MedicaidAdministrativeLow impact
DSS Important Message - Multi-Factor Authentication (MFA) Security Updates Effective July 14, 2026
Connecticut Medicaid (HUSKY Health)·CT·Provider Bulletin
Effective date
Jul 14, 2026
We identified it
Jul 23, 2026
Summary
The Connecticut Medical Assistance Program (CMAP) Secure Web Portal is implementing MFA security updates effective July 14, 2026. Users will be limited to one enrolled Authenticator App device per account (multiple devices must be removed), and users enrolled in both Authenticator App and Email Verification methods can choose their preferred authentication method at login.
Action Required
By July 14, 2026: All billing team staff with access to the CMAP Secure Web Portal must review their MFA enrollment settings. If multiple Authenticator App devices are currently enrolled on any staff accounts, users must log into the portal, navigate to Account > MFA Enrollment, and remove all but one device before the effective date. Ensure the retained device is accessible before removing others. Notify all portal users in the practice of this requirement. No billing workflow changes are required, but portal access will be blocked for non-compliant accounts after July 14, 2026.