ID.me Identity Proofing & EPCS Credentialing

Overview

The ID.me integration within iSalus will allow for two crucial actions to take place before a provider prescribes controlled substances from within the system. SureScripts and the DEA require the following to place electronic prescriptions:

Identity Proofing for General ePrescribing:

A user (prescriber) will need to complete IAL2 (Identity Assurance Level 2) Identity Proofing before being added to the SureSripts prescribing network. This is completed within the IDme Verify screen, found in User Setup > Toolbar - Checkmark Icon (see below). There is no charge for these services as it is included in the monthly subscription rate for the provider accounts.

Obtain Credentials for Prescribing Controlled Substances (EPCS):

A user (prescriber) will need to complete the Verify EPCS process to obtain valid credentials to be used for the signing step of prescribing controlled substances. There is a monthly cost for this product. Please open a ticket with support to enable the setup and discuss the pricing of the "IDme EPCS" product within your database. See Complete EPCS Setup via ID.me for full step-by-step instructions.

The purpose of Identity Proofing is to ensure an OfficeEMR provider is who they claim to be prior to being able to electronically send prescriptions from the EMR. This document will describe the necessary steps to complete the setup from the provider's perspective.

Prerequisite

Security Screen: Practice - General > Admin > IDme Verify
The above screen will need to be enabled for the role associated with the user completing Identity Verification. This role will need to have "Write" permissions in order to access the screen described in Step 3 below. For help on modifying roles, see the documentation on Assigning a Screen to a Role.

Steps to Complete

1. After logging into OfficeEMR
2. Navigate to User Setup (Setup > Users or "Current User" from the bottom left of the screen)
3. Ensure your name is selected from the left side, then select the checkmark icon from the toolbar
   Note: If you are unable to access this button, please see the above Prerequisite section.
   
   
4. Search & Save the "Prescribing Provider", this is the provider to be verified (yourself)
   
5. Select Verify Identity
   
   
6. Create an ID.me account or Login with an existing ID.me account, if logging into an existing account please skip to step 22.

7. Enter your PERSONAL EMAIL, create a password, and accept the TOS and Privacy Policy
   

8. Enter the 6-digit code received in your personal email, then select Continue
9. Select a Multi-Factor Authentication (MFA) method from the available list. The Push Notification is best, but Code Generator Application is also available. The Code Generator option adds more steps to the prescribing workflow but is DEA-compliant.
   
10. Complete MFA Setup by providing the cell phone number of the device you intend to receive 2FA request on. Once you receive the text message follow the on-screen instructions to Download the IDme Authenticator and associate the ID.me account. 
11. Approve (Push Notification) or Enter the code (Open IDme Authenticator and enter 6-digit code) received via the selected MFA, then select Continue
    • You may optionally generate a recovery code that you may access the ID.me in the event you lose access to the device setup for MFA. You will want to keep this code someplace safe, outside of the device you have MFA setup on.
12. Choose a Verification Method, typically the license or state ID option will be the easiest to provide.
13. Accept the consent for Biometric Data Collection. This is to ensure you are able to complete the "liveness" check after uploading your documents.
14. You may either Take a Photo or upload an existing image of your selected document type.
    • If uploading documents, you will want to select from your computer's files the Front and Back of the document (unless Passport)
15. After selecting Take a Photo, you will be prompted to Enter a Mobile Phone Number and Continue. This phone will receive a link to complete the document upload and "liveness" check.
16. Select the link received on your phone, the screen will look like the following in your mobile browser.
    
