Prerequisite: Completed Step 2: Identity Proofing and received verification code via text or mail.
Note: If you are a provider who already completed registration for electronic prescribing of controlled substances (EPCS) in the past, you may skip identity proofing and EPCS registration and move to the last step, called Logical Access Control (LAC).
Two-factor authentication to electronically prescribe controlled substances (EPCS) consists of:
- Hard (physical fob device) or soft (app) token
- Passphrase (password for EPCS)
To set up two-factor authentication for electronic prescribing of controlled substances (EPCS):
1. Select Add New Token.
2. Enter information for your hard (physical fob device) or soft (app) token. Note: Contact Support to request a hard token.
- Token Manufacturer: Select either Symantec or Onespan.
- Token Issuer: DRFIRST
- Token Type: Select soft token if you are using an app or hard token if you are using a physical device ("fob").
- Token Nickname: Nickname your token to help you remember which token you are using.
-
Serial Number/Credential ID:
- For Symantec VIP Access app, the Credential ID will be 4 letters followed by 8 numbers without spaces (e.g., SYMC########).
- For Symantec hard tokens, the serial number is on the back. Enter letters followed by numbers, without spaces or dashes.
- For Onespan hard tokens, the serial number is on the back. Enter the numbers without spaces or dashes.
- One-time pin (OTP): You will have approximately 30 seconds to enter a 6-digit verification code from your token.
Tip: Record the temporary password to re-enter your identity proofing session should you be signed out.
Note: Adding at least one token is required. Adding a second token is recommended in case you lose access to your first token, you have a back up token. Otherwise, you may need to redo identity proofing.
2. Create a passphrase (password to prescribe controlled substances).
3. Create a security question and answer to help you retrieve your passphrase should you forget it in the future. Note: These are case sensitive and require an exact match.
4. Enter your verification code that you received via text or mail.
- If you received via text message, you will be able to enter it onto the screen immediately.
- If you received the verification code via mail, click the link on an email that you received at the end of the identity proofing process (from InfinIDAdmin@drfirst.com) to enter the verification code. You will also need to enter your newly created passphrase, token, and one-time pin/one-time passcode (OTP) from the token.