← Back to list
DSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication /Security Questions
Act
by Aug 1, 2026
Effective date
Aug 1, 2026
Identified
Sep 21, 2026
Summary
Connecticut Medical Assistance Program (CMAP) is mandating Multi-Factor Authentication (MFA) for all providers, trading partners, and drug labelers accessing the secure web portal effective August 1, 2026. Master Users and Clerks must enroll in MFA using either an Authenticator App or Email Verification. Additional security changes include structured security questions (effective May 13, 2026) and enhanced password requirements. MFA will be required for portal login, password changes, and EFT information updates.
Get alerts when payers change rules like this one
We check Connecticut Medicaid (HUSKY Health) and other payers every day and email you when a change matches your specialty and state.
Get Connecticut Medicaid (HUSKY Health) alertsPolicy Monitoring is free. No card required.
What to do
by Aug 1, 2026 · 8 steps
01All Master Users and Clerks must complete MFA enrollment on the CMAP secure web portal.
02Billing team leadership (Master Users) should enroll immediately using either Authenticator App (Microsoft Authenticator, Google Authenticator, or Authy) or Email Verification method via the portal login screen.
03Designate a primary and backup Master User to manage clerk MFA enrollments.
04Communicate MFA enrollment requirements to all staff with portal access (billing clerks, administrative staff).
05Ensure all registered email addresses are current in the portal Account Maintenance section before July 31, 2026.
06Attend optional office hours (September 9-24, 2026) if technical support is needed.
07CONSEQUENCES: Failure to enroll by August 1, 2026 will prevent portal access for critical functions including claims submission, payment verification, and EFT management, disrupting billing operations.
08Note: Security question structure changed May 13, 2026 - users must select from drop-down menus rather than free-form questions when resetting passwords.
Original notice
DSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication /Security Questions
ctdssmap.com · Always check the source before changing claims.
Related changes
See all Connecticut Medicaid (HUSKY Health) changes →Recent Security Update Reminder – Security Question Updates, Notifications and Multi-Factor Authentication Enrollment for Master Users and ClerksMediumEffective May 13, 2026 · Provider BulletinDSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security QuestionsHighEffective Aug 1, 2026 · Provider BulletinDSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security QuestionsMediumEffective Aug 1, 2026 · Provider BulletinMulti-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security QuestionsMediumEffective Aug 1, 2026 · Provider BulletinBrowse every Connecticut Medicaid (HUSKY Health) change in the policy list