CMS has announced a new requirement for agents and brokers to ensure multi-factor authentication (MFA) is set up when accessing the double redirect pathway, CMS Enterprise Portal, and Marketplace Learning Management System.

This requirement was communicated to all agents and brokers via an email on May 27th, 2022 and will go into effect in early June, 2022.

What is Multi-Factor Authentication (MFA)?

MFA is a method of keeping digital accounts secure. When you log into your CMS Enterprise Portal account or the Marketplace Learning Management System, you’ll be sent a special code via a method you choose - like email, SMS, or the Google Authenticator Application. You’ll have to enter that code before you are allowed to log in. This helps keep bad actors from accessing your account just by knowing your password.

What action do I need to take?

Log into your CMS Enterprise portal account as soon as possible. Upon logging in, you may be prompted to select an MFA method; if you’re not, navigate to the “manage MFA devices” section using these instructions and verify that the MFA method set for your account is the one you prefer. At HealthSherpa, we recommend Google Authenticator as an easy, secure solution.

What will happen if I don’t take this action?

If you don’t ensure your CMS Enterprise Portal MFA is set up properly, you will be unable to use the double redirect pathway until you resolve this. Specifically, you will not be able to move past the login page.

How will the MFA requirement affect my user experience?

Once MFA is set up correctly, you’ll be able to access the double redirect pathway as usual.

Will this requirement affect me if I only submit applications via EDE?

No; there is no MFA requirement to use the EDE pathway. However, note that in very rare instances where EDE API errors may occur, you may find it useful to follow the instructions above to ensure you can access the double redirect pathway as a backup.

I’m an agent who only submits applications via double redirect; how can I get set up with EDE for a smoother user experience?

You can get approved to use the EDE pathway by following these instructions. EDE allows you to complete applications directly on HealthSherpa without being redirected to HealthSherpa.gov – this allows you to serve your clients faster, and help them with all follow up tasks directly through your HealthSherpa account.

I have multi-factor authentication set up for my HealthSherpa account already; is that the same thing?

No – CMS’ new MFA program is separate from HealthSherpa’s MFA offering. HealthSherpa currently offers agents and brokers the optional ability to turn on MFA when logging into their HealthSherpa account; this helps protect your client information from bad actors. To learn more about how to enable this, click here.

Who can I contact if I have more questions about multi-factor authentication?

For questions about MFA on the CMS Enterprise Portal, double redirect pathway or Marketplace Learning Management System, please contact the Marketplace Service Desk at 1-855-267-1515.

For questions about setting up MFA on your HealthSherpa account, contact agent_support@healthsherpa.com or call (888) 684-1373.