EPCS Identity Proofing through Experian

Before You Begin

To schedule a 1:1 meeting with an ePrescribing specialist to complete the below steps, please use this link: https://calendly.com/rhyesa/eprescribe-setup-assistance.

• This process must be completed by the licensed prescriber. 
• DrFirst ePrescribe identity proofing is completed by Experian. It is recommended to temporarily remove any credit locks while completing this process. If Experian is unable to access your credit report it will cause failures. 
• Please be advised that the invitation expires after 60 days.  
• Use a computer (and not a phone) to complete the registration.
• You will receive several emails from InfinIDAdmin@drfirst.com at several points in this process. It is strongly recommended that you keep these emails until all steps are complete and you are fully active with ePrescribing. 
• You will need:
  • The physical keyfob
  • Your cell phone
  • Your driver's license, state-issued ID, or passport
  • (Optional but recommended) a personal Mastercard/Visa. This card will not be charged but can be used to skip an ID verification step.

If you have not ordered your keyfob, please do so using these links:

• Order your FIRST hard token
• Order a replacement for lost/damaged tokens

Step One: Accept the Email Invitation

To access your registration invite, follow the steps outlined below:

1. You will receive an email from do-not-reply@drfirst.com with the subject "Register to E-prescribe with [Your Organization Name]." If you do not have this email please contact your Implementation specialist or 4D EMR support at support@4d-emr.com. 
   
2. Click the Enroll Now Link. You will be redirected to the EPCS Gold login page.
3. On the EPCS Gold login page, click the "Proceed" button under the "I have an Invite" section
   

 Step Two: Identity Proofing - Demographic Information

Note: If you fail three times, this will lock your account. You cannot attempt IDP again for a full 24 hours.

1. Read and Accept the Terms of Use.
2. The next screen lists some pre-requisites for the IDP process
   
3. Complete the demographic data and verify that the pre-populated fields are correct. 
   

   
   Here are some tips and notes on the fields within this form:

   • Home Address fields. This should be the home address listed on your Experian credit report
   • Mobile Phone Number. This should be a personal mobile phone number and not a business phone
   • (Optional but recommended): Credit Card Number: While this is not required, it is highly recommended as this can increase your chances of passing IDP if you fail the first time. Please enter a personal credit card that is either a Visa or Mastercard. You will NOT be charged. Experian requires only the first 8 digits.
4. Click Continue
5. If Experian cannot validate your information, you may be required to answer 3-4 knowledge-based questions pertaining to your financial history. If Experian can validate your information then your process will continue without the knowledge-based questions.

Step Three: Identity Proofing - Identity Documents

Before you continue, be sure to copy your temporary session password in case your session times out. You will be able to pick up where you left off in the process by entering this code within 24 hours ("rGBng" in example below). 

On your smart phone or tablet:

1. Scan the QR Code using the camera app
2. After accepting terms of use, select the identifying document you will be using
   
3. Follow the prompt to take photos of the front and back of your document. If prompted allow access to your camera
   
4. Center the front of your identification on the screen and photograph it. Repeat this step with the back of your identification. Continue once you're satisfied with the photos. 
   
5. Select Take Selfie
   
6. When prompted, return to your computer and click the "Check Status" button

Step Four: Adding Tokens

It is highly recommended that you add at least two tokens in case one is lost or inaccessible. If you cannot attach two tokens at this step, you can manage tokens later from the EPCS Dashboard. If you lose access to all configured tokens, your ePrescribe account will need to be reset and you will need to complete identity proofing again.

DrFirst supports three types of tokens: physical tokens, mobile push notifications using iPrescribe, and OTP code generation using the VIP For Mobile app. 

Physical Tokens (OneSpan Key Fobs)

1. Click 'Add' under Code Generator
2. Enter the token information:
   

• Token Manufacturer: OneSpan
• Token Issuer: DrFirst
• Token Type: OTP Hard Token
• Token Nickname: Create a 'nickname' of your choice for the token, so you can identify it in the future (e.g., "Keyfob"). You will see this nickname each time you e-prescribe controlled substances.
• Serial Number: Enter the Serial Number on the back of the keyfob. Do not include dashes. 
• One Time PIN (OTP): Push the button on the front of the keyfob and enter the 6 digit number

Push Notifications (iPrescribe App)

If at any time you are prompted to pay for ePrescribing, close the iPrescribe app and rescan the QR code in step 2. Your 4D EMR subscription includes ePrescribe and you should not pay DrFirst directly.

