How to set up multifactor authentication for the Patient Portal

Multifactor authentication is a security method that requires user to provider two or more verification credentials to access and account. In addition to a password, users can set up an an authenticator app as a second factor to secure their account.

Enable the Auth Module

1. As an admin, go to Modules.
2. Enable and install the "OpenCoreEMR Auth Module".

Configure Auth Module

1. Go to Admin > Config > OpenCoreEMR Auth Module
2. The setting for Patient Portal MFA Mode has three options:
   1. Disabled - MFA is disabled for Patient Portal users. Patients will not have the option to enable MFA for their user account.
   2. Optional - Patient Portal users have the option to enable MFA for the user account.
   3. Required - All Patient Portal users will be required to set up MFA for their user account.

Setting up MFA as a patient

1. If MFA is required, you will be required to set up MFA after logging in with your username and password.
2. If MFA if optional at an organization, you can set up MFA after logging into your account by going to Settings > Two-Factor Authentication.
3. Scan the QR code or paste the code into an authenticator app of your choice. Common authenticator apps include Google Authenticator, Microsoft Authenticator, Apple Passwords.
4. Save the Recovery codes in a secure location.