Introduction
TOTP (Time-based One-Time Password) adds a second layer of security when users re-authenticate in Epic Hyperspace through Oloid. After the user taps their badge, they enter a 6-digit code generated by an authenticator app on their mobile device to complete re-authentication. Before users can use TOTP, they must register an authenticator app with Oloid.
Note: TOTP can be used only as a second factor under MFA.
Prerequisites
You must have access to Epic Hyperspace.
Epic Vault Password must be created for the user. Refer: How to create Vault Password for a user
The badge reader must be connected to the Windows system.
Ensure the Tray application is running in the background.
Badge must be assigned to the user. Refer: How to assign Badge ID as credential to users
TOTP must be enabled in the Tenant Admin Portal. Refer: Windows Login 2.0 - How to Enable TOTP in the Tenant Admin Portal
TOTP must be selected as Custom factor. Refer: Windows Login (Healthcare) - How to Configure Custom Factor for Epic EHR in Tenant Admin Portal
The Reauthenication Workflow must be enabled. Refer: Windows Login (Healthcare) - How to Configure Reauthentication Workflow for Epic EHR in Tenant Admin Portal
Steps to Register an Authenticator App (First-Time TOTP Users)
If you have not added an authenticator app, Oloid starts the registration process after you tap your badge and select TOTP.
Log in to Epic Hyperspace application on your Windows Machine. refer: How to log in to Epic Hyperspace using Badge ID + PIN
The Epic Hyperspace home page is displayed.
On the top menu panel of the homepage, click Reauthentication Test View.
The Reauthentication Test view page is displayed.
Click Reauthenticate Current User.
Note: Authentication is based on the factor configured in Reauthenticate Current User under the reauthentication workflow. eg: Application factors, First factor only or Second factor only.
The Scan Badge screen is displayed.
The current user must tap the Badge on the Badge Reader to scan it.
Note: The current user (the user already logged into Epic Hyperspace) must authenticate.
The Scan QR Code to Add and Authenticator App screen is displayed.
Open the authenticator app on your mobile device> Tap Scan QR to Register.
The Camera opens on the mobile device.
Scan the QR code.
Click Continue.
The Confirm your Authenticator screen is displayed.Enter the 6-digit code shown in your authenticator app and click Verify.
Note: To return to the QR code screen, click Back.
The Authenticator Added screen is displayed with the message TOTP login for MFA is enabled for you. Please re-login.Click Back to Login.
The authenticator app is registered successfully, and TOTP is enabled as your second factor.
Note: You are not logged in to Epic after registration. To Login refer: Windows Login (Healthcare) - How to Re-Authenticate Second Factor in Epic Using Badge and TOTP
Keywords
| Windows Login (Healthcare) | Epic Hyperspace | Epic EHR | TOTP | Time-based One-Time Password | Register authenticator app | Authenticator app setup | First-time TOTP users |