MedicaidAdministrativeHigh impact
DSS Important Message - Open Office Hours for Multi-Factor Authentication /Security Questions; Multi-Factor Authentication Mandated Enrollment on August 1, 2026; Security Question Updates, Notifications
Connecticut Medicaid (HUSKY Health)·CT·Provider Bulletin
Effective date
Aug 1, 2026
We identified it
Jul 11, 2026
Summary
Connecticut Medical Assistance Program (CMAP) is mandating Multi-Factor Authentication (MFA) enrollment for all providers, trading partners, and drug labelers by August 1, 2026. MFA was made optional on June 2, 2026, but becomes mandatory on the August 1 deadline. The policy also updates security question structure to use dropdown menus instead of free-form questions (effective May 13, 2026) and implements notification alerts when security settings change. Office hours are available in July 2026 for enrollment support.
Action Required
By August 1, 2026: All billing team staff with portal access (Master Users and Clerks) must complete mandatory MFA enrollment on the CMAP secure web portal. REQUIREMENTS: (1) Designate MFA enrollment coordinator to track staff completion; (2) Each user must enroll using either Authenticator App (Microsoft Authenticator, Google Authenticator, or Authy) or Email Verification method by the August 1 deadline; (3) Billing staff should register for and attend one of the available office hours (July 1-31, 2026) to receive enrollment training; (4) Update internal security procedures to reflect that MFA is now required for portal login, password changes, and EFT updates; (5) Ensure all staff understand that accounts attempting to bypass MFA after August 1 will be unable to access the portal. Contact Provider Assistance Center at 1-800-842-8440 (Mon-Fri, 8am-5pm) with technical issues. CONSEQUENCES: Inability to access the CMAP portal after August 1, 2026 without MFA enrollment will disrupt claims submission, prior authorization requests, and payment processing.