Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) is a security method that requires more than just a password to log into an account. It adds extra steps, like using a code sent to your email, to make sure it's really you trying to get in.

Frequently Asked Questions:

1. Why use MFA?
   1. MFA is crucial for maintaining the confidentiality and integrity of PHI, ensuring it remains secure from unauthorized access or breaches as, well as increasing compliance with HIPAA and other regulations by implementing a more robust security measure
2. How does Healthy Roster implement MFA?
   1. We utilize a code that is delivered to the user's inbox; the code is then required to be input into the platform to complete login access
3. Who is required to complete the MFA process in Healthy Roster?
   1. All users are required to complete the MFA process. There is not an opt-in process; the MFA process is active automatically for all users.
4. Does MFA slow down access?
   1. While MFA adds an additional step to the login process, technological advancements ensure that this does not significantly impact access times. The enhanced security provided by MFA outweighs any minor inconvenience.
5. Can I bypass MFA?
   1. Yes, you can select on the web browser to bypass the MFA while your inputting your access code. The mobile app will authorize your device upon logging in
6. Can I deauthorize my device/browser in order to trigger MFA again?
   1. Yes. On the web, you will need to log out of your account and clear your browser cookies. On the app, you will select Settings and Deauthorize the device
7. Does the Access Code deliver only via email?
   1. Yes, our access code will be delivered via email only. We do not send text messages.
8. What if my account utilizes Single Sign On (SSO)
   1. SSO is a method that allows users to authenticate once and gain access across multiple applications or systems without having to re-enter credentials for each application. As discussed above, MFA is a security measure that requires two or more verification factors to access the system. Most often, if your account is utilizing SSO, you are already completing an MFA through your SSO setup. You ultimately will not have to process MFA within Healthy Roster if your account uses SSO.
9. I forgot my password, does this affect my MFA?
   1. Selecting forgot password for the Provider/Organization/Team User will prompt the user to complete the MFA as well as answer stored security questions