How can we help?

Or log in to submit or review a request.

Articles in this section

iPrescribe Authenticator binding: NPI verification and Code Generator

Purpose: This article explains the iPrescribe Authenticator setup process, how NPI verification works, and what to do when your NPI cannot be verified — including how to set up the Code Generator (hardware token) as an alternative authentication method.

Audience: Providers setting up two-factor authentication in iPrescribe, particularly those whose NPI cannot be verified in the iPrescribe system.

 

This guide explains the iPrescribe Authenticator setup process and what happens when your NPI (National Provider Identifier) cannot be verified in the system. Due to security requirements, providers without verified NPIs must use the Code Generator (hardware token) method instead of the iPrescribe Authenticator app.

What is iPrescribe Authenticator?

iPrescribe Authenticator is a mobile app that generates one-time security codes for two-factor authentication. To use this app, your NPI must be verified in the iPrescribe system across regions 1-5.

What is a Code Generator?

A Code Generator — also called a hardware token or software application — generates unique security codes for two-factor authentication. This is the required method for providers whose NPI is not found in the iPrescribe verification system.

How does the token binding process work?

Why iPrescribe Authenticator binding is stopped

  • Security requirement: The IP-Auth-Stop-Binding-2.0 feature prevents users without verified NPIs from binding the iPrescribe Authenticator app to their devices.
  • Verification process: When you attempt to set up iPrescribe Authenticator, the system scans your cronto image and checks your NPI against the DrWeb database across regions 1-5. If your NPI is not found, the binding process is automatically stopped.
  • Automatic fallback: You are immediately redirected to the Code Generator option. This ensures all providers have a secure authentication method available. No additional action is required on your part.

Before you begin

What you'll need:

  • Your hardware token device
  • Access to your iPrescribe account
  • Your iPrescribe username and password
  • A valid NPI number in the iPrescribe system

Important notes:

  • Keep your hardware token in a safe, accessible place.
  • Setup takes approximately 5–10 minutes.
  • You will need your token every time you log in to iPrescribe.
  • Your NPI must be verified in the iPrescribe system across regions 1-5 before you can bind authentication devices.

Authentication method requirements:

  • If your NPI is not found in the system, you will be directed to use the Code Generator (hardware token) option instead of the iPrescribe Authenticator app.
  • This ensures secure access while maintaining compliance with provider verification requirements.

Authentication setup process

Step 1: Access two-factor authentication settings

  1. Log in to your iPrescribe account using your username and password.
  2. Navigate to Account Settings or Security Settings.
  3. Select Two-Factor Authentication or Multi-Factor Authentication.

 

Step 2: Select an authentication method

  1. In the Two-Factor Authentication section, review the available authentication method options.
  2. Select iPrescribe Authenticator to begin setup.

 

Step 3: NPI verification

  1. The system scans your cronto image to verify your NPI.
  2. Automatic verification: The system checks your NPI against the DrWeb database across regions 1-5.
  3. Verification results:
    • NPI found: Proceed with iPrescribe Authenticator setup.
    • NPI not found: The system automatically prevents binding and redirects you to the Code Generator.

 

Step 4: Automatic redirect to Code Generator

When NPI verification fails:

  1. The system displays a message explaining that iPrescribe Authenticator cannot be bound to your device.
  2. You are automatically directed to use the Code Generator option instead.
  3. This redirect ensures compliance with provider verification requirements.

 

Step 5: Code Generator setup

Once redirected to the Code Generator option:

  1. Select Code Generator or Hardware Token.
  2. Select Add New Device or Set Up Code Generator.

 

Step 6: Enter the token serial number

  1. Locate the serial number on your hardware token device — usually printed on the back or bottom.
  2. Enter the serial number in the designated field.
  3. Select Continue or Next.

 

Step 7: Synchronize your token

  1. Press the button on your hardware token to generate a code.
  2. Enter the displayed code in the Current Code field.
  3. Wait for the code to change (typically 30–60 seconds).
  4. Enter the new code in the Next Code field.
  5. Select Verify or Synchronize.

 

Step 8: Confirm setup

  1. Confirm the success message indicating your hardware token is now active.
  2. Save any backup codes provided and store them securely.
  3. Test the setup by logging out and logging back in.
Using your hardware token
  1. Log in to iPrescribe with your username and password.
  2. When prompted for a security code:
    • Press the button on your hardware token.
    • Enter the displayed code.
    • Select Submit or Login.

Important:

  • Codes are time-sensitive and expire after use.
  • Each code can only be used once.
  • If a code expires before you submit it, press the button and wait for a new code to display.
  • You will need your token for every login.

Troubleshooting

Invalid code error

Possible causes and solutions:

  • Code expired: Generate a new code and try again.
  • Clock synchronization: Contact IT support to resync your token.
  • Typing error: Verify you have entered the code correctly.
Directed to Code Generator instead of iPrescribe Authenticator
  • This is expected behavior when your NPI is not found in the iPrescribe system (regions 1-5).
  • You must use the hardware token (Code Generator) method for authentication.
  • Contact your administrator if you believe your NPI should be verified in the system.
iPrescribe Authenticator binding prevented

If you see a message that iPrescribe Authenticator cannot be bound to your device, this is the IP-Auth-Stop-Binding-2.0 feature working as intended. This is a security requirement, not an error.

  • Your NPI was not found in the DrWeb system (regions 1-5).
  • You will be automatically redirected to Code Generator setup.

What this means:

  • You cannot use the iPrescribe Authenticator mobile app.
  • You must use a Code Generator (hardware token) for authentication.
  • Your account security is maintained through the hardware token method.
  • Contact your administrator only if you believe there is an error with your NPI status.
Lost or damaged token
  1. Contact your IT administrator immediately.
  2. Use backup codes temporarily while a replacement is issued and configured.
Cannot access account settings

If you are locked out and cannot access settings:

  1. Use backup codes if available.
  2. Contact your IT administrator or help desk.
  3. Do not attempt to reset your account without proper authorization.
Token not generating codes
  • Check whether the battery indicator shows low power.
  • Press the button firmly.
  • If nothing appears on the display, the battery may be dead. Contact IT support.

Security best practices

Protect your token

  • Store your token in a secure location when not in use.
  • Do not share your token with others.
  • Report a lost or stolen token immediately.

Backup preparations

  • Store backup codes in a secure location.
  • Keep your IT contact information readily available.
  • Confirm a backup authentication method has been approved.

Regular maintenance

  • Test your token periodically to confirm it is functioning.
  • Replace the battery when indicated, if user-replaceable.
  • Update your contact information if you change locations.
Was this article helpful?
1 out of 13 found this helpful

Comments

0 comments

Article is closed for comments.