prescriber rights to a provider, non-ePCS prescribers can also have TFA credentials activated. For activation, the provider must be present with you. Although providers can have multiple credentials, only one credential is necessary. Note: If you do not set up a credential fo

NextGen® Enterprise EHR Help

Two-Factor Authentication Credentials for ePCS

According to the Drug Enforcement Administration (DEA) regulations, providers who want to send Electronic Prescriptions of Controlled Substances (ePCS) must be identity-proofed by appropriate persons within a practice. As a step in this process, you, as an administrator, must associate a two-factor authentication (TFA) credential with the provider’s NextGen Healthcare user ID and activate that credential. The credential works only with NextGen Enterprise applications. You can activate a provider's token or devices to enable TFA. The token can be an issued Symantec VIP, software token that was downloaded to a device, or a push notification to a device. Because at least one ePCS registrar must have TFA to grant ePCS prescriber rights to a provider, non-ePCS prescribers can also have TFA credentials activated. For activation, the provider must be present with you. Although providers can have multiple credentials, only one credential is necessary. Note: If you do not set up a credential fo

System Administrator User Guide

ePCS Setup

The Drug Enforcement Administration (DEA) allows DEA registrants to write Electronic Prescriptions of Controlled Substances (ePCS). To control who can send these electronic prescriptions, the System Administrator application meets the DEA regulations that determine how applications and practices are to restrict eRx access rights. These measures rely on identity-proofing to prevent fraud. To comply with the DEA regulations, NextGen Healthcare providers can use any of the following ePCS authentication methods: Symantec™ VIP Token IdenTrust Mobile Authentication Service Imprivata Confirm ID™ for EPCS Note: You can prevent a specific medication (controlled substance) from being electronically prescribed by selecting the Do not allow eRX option from the Medication Tasks master file in File Maintenance. The ePCS setup process involves the following procedures in the System Administrator application: Set up the ePCS authentication method. Authorize ePCS registrar access. ePCS registrars give

System Administrator User Guide

Add Two-factor Authentication Credentials for Symantec VIP

Select a provider, and then on the General tab, select ePCS. The ePCS Authentication and Authorization Setup window displays the Credentials tab. If the provider has active credentials, those credentials appear under Symantec VIP Tokens. Under Token Actions, select Add. The User Login window opens. The provider enters NextGen Healthcare login credentials and then selects Login. The Activate Credential window opens. In the Security Key Serial Number field, the provider enters the serial number from the token. In the Security Code #1 field, the provider enters the security code from the token. In the Security Code #2 field, the provider enters the next sequential security code from the token. Select Activate before the second security code changes. A confirmation message appears. Select OK. The credentials appear on the Registrar and Credentials tabs. Close the ePCS Authentication and Authorization Setup window. Actions for Symantec VIP ePCS Authentication Method Parent topic: Two-Factor

System Administrator User Guide

Add Two-factor Authentication Credentials for Imprivata Confirm ID

Select a provider who is configured to use Imprivata Confirm ID, and then on the General tab, select ePCS. The ePCS Authentication and Authorization Setup window displays the Credentials tab. If the provider has activated credentials, those credentials display in the Imprivata ConfirmID User In the Two-Factor Credentialing section, select Add. The Imprivata ConfirmID Authentication window opens. Enter the username registered with Imprivata Confirm ID and then select the adjacent arrow. The authentication section updates with the second factor authentication field. The provider does one of the following: If a fingerprint reader is not set up, the provider enters the associated password and then selects the adjacent arrow. If a fingerprint reader is set up, then the provider uses the reader to scan the appropriate finger. If authentication is successful, the Imprivata ConfirmID Authentication window automatically closes. The Imprivata Confirm ID username appears in the Imprivata ConfirmI

Two-Factor Authentication Credentials for ePCS

Recommendations

Two-Factor Authentication Credentials for ePCS

Two-Factor Authentication Credentials for ePCS

Two-Factor Authentication Credentials for ePCS

ePCS Setup

Add Two-factor Authentication Credentials for Symantec VIP

Add Two-factor Authentication Credentials for Imprivata Confirm ID

Two-Factor Authentication Credentials for ePCS

Two-Factor Authentication Credentials for ePCS

Two-Factor Authentication Credentials for ePCS

Two-Factor Authentication Credentials for ePCS

ePCS Setup

Add Two-factor Authentication Credentials for Symantec VIP

Add Two-factor Authentication Credentials for Imprivata Confirm ID