MedicaidAdministrativeHigh impact
DSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security Questions
Connecticut Medicaid (HUSKY Health)·CT·Provider Bulletin
Effective date
Aug 1, 2026
We identified it
Sep 5, 2026
Summary
The Connecticut Medical Assistance Program (CMAP) is mandating Multi-Factor Authentication (MFA) for all providers, trading partners, and drug labelers accessing the secure Web Portal, effective August 1, 2026. Starting immediately, users can enroll in MFA using either an Authenticator App or Email Verification. After August 1, 2026, MFA enrollment will be required (no longer optional) for all Master Users and Clerks to log in, reset passwords, and update electronic fund transfer information.
Action Required
By August 1, 2026: All billing team members with Master User or Clerk access to the CMAP secure Web Portal must enroll in Multi-Factor Authentication. Action items: (1) Identify all staff requiring portal access (Master Users and Clerks); (2) Instruct each user to enroll in MFA using either an Authenticator App (Microsoft Authenticator, Google Authenticator, or Authy recommended) or Email Verification before the August 1, 2026 deadline; (3) Ensure all users have current email addresses on file if using Email Verification option; (4) Document MFA enrollment completion for compliance tracking. After August 1, 2026, MFA will be mandatory for all portal logins, password changes, and EFT updates—failure to enroll will prevent access to the CMAP portal and may disrupt claims submission and account management. Optionally, attend open office hours (September 4, 8, 9, or 11, 2026) for MFA setup support, or call Provider Assistance Center at 1-800-842-8440 (Mon–Fri, 8am–5pm) with enrollment questions.