What is MFA (Multi-Factor Authentication)?

MFA stands for multi-factor authentication.   This is an industry term for a more secure way to login to an application. Basically means providers have any additional step other than just entering username and password in order to login. This means the user must AUTHENTICATE their login with some secondary process.  Many banks now require you to use MFA.  You login and then they send you an email to confirm the login or a text message with a code you then enter to login to the bank account.  That second step is the MFA.

Currently, in ScriptSure, when a PROVIDER prescribes a controlled medication, that is the only part where MFA comes in to play.  All providers must setup MFA with the designated MFA provider offered during setup. 

At the time of prescribing a controlled substance, the DEA rules and regulations for E-Prescribing require providers to login to the MFA provider (e.g. ID.me) on-screen and then the provider is prompted you enter your username and password.  After that the MFA secondary step presents and the user can authenticate the login or validate the login with the secondary method.  Below is the list of MFA options available for ScriptSure (push notification is the most commonly used).