MedicaidAdministrativeMedium impact
DSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security Questions
Connecticut Medicaid (HUSKY Health)·CT·Provider Bulletin
Effective date
Aug 1, 2026
We identified it
Aug 10, 2026
Summary
Connecticut Medical Assistance Program (CMAP) is mandating Multi-Factor Authentication (MFA) for all providers, trading partners, and drug labelers accessing the secure web portal effective August 1, 2026. All Master Users and Clerks must enroll in MFA using either an Authenticator App or Email Verification by this date; enrollment is currently optional but will become mandatory. Additionally, security question structure has been updated to use structured drop-down menus (effective May 13, 2026) and password requirements have been strengthened.
Action Required
By August 1, 2026: All Master Users and Clerk staff must complete MFA enrollment on the CMAP secure web portal (ctdssmap.com). Billing team should: (1) Identify all staff with portal access who have not yet enrolled; (2) Require completion of MFA setup using either Authenticator App (Microsoft Authenticator, Google Authenticator, or Authy) or Email Verification method; (3) Update email addresses in Account Maintenance if outdated to ensure verification codes are received; (4) Ensure all staff understand that MFA will be required for login, password changes, and EFT information updates. Recommended: Register staff for free Office Hours (August 5-21, 2026) hosted by Gainwell Technologies for MFA training. Contact Provider Assistance Center at 1-800-842-8440 (Mon-Fri, 8am-5pm) if staff cannot complete self-service enrollment. Failure to enroll by August 1, 2026 will result in inability to access the portal and process claims electronically.