Introduction
When the Re-Authentication Workflow is enabled for the EPIC EHR application in the Tenant Admin Portal, Oloid prompts the user to re-authenticate during an active Windows session whenever Epic requests it. For the Reauthenticate Current User – Second Factor workflow, administrators can select one or more custom factors, such as TOTP (Time-based One-Time Password).
Prerequisites
You must have access to Epic Hyperspace.
Epic Vault Password must be created for the user. Refer: How to create Vault Password for a user
The badge reader must be connected to the Windows system.
Ensure the Tray application is running in the background.
Badge must be assigned to the user. Refer: How to assign Badge ID as credential to users
TOTP must be enabled in the Tenant Admin Portal. Refer: Windows Login 2.0 - How to Enable TOTP in the Tenant Admin Portal
TOTP must be selected as Custom factor. Refer: Windows Login (Healthcare) - How to Configure Custom Factor for Epic EHR in Tenant Admin Portal
The Reauthenication Workflow must be enabled. Refer: Windows Login (Healthcare) - How to Configure Reauthentication Workflow for Epic EHR in Tenant Admin Portal
For first-time TOTP users, an authenticator app is installed on the user's mobile device. Refer: Windows Login (Healthcare)- How to register an Authenticator app for TOTP
Steps to Re-Authenticate in Epic Using Badge and TOTP
Log in to Epic Hyperspace application on your Windows Machine. refer: How to log in to Epic Hyperspace using Badge ID + PIN
The Epic Hyperspace home page is displayed.
On the top menu panel of the homepage, click Reauthentication Test View.
The Reauthentication Test view page is displayed.
Click Reauthenticate Current User.
Note: Authentication is based on the factor configured in Reauthenticate Current User under the reauthentication workflow. eg: Application factors, First factor only or Second factor only.
The Scan Badge screen is displayed.
The current user must tap the Badge on the Badge Reader to scan it.
Note: The current user (the user already logged into Epic Hyperspace) must authenticate.
The TOTP input screen is displayed.
Note: If multiple custom factors are enabled, the MFA selection screen is displayed. Select TOTP.
Enter the TOTP from the authenticator app.
Click Submit.
The current user is successfully reauthenticated.
Note: If you have not added an authenticator app, the authenticator app registration process starts instead. Complete the steps in Register an Authenticator App (First-Time TOTP Users).
Keywords
| EPIC EHR | Epic re-authentication | Re-Authentication Workflow | TOTP | Time-based One-Time Password | Authenticator app registration | Badge login | Custom factor | MFA selection screen | Reauthenticate Current User – Second Factor | EPCS | Windows Login |