17. Follow the prompts for taking photos with your phone
    • Depending on the document type selected in step 11, you will be asked to upload the Front and Back of the document.
    •  Review the documents on the page before submitting them for verification. Ensure they are clear and the edges are not cut off.
18. After uploading/taking the photo you will need to take a video selfie
    
19. Ensure you "Allow Access to Camera" within your mobile device's browser when prompted, and complete a scan of your face.
    • It is important that when you scan your face it matches the document you have just uploaded. Namely, if you are wearing glasses currently but were not on your driver's license, please remove them.
    • Be sure to follow prompts during the scan, there may be warnings such as "Move Closer"
    • If the scan is not working for you initially, please try again until after your third attempt.
20. Once the Images Submitted message is seen on your phone, navigate back to the computer where you started the process.
21. Enter any remaining fields related to your identity, this may just be your SSN, but you may be prompted for your Current Home Address (if unable to verify the information from the uploaded document)
22. Verify the Details seen on the ID.me screen. If correct, select the Checkbox and Yes to continue
    
23. Begin the NPI check
    
24. Enter your NPI. If all information returns correctly (State License Number & Issuing State), select a Provider Type from the provided list. Then select continue.
    
25. Allow the information to be shared back to OfficeEMR
26. Confirm the results in the Identity Proofing Screen
    • Ensure the NPI in the ID.me column matches what is seen in Provider Setup
    • The additional details such as email may differ depending on what was provided in the New Provider Packet or Implementation Packet. These may differ but will still allow you to continue.
27. After the results are confirmed, you will need to contact iSalus to complete the process. If you are in Implementation please reach out to your contact on the project. If adding a New Provider via Support please reach out to support@isalushealthcare.com or open a ticket to "Enable ePrescribing for {Doctor Name}"
28. After the iSalus representative has completed their portion, you will be ready to ePrescribe within the EMR.

The purpose of the ID.me EPCS credential is to ensure an OfficeEMR prescriber is able to electronically send controlled substance (EPCS) prescriptions in the EMR in accordance with DEA 1311 requirements. This document will describe the necessary steps to complete from the provider's perspective.

Process Overview

In order to prescribe electronic controlled substances (EPCS), the following parts must be completed:

1. Complete EPCS Enrollment via ID.me
2. Add & Enabled the ID.me EPCS Credential
3. **Approve ID.me Credentials

** The first prescriber added to any database will be auto-approved. All subsequent providers added to that database must receive approval from a provider with an approved credential. 

Prerequisite

Security Screen: Practice - General > Admin > IDme Verify
The above screen will need to be enabled for the role associated with the user setting up Identity Verification. This role will need to have "Write" permissions in order to access the screen described in Step 3 below. For help on modifying roles, see the documentation on Assigning a Screen to a Role.

Steps to Complete

1. After logging into OfficeEMR
2. Navigate to User Setup (Setup > Users or "Current User" from the bottom left of the screen)
3. Ensure your name is selected from the left side, then select the checkmark icon from the toolbar
   Note: If you are unable to access this button, please see the above Prerequisite section.
   
4. Search & Save the "Prescribing Provider", this is the provider to be credentialed (yourself)
   
5. Select Verify EPCS 
   "Verify Identity" is for prescribers who do not prescribe EPCS
   
   
   
6. Create an ID.me account or Login with an existing ID.me account, if logging into an existing account please skip to step 22.

7. Enter your PERSONAL EMAIL, create a password, and accept the TOS and Privacy Policy
   

8. Enter the 6-digit code received in your email, then select Continue
9. Select a Multi-Factor Authentication (MFA) method from the available list. The Push Notification is best, but Code Generator Application is also available. The Code Generator option adds more steps to the prescribing workflow but is DEA-compliant.
   
10. Enter the code received via the selected MFA, then select Continue
    • You may optionally generate a recovery code that you may access the ID.me in the event you lose access to the device setup for MFA. You will want to keep this code someplace safe, outside of the device you have MFA setup on.
11. Choose a Verification Method, typically the license or state ID option will be the easiest to provide.
12. Accept the consent for Biometric Data Collection. This is to ensure you are able to complete the "liveness" check after uploading your documents.
13. You may either Take a Photo or upload an existing image of your selected document type.
    • If uploading documents, you will want to select from your computer's files the Front and Back of the document (unless Passport)
14. After selecting Take a Photo, you will be prompted to Enter a Mobile Phone Number and Continue. This phone will receive a link to complete the document upload and "liveness" check.
15. Select the link received on your phone, the screen will look like the following in your mobile browser.
    