1. click 'Add' under Push Notification (iPrescribe Authentication)
2. On your Phone. Scan the QR code to download the iPrescribe App if it is not already installed
   
3. Once the iPrescribe App is installed, scan the QR code again to connect your DrFirst account to the app.
4. If prompted allow access to your camera to Open the Scanner
   
5. On the computer. Under "Bind Your Device" create a 'nickname' of your choice for the token, so you can identify it in the future (e.g., "iPrescribe"). You will see this nickname each time you e-prescribe controlled substances
6. On the computer. Click "Bind Device" to display a Cronto Code (image with colorful dots).
   
7. On your phone. Use the iPrescribe scanner to scan the Cronto Code
8. Tap 'No, Continue Setup'
   
9.  You will then either see an Account found screen (if you are part of more than one organization) or a Create a password screen. For multi-practice users, select your practice and click Continue to get to the Create a password screen.

10. You will get a confirmation screen asking you to check your email to retrieve your username. Log in to iPrescribe Authenticator to set up the app.
    

Mobile Code Generator (VIP for Mobile App)

The VIP App is being phased out by DrFirst. It is highly recommended to set up the iPrescribe Push Notification app instead. 

1. Click 'Add' under Code Generator
2. On your mobile phone. Download the VIP For Mobile app and open it. Click through the 'What's New' alerts until you tap a button to Launch VIP access. 
3. On the computer: Enter the token information:
   

• Token Manufacturer: Symantec
• Token Issuer: DrFirst
• Token Type: OTP Softtoken Token
• Token Nickname: Create a 'nickname' of your choice for the token, so you can identify it in the future (e.g., "VIP iPhone 17"). You will see this nickname each time you e-prescribe controlled substances.
• Credential ID: Enter the Credential ID displayed on the top of the VIP app. Type in the capital letters and numbers.
• One Time PIN (OTP): Enter the 6 digit code from the center of the screen.

Once all tokens have been added, click Continue

Step Five: Create your EPCS Passphrase

1. Create a Passphrase that meets the following criteria
   • At least 8 characters long
   • Contains at least 1 upper case letter
   • Contains at least 1 lower case letter
   • Contains at least 1 number
   • Do not use special characters (!@#$%) in your passphrase. 
2. Create a Security Question and answer
   • The security question is part of the 'forgot passphrase' process
   • The security answer is case sensitive
   • Tip: Include formatting hints in your question, especially if using a date. (e.g., Date you got married mmdd)
3. Click Continue

Step Six: Verification

You will receive a verification code via text message or mail.  

• You will get a text message if Experian was able to verify your mobile phone number. Note: If you didn't get your text message instantly, click Didn't receive your code? to try again. 
• You will receive a letter in the mail within 5-7 days if Experian verified your mailing address and you were unable to receive a text message. 
• If you received the verification code after you timed out of your session, use the email link you received from InfinIDAdmin@drfirst.com to enter your verification code. If you lose this email, you may need to restart identity proofing again from the beginning. 

Text Verification

1. Enter the verification code sent to your mobile phone
   

Letter Verification

1. The verification code will be mailed to you via standard US post. You should receive it within 5-7 days. 
2. Follow the steps printed on the letter
   

Step Seven: Logical Access Control

After you have successfully completed Identity Proofing and Registration there is one final step that must be completed before you can prescribe. This step requires that you and your ePrescribe administrator be at the same physical computer. 

Steps to complete the final step can be found here: Enabling LAC and Granting Final Authorization to New ePrescribe Providers

Signature Password

When transmitting any prescription to the pharmacy, providers will be prompted for a "Signature password." This is different than the EPCS Signing Passphrase used for controlled substances that was set as part of registration. 

The signature password is the digital equivalent of signing a prescription pad. A provider's signature password is always their first name followed by rx in lower case (e.g., johnrx). 

See DrFirst Rcopia: Signing Passphrase vs. Signature Password for more information.

Other Guides

• ePrescribe Cheat Sheet - A one page guide to writing a prescription
• Manage Provider Agent Assignments - Grant clinical staff the ability to transmit noncontrolled prescriptions to the pharmacy. Note: Provider agents are not permitted in New York.