MedicaidAdministrativeMedium impact
DSS Important Message - Multi-Factor Authentication Mandated Enrollment on August 1,2026; Open Office Hours for Multi-Factor Authentication/Security Questions; Security Question Updates, Notifications
Connecticut Medicaid (HUSKY Health)·CT·Provider Bulletin
Effective date
Aug 1, 2026
We identified it
Jul 1, 2026
Summary
The Connecticut Medical Assistance Program (CMAP) is mandating Multi-Factor Authentication (MFA) enrollment for all providers, trading partners, and drug labelers by August 1, 2026. MFA is currently optional but will become required for all portal logins, password changes, and EFT updates. Additionally, security question structures have been updated to use dropdown menus instead of free-form questions (effective May 13, 2026).
Action Required
By August 1, 2026: All Master Users and Clerks with CMAP portal access must complete MFA enrollment. Select either Authenticator App (Microsoft Authenticator, Google Authenticator, or Authy) or Email Verification as the authentication method. Enrollment can currently be bypassed with 'Skip for Now' but will be mandatory after the deadline. Billing team should: (1) Identify all staff with portal access; (2) Ensure each completes MFA setup before August 1; (3) Update security questions using the new dropdown structure under Account > Account Maintenance if not already done (effective May 13, 2026); (4) Register key staff for Gainwell office hours (scheduled weekly through early July) to troubleshoot MFA setup. Failure to enroll by August 1 will prevent portal access for claims submission, payment status checks, and EFT management. Contact Provider Assistance Center at 1-800-842-8440 (Mon-Fri, 8am-5pm) for MFA reset issues or enrollment problems.