16. Follow the prompts for taking photos with your phone
    • Depending on the document type selected in step 11, you will be asked to upload the Front and Back of the document.
    •  Review the documents on the page before submitting them for verification. Ensure they are clear and the edges are not cut off.
17. After uploading/taking the photo you will need to take a video selfie
    
18. Ensure you "Allow Access to Camera" within your mobile device's browser when prompted, and complete a scan of your face.
    • It is important that when you scan your face it matches the document you have just uploaded. Namely, if you are wearing glasses currently but were not on your driver's license, please remove them.
    • Be sure to follow prompts during the scan, there may be warnings such as "Move Closer"
    • If the scan is not working for you initially, please try again until after your third attempt.
19. Once the Images Submitted message is seen on your phone, navigate back to the computer where you started the process.
20. Enter any remaining fields related to your identity, this may just be your SSN, but you may be prompted for your Current Home Address (if unable to verify the information from the uploaded document)
21. Verify the Details seen on the ID.me screen. If correct, select the Checkbox and Yes to continue
    
22. Begin the NPI & DEA check
    
23. Enter your NPI. If all information returns correctly (State License Number & Issuing State), select a Provider Type from the provided list. Then select continue.
    
24. Allow the information to be shared back to OfficeEMR
25. Confirm the results in the Identity Proofing Screen
    • Ensure the NPI & DEA number in the ID.me column matches what is seen in OfficeMD Provider Setup
    • The additional details such as email may differ depending on what was provided in the New Provider Packet or Implementation Packet. These may differ but will still allow you to continue.
26. After the results are confirmed, you will need to contact iSalus to complete the process if you DO NOT see "SPI Approved" in green as shown below. If you are in Implementation please reach out to your contact on the project. If adding a New Provider via Support please reach out to support@isalushealthcare.com or open a ticket to "Enable ePrescribing for {Doctor Name}".
    
    
    If you are transitioning from IdenTrust to ID.me then you will not likely need iSalus to complete this step for you. It is likely that your SPI was approved before you ePrescribed from iSalus initially.
    
27. Once you have confirmed the ID.me EPCS details as described above, there are two remaining pieces to complete this are:
    • Add & Enable the ID.me EPCS Credential (Part 2)
    • Approve ID.me Credentials (Part 3)

This article describes part 2 of the ID.me EPCS Credentialing process. Following the Complete EPCS Enrollment via ID.me steps, a user will be expected to Add & Enable their certificate to the OfficeEMR user account. This article describes the necessary steps to complete this portion of the configuration.

Steps to Complete

1. As the Prescriber, login to OfficeEMR
2. Navigate to User Setup (Setup > User Setup OR from the bottom-left corner, select "Current User")
3. Within User Setup, open the Credential Setup Screen (#1 above)
   
   
   
4. Once opened, select the Credential Type dropdown, and select the first available option "ID.me using: n/a" (#2 above)
5. Select the Enabled Checkbox (#3 above)
   If a prescriber has an existing active credential; Once Save is selected, this will immediately inactivate the existing credential.
6. Save (#4 above). Once saved, the credential is now active. However, if the prescribing user IS NOT the first provider to retrieve either IdenTrust or IDme EPCS credentials, the newly activated credential must be approved by a prescriber who has already been approved. The first provider added to a database is auto-approved. See Approve a Credential for step-by-step instructions on this process.

This article describes the necessary steps an approved prescriber must take in order to approve subsequent prescribers being added to the database.

Steps to Complete

1. While logged in with a user who already has an approved EPCS credential
2. Navigate to User Setup > Credential Approval
3. Locate the credential needing to be approved
4. Select 'Approve' checkbox & complete the 2FA prompt with your existing credential
5. Once the complete the credential is ready to use within the EMR for prescribing EPCS.