Push Code Authentication

Release Considerations

Push Code Authentication functionality is available with Provider Portal 5.2.0 and later releases.


Push Code Authentication is optional functionality. Your organization determines whether to enable Push Code Authentication and can configure the feature and turn it on and off. When Push Code Authentication is on, the portal log-in process has additional steps.

Push Code Authentication Help

- Push Code Authentication Overview
- Initial Log-In Process and Profile Setup
- Ongoing Log-In Process
Change or Add New Email Address or Device
- Push Code Authentication FAQs  

Push Code Authentication Overview

Push Code Authentication is a form of two-factor user authentication developed for portal access. It is optional functionality intended to provide an extra layer of security to safeguard protected health information (PHI) in the portal. When your organization first turns on Push Code Authentication and you log in to the portal, you are automatically prompted to update your account profile. This enables you to receive a unique authentication code through email or on your mobile device through SMS text. In the portal's Push Code Authentication dialog box, you enter the code that is sent to you. If the code you submit is valid, the portal opens to your regular workflow. Upon each subsequent log-in, you are automatically prompted to have a code sent to your email address or device of choice and to submit the code to gain access to the portal. 

- Required Account Profile Information
- Optional Account Profile Information

Note: If your organization enables Push Code Authentication and then turns it off and back on, you will again be automatically prompted to update your account profile upon log-in.

Required Account Profile Information

Push Code Authentication requires that you provide certain information in your account profile so that an authentication code can be sent to you. You use this code to access the portal. When your organization first turns on Push Code Authentication and you log in to the portal, you are automatically prompted to update your account profile. You are required to save either a primary email address or a primary carrier and phone number for a mobile device. What you are required to save depends on how your organization sets up Push Code Authentication. In addition, you are required to select a user-agreement check box to agree to receive a code using the email address or mobile device information that you provide so that you can access the portal. 

Note: If you are subscribed to receive physician notifications, primary mobile device information is required. Changes made to primary mobile device information in your profile are automatically applied to your physician notifications setup (My Account > Manage Notifications) and vice versa.

Optional Account Profile Information

When your organization first turns on Push Code Authentication and you log in to the portal, you are automatically prompted to update your account profile. In addition to the primary information that is required, you can enter secondary information to have more options for receiving a code. Secondary mobile device carrier and phone number are available alternatives and depending on how your organization sets up Push Code Authentication, secondary email address may also be an alternative. The secondary information is optional, but it is recommended that you provide it if you have it to have more options for receiving a code if your primary methods are unavailable.

Initial Log-In Process and Profile Setup

Complete the following steps to access the portal when Push Code Authentication is initially turned on or turned on after being turned off:

  1. From the portal log-in page, enter your username and password and select Log In. If you pass the system log-in check, a profile dialog box opens. The profile dialog box includes some of your account profile elements and an informational message about Push Code Authentication. Required elements have an asterisk (*).
  2. If primary mobile device information is required or it is not required, but you want to add or update it, you can select a carrier from the Primary Mobile Carrier list. Then, enter a phone number in the Primary Mobile Phone Number box (digits only, beginning with area code). If you select a carrier, a phone number is required and vice versa. 

    Note: You can use your primary mobile device to receive an authentication code through SMS text to access the portal. If you are subscribed to receive physician notifications, Primary Mobile Carrier and Primary Mobile Phone Number are required. Changes made to these profile elements are automatically applied to your physician notifications setup (My Account > Manage Notifications) and vice versa.
     
  3. If you want to add or update secondary mobile device information, you can select a carrier from the Secondary Mobile Carrier list. Then, enter a phone number in the Secondary Mobile Phone Number box (digits only, beginning with area code). If you select a carrier, a phone number is required and vice versa.

    Note: You can use your secondary mobile device to receive an authentication code through SMS text to access the portal.

  4. If the Primary Email Address element is displayed and you want to update your primary email address, you can enter a new email address in the Primary Email Address box. A valid noncommunity email address is required for security reasons.

    Note: If displayed, Primary Email Address is required, and you can use your primary email address to receive an authentication code through email to access the portal. It is also the email address that is used to notify you of account activity, such as a password reset.
      
  5. If the Confirm Primary Email Address element is displayed, enter your primary email address in the Confirm Primary Email Address box. This step is required before you can save your changes.
  6. If the Secondary Email Address element is displayed, and you want to add or update your secondary email address, you can enter a new email address in the Secondary Email Address box. A valid noncommunity email address is required for security reasons.

    Note: If the Secondary Email Address element is displayed, you can use your secondary email address to receive an authentication code through email to access the portal.

