MFA for Electronic Prescribing for Controlled Substances

Electronic Prescribing for Controlled Substances (EPCS) transmits prescriptions for controlled substances electronically from physicians to pharmacies. Additionally, EPCS adds security by requiring auditing, multi-factor authentication, and other legal requirements from the U.S. Drug Enforcement Administration. EPCS removes the need for paper prescriptions by allowing physicians to electronically create, sign and securely transmit such prescriptions. Pharmacies can then use EPCS to receive, review, and dispense these controlled substances.

For details of ePCS flow see MFA for Electronic Prescribing for Controlled Substances (ePCS) - Flow.

Topics

Before you begin

Ensure the following:

  • User:
    • Must exist in Okta
    • Must be assigned the Epic Hyperspace app in Okta
    • Must enroll in MFA prior to performing a ePCS transaction.
  • Administrator must configure servers to allow users write access to the log folder.
    Typically C:\Program Files (x86)\Okta\OktaHyperspaceLoginDevice\logs

Supported authenticators

The following authentication methods are supported:

MFA authenticator

Duo

Email

Google Authenticator

On-Prem MFA (RSA)

Security Question

Okta Verify

Phone (SMS and Voice call)

 

Typical workflow

Task

Description

Configure TLS
  • Configure required Transport Layer Security (TLS), ensuring that TLS 1.2 or higher is configured.
    For instructions, see Okta ends browser support for TLS 1.1.
Configure Okta for ePCS

  • Configure groups, MFA and the Epic Hyperspace EPCS app.
Install the agent
  • Install the Okta Hyperspace agent.
Configure a device in Chronicles
  • Configure a new device in Chronicle.
Configure Hyperspace
  • Configure Hyperspace to integrate with Okta.
Test User Login Process
  • Test login flow

Additional considerations