PS&R Security Official Registration

Transcription

1 PS&R Security Official Registration PS&R Security Official Registration The following walk-thru explains how a User registers as a Security Official for their organization to gain access to the PS&R application. PS&R Security Official: Is the highest ranking person in the organization. This person will be responsible for approving all other role requests and annually certifying the users of the organization. Important Before You Begin Before registering for a Role, the User must have created a User ID and Password. Refer to Creating a User ID and Password for instructions on how to create a new account in the Enterprise Identity Management (EIDM) Portal. The New User registering as a Security Official are required to be a direct employee of the organization. 1. The User will go to the CMS Enterprise Identity Management (EIDM) Portal at The User will enter their User ID, Password and check "Agree to our Terms and Conditions" box. Then select "Login". Once the User has checked the "Agree to our Terms and Conditions" box on their device, they will not have to check the box again because the system will remember that device for future logins. The User can read the Terms & Conditions by clicking the link.

2 2. The User will be directed to the "My Portal" page which will display each applications to which the User has access in EIDM. Each application will be shown in an icon box. To request access to an application, the User will select "Request/Add Apps" or select the white triangle next to their name and "My Access" from the drop-down menu. The icon box identifying the application to which the User has access is a link which can be selected to navigate directly to that application. The page will only display the first six applications the User has access to in EIDM.

3 3. The User will scroll down to the PS&R/STAR application and selects "Request Access". The listed applications are in alphabetic order.

4

5 4. The User will select the radio button next to "I work for a Medicare Provider and I want to register for PS&R".

6 5. From the "Select a Role" drop-down menu the User will select the appropriate Role. The Security Official should be the first role registered for a new organization. 6. The User will be taken to the Identity Verification page and will select "Next" to continue through Remote Identity Proofing (RIDP).

7 7. The User will read through the Terms and Conditions and will checks the box next to "I agree to the terms and conditions", and select "Next".

8 8. Under "Your Information" the User will enter all the required information, then select "Next".

9 9. The User will answer five personal questions that will be used to verify their identity, and select "Next". The questions used to verify the User s identity are pulled from the Users credit history. This Soft Credit Check will not affect their credit score and is only used for verification purposes.

10 10. The User will receive a message stating whether or not their identity was verified. If the User's Identity was verified they will select "Ok". Then skip to Step 13.

11 11. If the User has tried several times to verify their identity but was not able to pass through the RIDP, they will receive the error message advising them to contact Experian Verification Support Services and provide them with the Review Reference Number. The User must complete this process before they can complete their application request.

12 12. Once the User's identity has been verified by Experian, the User will complete Steps 1-5 to continue to register for their Role. They will check the box next to "Please select the check box if you have contacted the Experian Verification Support Services." and this will allow the User to skip the RIDP process.

13 13. The User will be asked to add a Multi-Factor Authentication (MFA) Device, but since the User selected "I work for a Medicare Provider and I want to register for PS&R" on Step 4, the User has a Level of Assurance (LOA) of 2. This means the User is not required to have an MFA Device registered on their account and can select "Skip MFA". If the User chooses to skip registering an MFA Device, then skip to Step 16. To add the MFA Device the User will select "Add MFA".

14 14. If the User chose to add an MFA Device, they will enter the required information for the MFA Device to continue. Choose one of the Navigation items below Phone/Tablet/PC/Laptop Text Message -Short Message Service (SMS) Interactive Voice Response (IVR) If the User selects Phone/Tablet/PC/Laptop, the user will receive the Security Code on the VIP Access Token. The User will download the VIP Access Token on either their computer or phone. After the VIP Access Token is downloaded, the User opens it to retrieve the Credential ID, enters it and the MFA Device Description (i.e., home computer, mobile app, etc.), and selects "Next".

15 If the User selects Text Message - Short Message Services (SMS), the User receives the Security Code via text message. The User enters the cell phone number where they want the Security Code to be sent, enter the MFA Device Description, (i.e., cell phone, my phone, etc.), and selects "Next".

16 If the User selects Interactive Voice Response (IVR), they receive the Security Code through an automated call. The User enters the cell phone number where they want the Security Code to be sent, enter the MFA Device Description, (i.e., cell phone, my phone, etc.), and selects "Next". If the User selects , they receive the Security Code via . The User's address will auto-populate in the field, the User enters the MFA Device Description, (i.e., my , work , etc.), and selects "Next".

17 15. Once the MFA Device is successfully registered the User will receive an acknowledgement and they will select "OK" to continue. 16. The User will enter their Business Contact Information and select "Next".

18 All fields with an asterisks (*) are required fields. 17. The User will select the radio button next to "Associate to an Existing Organization" or "Create an Organization". If no one from the organization has ever registered in EIDM before, then the User will select the radio button next to "Create an Organization".

19 The User will fill out all the required information. After all information is entered the User will select "Next" to continue. The TIN must be entered in the format of XX-XXXXXXX, the system will not accept the TIN without a dash after the first two numbers For approval purposes, the Legal Business Name (LBN) used for registration is required to be entered exactly as is displayed (spelled, abbreviated, punctuated, etc.) on the IRS document. The CMS Certification Number (CCN) for providers and suppliers paid under Medicare Part A has 6 characters. When inputting multiple CCNs, there should be a comma and a space separating each 6 digit CCN.The Request for Reason box is where the New User registering as an SO can input a statement about why they are requesting access to the PS&R application. (For example: Registering to be an SO, Set up organization, Access reports.)

20 If the User selects "Create an Organization" and after entering the organization's information and User receives the error message "The organization already exists", they will need to select "Associate to an Existing Organization". If someone from the organization has registered in EIDM before, the User will select the radio button next to "Associate to an Existing Organization".

21 The User will then enter part of the Legal Business name, select the State the organization is in and select "Search".

22 The User will be able to select the organization from the drop-down menu. In the "Reason for Request" field the User must explain the reason they are submitting the request (i.e. EIDM access, PS&R/STAR access, register a role). Select "Next".

23 18. The User will review their request before submitting it and select "Submit" to continue. If the User needs to correct anything, they select "Edit".

24 19. The User will receive a confirmation that they have successfully submitted their request and will see the Request Number for the request displayed. They will select "OK" to complete the registration. The requests will be valid for 60 days. After 60 days, the request will be deleted by the system and the User will need to request access again. 20. The User will be sent a system-generated informing them that they successfully submitted a request. The will contain the Request Tracking Number and the role the User requested. The SO is the only role for PS&R to be approved by EUS.

25 Article E003