  7. If the Secondary Email Address element is displayed and valued, enter your secondary email address in the Confirm Secondary Email Address box. This step is required before you can save your changes. 
  8. Select the user-agreement check box to agree to receive an authentication code using the email address or mobile device information that you provided so that you can access the portal.
  9. Select Save to save your profile updates and close the profile dialog box. The Push Code Authentication dialog box opens. A default device or email address to receive the code for this portal log-in session is automatically selected.
  10. If you want to use a different device or email address, you can select one of the other options (if available). 
  11. Select Send Code. An authentication code is sent to the selected device or email address. 
  12. Check your device for a text message or check your email for a new message, depending on the selected delivery option. Retrieve the code. The code is valid for the number of minutes stated in the message.
  13. Return to the Push Code Authentication dialog box (which is already displayed) and enter the code in the box.
  14. If you want to request a new code, you can select Request new code from the lower-left corner of the Push Code Authentication dialog box and repeat Steps 12-13.
  15. Select Submit to submit the code and close the dialog box. The portal opens to your regular workflow. 

Ongoing Log-In Process

Complete the following steps to access the portal when your organization is using Push Code Authentication: 

  1. From the portal log-in page, enter your username and password and select Log In. If you pass the system log-in check, the Push Code Authentication dialog box opens. The last method you used to receive the code is automatically selected.
  2. If you want to use a different device or email address, you can select one of the other options (if available).
  3. Select Send Code. An authentication code is sent to the selected device or email address.
  4. Check your device for a text message or check your email for a new message, depending on the selected delivery option. Retrieve the code. The code is valid for the number of minutes stated in the message.
  5. Return to the Push Code Authentication dialog box (which is already displayed) and enter the code in the box.
  6. If you want to request a new code, you can select Request new code from the lower-left corner of the Push Code Authentication dialog box and repeat Steps 4-5.
  7. Select Submit to submit the code and close the dialog box. The portal opens to your regular workflow. 

Change or Add New Email Address or Device

The first time you log in to the portal after Push Code Authentication is initially turned on or turned on after being turned off, a dialog box opens. In the dialog box, you can add or update email address or mobile device information, depending on your organization's setup. At any other time, you can select My Account > Profile from the portal menu bar to add or update your information. You must be logged in to the portal to do so. When you save changes to any of the primary or secondary elements in your profile, you are required to select the user-agreement check box. This confirms that you agree to receive an authentication code using the email address or mobile device information that you provided. 

See also: Update Account Profile  

Push Code Authentication FAQs

- How often do I need to submit an authentication code?
- What if my authentication code expires before I use it?
- What if the authentication code that I submit is not accepted?
- How do I update the email address or mobile device information that I set up for Push Code Authentication?
- What if I need to access the portal but cannot access any email account or mobile device that I use to receive an authentication code?
- How do I return to the portal log-in page to start over?

How often do I need to submit an authentication code?

When Push Code Authentication is on, you submit a new code each time you log in to the portal.

What if my authentication code expires before I use it?

If your code expires before you use it, select Request new code from the lower-left corner of the Push Code Authentication dialog box. A new code is sent to your selected delivery option.

Note: In the Push Code Authentication dialog box, you can select a different email address or device delivery option (if listed) before you request a new code.  

What if the authentication code that I submit is not accepted?

If you submit an incorrect or expired code, a validation message is displayed. Check the code and try again or request a new code. To request a new code, select Request new code from the lower-left corner of the Push Code Authentication dialog box. A new code is sent. 

Note: In the Push Code Authentication dialog box, you can select a different email address or device delivery option (if listed) before you request a new code.

How do I update the email address or mobile device information that I set up for Push Code Authentication?

After initial setup that you complete when Push Code Authentication is first turned on, you must be logged in to the portal to update your email address or mobile device information for Push Code Authentication. From the portal menu bar, select My Account > Profile to add or update your information. See Change or Add New Email Address or Device for more information.  

What if I need to access the portal but cannot access any email account or mobile device that I use to receive an authentication code?

If you need to access the portal but cannot access any email account or mobile device that you use to receive the authentication code, you need to request assistance from your organization. Your organization can set up a phone number to call for assistance. To see the assistance information provided by your organization, from the portal log-in page, enter your username and password and select Log In. If you pass the system log-in check, the Push Code Authentication dialog box opens. Your organization's assistance information will be directly below the code delivery options.

How do I return to the portal log-in page to start over?

From either the initial setup or Push Code Authentication dialog box, select Cancel to close the dialog box and return to the portal log-in page.

Copyright Cerner Corporation. All rights reserved.