Multi-Factor Authentication

Multi-Factor Authentication (MFA) will be required for eMEDIX Online. MFA is a multi-step account login process that requires users to authenticate their account with more than just a password. Users can use an Authenticator application such as Google Authenticator or Microsoft Authenticator.

Note: Please verify that all pop-up blockers are turned off or you allow pop-ups from https://online.emedixus.com. If neither are true, a warning message displays indicating pop-ups are blocked and the login/MFA cannot proceed until corrected.

To set up Multi-Factor Authentication:

Enter your username and password associated with the eMEDIX Online account and click Sign In.
The MFA is triggered by the sign in process. Please choose the authentication method to use. Options are an Authenticator app or a CGM provided hardware token.

Note: If a user attempts to login without using an authentication method, the system will continue to prompt for authentication. Exit completely out of the browser to escape.
If using the Authenticator app for MFA, select the first radio button and click Submit.
Enter a name to be used to identify this application in the Authenticator app. Click Submit.
Using the authenticator app, scan the QR Code or enter the key indicated on the screen. To scan the QR Code, use the mobile device's camera with the QR Code scanner provided in the authenticator app. This process varies depending on the app in use. Users can also enter the key provided on the setup screen instead of scanning the QR Code, if preferred.
Once the QR Code is scanned, the authenticator provides a 6-digit verification code to enter on the eMEDIX Online authentication screen. The following example is from Microsoft Authenticator. The app gives the user 30 seconds to use the code before resetting to a new code. Enter the code on the eMEDIX Online Authenticator. An error displays if the code is entered incorrectly.
If using a CGM hardware token for MFA, select the second radio button and click Submit. (If you are interested in purchasing a CGM hardware token, please contact your sales team member.)
Enter a name to identify the hardware token for this setup and then enter the 32-character code for the hardware token. Please contact eMEDIX Support for assistance with hardware tokens.
If the verification code is correct, the user will be logged into the account. If a user attempts to login without using an authentication method, the system will continue to prompt for authentication. Exit completely out of the browser to escape.
If the following session expiration message displays, please attempt to set up the MFA again.
After initial setup, when the user attempts to log into eMEDIX Online, the MFA prompts the user to open this authenticator app on their phone and enter the 6-digit security code. If the user marks the Trust this device check box, the device will remain trusted for the duration of one (1) week. If the check box is not marked, the device authentication will be valid for 15 minutes. If the user logs out after this 15-minute window, they will be required to complete the MFA process again upon their next login. Note: The Trust this Device option stores a cookie on the user's browser for the last login session. The session stores details about the device/browser and the originating IP address. If either of these things change, the user will be prompted for MFA again. (For example, the user logs in from a home IP address and marks the Trust this Device check box. The following day, the user logs in from their office IP address. Because the IP address changed, the user is prompted for MFA again.)
The MFA can be reset in User Admin. Users must have the appropriate permissions to view this screen. Please see the User Admin section for more information on resetting the MFA.