← Back to list
Recent Security Update Reminder – Security Question Updates, Notifications and Multi-Factor Authentication Enrollment for Master Users and Clerks
Act
by May 13, 2026
Effective date
May 13, 2026
Identified
Sep 29, 2026
Summary
The Connecticut Medical Assistance Program (CMAP) is implementing security enhancements to its secure web portal for Master Users and Clerks. Effective May 13, 2026, security questions will change from free-form to a structured dropdown format with two required questions. Starting June 2, 2026, Multi-Factor Authentication (MFA) will become available (currently optional, with a mandatory compliance date to be announced). These changes affect how your practice accesses and manages CMAP portal accounts.
Get alerts when payers change rules like this one
We check Connecticut Medicaid (HUSKY Health) and other payers every day and email you when a change matches your specialty and state.
Get Connecticut Medicaid (HUSKY Health) alertsPolicy Monitoring is free. No card required.
What to do
by May 13, 2026 · 9 steps
01All Master Users and Clerks must prepare for security question format changes.
02Master Users and Clerks should log into the CMAP secure web portal and update their security questions using the new structured dropdown format by accessing Account > Account Maintenance before the May 13 effective date to avoid service disruption.
03Billing team should notify all staff with portal access of the change.
04Document the two new security questions selected for your organization's Master User account in a secure location.
05By June 2, 2026: Begin MFA enrollment.
06Designate which Master Users and Clerks will enroll in MFA using either Authenticator App (Microsoft Authenticator, Google Authenticator, or Authy) or Email Verification, or both.
07Ensure devices for authenticator apps are available and configured.
08Note that MFA will be required for portal login, password changes, and EFT updates once a future compliance date is announced.
09Immediately: Billing team should review the policy at www.ctdssmap.com under Information > Publications > Chapter 10 Web Portal/AVRS > Web Security Administration and contact the Provider Assistance Center at 1-800-842-8440 (Monday-Friday, 8am-5pm) with any questions.
If missed: Failure to update security questions by May 13 may result in inability to reset passwords; failure to comply with future MFA requirements may result in portal access denial.
Original notice
Recent Security Update Reminder – Security Question Updates, Notifications and Multi-Factor Authentication Enrollment for Master Users and Clerks
ctdssmap.com · Always check the source before changing claims.
Related changes
See all Connecticut Medicaid (HUSKY Health) changes →DSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication /Security QuestionsMediumEffective Aug 1, 2026 · Provider BulletinDSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security QuestionsHighEffective Aug 1, 2026 · Provider BulletinDSS Important Message - Multi-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security QuestionsMediumEffective Aug 1, 2026 · Provider BulletinMulti-Factor Authentication (MFA) Is Mandated Effective August 1, 2026, Open Office Hours for Multi-Factor Authentication/Security QuestionsMediumEffective Aug 1, 2026 · Provider BulletinBrowse every Connecticut Medicaid (HUSKY Health) change in the policy list