Multi-Factor Authentication

Multi-factor authentication (MFA) is a second layer of security required by CMS to have online access to protected health information.

The MFA screen will display every time you log in to NGSConnex.

1. Each day when you successfully log into NGSConnex using your user ID and password, you will be prompted to request a daily unique MFA security code per CMS security standards.
2. Select the method you would like to receive your MFA security code, email or text. You will have the option of changing the method you would like to receive your MFA security code each time you login. The security code will be sent to the email address or mobile telephone number associated with your user profile. If you do not have a Mobile Phone Number and Mobile Phone Carrier associated with your NGSConnex User ID the text option will not be available.
3. Click the Send Security Code button. A message will display indicating the Security Code has been sent.
   • You will receive a four-digit security code via email or text.

4. Retrieve the Security Code from the email or text you received.
5. Enter the four-Digit Security Code in the Enter Security Code field.
6. Click the Verify Code button.

7. Once a valid code is verified, you will have access to NGSConnex.

If you logout or timeout after 15 minutes of inactivity and then later log into NGSConnex during the same day, you do not need to request a new MFA security code, you can use the previously requested MFA security code.

The MFA security code is valid until 11:59 p.m. ET on the day requested, and may be used to login throughout the day unless you are prompted to request a new MFA security code. The MFA security code is unique to the User ID and may not be shared.