How can we help?

Or log in to submit or review a request.

Articles in this section

iPrescribe Authenticator binding: NPI verification and Code Generator

This guide explains the iPrescribe Authenticator setup process and what happens when your NPI (National Provider Identifier) cannot be verified in the system. Due to security requirements, providers without verified NPIs must use the Code Generator (hardware token) method instead of the iPrescribe Authenticator app.

What is iPrescribe Authenticator? 

iPrescribe Authenticator is a mobile app that generates one-time security codes for two-factor authentication. However, to use this app, your NPI must be verified in the iPrescribe system across regions 1-5.

What is a Code Generator?

A Code Generator, also called a hardware token or software application, generates unique security codes for two-factor authentication. This is the required method for providers whose NPI is not found in the iPrescribe verification system.

How does the IP-Authorization-Stop-Binding process work?

Why iPrescribe Authenticator binding is stopped

  • Security requirement: The IP-Auth-Stop-Binding-2.0 feature prevents users without verified NPIs from binding the iPrescribe Authenticator app to their devices.
  • Verification process: When you attempt to set up iPrescribe Authenticator, the system scans your cronto image. Your NPI is checked against the DrWeb database across regions 1-5. If your NPI is not found, the binding process is automatically stopped.
  • Automatic fallback: Users are immediately redirected to the Code Generator option. This ensures all providers have a secure authentication method available Note: This requires no additional user action.

Before you begin

What you'll need:

  • Your hardware token device
  • Access to your iPrescribe account
  • Your iPrescribe username and password
  • Valid NPI number in the iPrescribe system

Important notes:

  • Keep your hardware token in a safe, accessible place
  • The setup process takes about 5-10 minutes
  • You'll need the token every time you log in to iPrescribe
  • Your NPI must be verified in the iPrescribe system across regions 1-5 before you can bind authentication devices

Authentication method requirements:

  • If your NPI is not found in the system, you will be directed to use the Code Generator (hardware token) option instead of the iPrescribe Authenticator app
  • This ensures secure access while maintaining compliance with provider verification requirements

Authentication setup process

Step 1: Access two-factor authentication settings

  1. Log in to your iPrescribe account using your regular username and password.
  2. Navigate to your Account Settings or Security Settings.
  3. Look for Two-Factor Authentication or Multi-Factor Authentication options.

Step 2: Initial authentication method selection

  1. In the Two-Factor Authentication section, you'll see authentication method options.
  2. You may initially see iPrescribe Authenticator as an option.
  3. Click on iPrescribe Authenticator to begin the setup process.

Step 3: NPI verification process

  1. The system will scan your cronto image to verify your NPI.
  2. Automatic Verification: The system checks if your NPI exists in the DrWeb database across regions 1-5.
  3. Verification Results:
    • If NPI is found: You can proceed with iPrescribe Authenticator setup.
    • If NPI is not found: The system will automatically prevent binding and redirect you.

Step 4: Automatic redirect to Code Generator

When NPI Verification Fails:

  1. The system will display a message explaining that iPrescribe Authenticator cannot be bound to your device.
  2. You will be automatically directed to use the Code Generator option instead.
  3. This redirect ensures compliance with provider verification requirements.

Step 5: Code Generator setup

Once redirected to the Code Generator option:

  1. Select Code Generator or Hardware Token.
  2. Choose Add New Device or Set Up Code Generator.

Step 6: Enter token serial number

  1. Locate the serial number on your hardware token device (usually printed on the back or bottom).
  2. Enter the serial number in the designated field.
  3. Click Continue or Next.

Step 7: Synchronize your token

  1. Press the button on your hardware token to generate a code.
  2. Enter the displayed code in the Current Code field.
  3. Wait for the code to change (usually 30-60 seconds).
  4. Enter the new code in the Next Code field.
  5. Click Verify or Synchronize.

Step 8: Confirm setup

  1. You should see a confirmation message that your hardware token is now active.
  2. Save any backup codes provided (store these securely).
  3. Test the setup by logging out and logging back in.
Using your hardware token
  1. Log in to iPrescribe with your username and password.
  2. When prompted for the security code:
    • Press the button on your hardware token.
    • Enter the displayed code.
    • Click Submit or Login.

Note: 

  • Your code is time-sensitive and expires.
  • Each code can only be used once.
  • Press the button and wait for the display to show a new code.
  • You'll need your token for every login.

Troubleshooting common issues

Invalid code error message 

Possible causes and solutions:

  • Code expired: Generate a new code and try again
  • Clock synchronization: Contact IT support to resync your token
  • Typing error: Double-check you've entered the code correctly
NPI verification errors

If you're directed to use Code Generator instead of iPrescribe Authenticator:

  • This is normal if your NPI is not found in the iPrescribe system (regions 1-5)
  • You must use the hardware token (Code Generator) method for authentication
  • Contact your administrator if you believe your NPI should be verified in the system
iPrescribe Authenticator binding prevented 

If you see a message that iPrescribe Authenticator cannot be bound:

  • This is the IP-Auth-Stop-Binding-2.0 feature working as designed
  • Your NPI was not found in the DrWeb system (regions 1-5)
  • You will automatically be redirected to the Code Generator setup
  • This is a security requirement, not an error

What this means:

  • You cannot use the iPrescribe Authenticator mobile app
  • You must use a physical Code Generator (hardware token)
  • Your account security is maintained through the hardware token method
  • Contact your administrator only if you believe there's an error with your NPI status
Lost or damaged token
  1. Contact your IT administrator immediately.
  2. Use backup codes temporarily.
  3. A replacement token will need to be issued and configured.
Can't access account settings

If you're locked out and can't access settings:

  1. Use backup codes if available.
  2. Contact your IT administrator or help desk.
  3. Do not attempt to reset without proper authorization.
Token not generating codes 
  1. Check if the battery indicator shows low power
  2. Try pressing the button firmly
  3. If nothing appears, the battery may be dead, so contact IT support

Security best practices

Protect your token

  • Keep it in a secure location when not in use
  • Don't share your token with others
  • Report lost or stolen tokens immediately

Backup preparations

  • Store backup codes in a secure location
  • Keep your IT contact information readily available
  • Consider having a backup authentication method approved

Regular maintenance

  • Test your token periodically
  • Replace the battery when indicated (if user-replaceable)
  • Update your contact information if you change locations
Was this article helpful?
0 out of 10 found this helpful

Comments

0 comments

Article is closed for comments.