Introduction
The Epic EHR Re-Authentication Workflow for the Windows Login application lets admins define which authentication factors users must complete when Epic prompts them to re-authenticate. Admins configure this workflow from the Epic EHR section of the Configure tab in the Tenant Admin Portal. Admins can select one or more custom factors for each context.
Prerequisites
You must have access to Tenant Admin account.
The Windows Login application must be created in the Tenant Admin Portal, for more information refer: How to create and configure Application Type - Passwordless
Steps to Configure Re-authentication Workflow
Log in to the Tenant Admin Portal.
On the Applications page, select the preferred Windows Login application.
The application details page is displayed.Click Configure tab > Epic EHR.
The Epic EHR page is displayed.To configure factors, do the following:
Under Select Primary Factor (Context 41), select Custom Primary Factor from dropdown:
From the Custom Factor dropdown, select one or more factors, such as Face, Badge, PIN, Epic Password, QR Code, TOTP, Duo MFA, Ping MFA or Okta MFA.
Click Save.
Note: The Custom Factor dropdown lists all factors supported for your tenant.Under Select Secondary Factor (Context 42), select Custom Secondary Factor from dropdown:
From the Custom Factor dropdown, select one or more factors, such as Face, Badge, PIN, Epic Password, QR Code, TOTP, Duo MFA, Ping MFA or Okta MFA.
Note: Factors already selected for the Primary Factor (Context 41) are disabled in the Secondary Factor list, and vice versa.Click Save.
Note: The Primary and Secondary factors must always be different. Select at least one custom factor.
Custom factors are successfully configured.
Keywords
| Windows Login | Epic EHR | Epic re-authentication | Re-Authentication Workflow | Custom Primary Factor | Custom Secondary Factor | Custom Factor |







