Setting Up Electronic Prescribing of Controlled Substances

The practice administrator should complete the EPCS Request Form for each provider in the practice. To complete the form, you'll need the following information for each provider:

• Name
• Eyefinity EHR user name
• Email address
• NPI
• Medical license number
• DEA number

Once the practice administrator has this information, he or she can complete the EPCS Request Form. The provider will receive an email from Eyefinity when their Eyefinity EHR account has been updated.

Once you receive confirmation from Eyefinity that your account has been enabled for EPCS, you must sign up for an ID.me account or connect an existing account to Eyefinity EHR.

1. Log into Eyefinity EHR on the web.
2. Click Preferences.
3. Locate the EPCS ID Proofing section of the preferences and click Identity Verification.
4. Click the Sign Up for an Account link.

   OR

   Sign in with an existing account.

   

5. Complete the required fields and click Sign Up.

   An email is sent to the address provided.

6. Check your email and locate and the message from ID.me. Click the Confirm Your Email link.

   Your ID.me account has been created. You may now set up two-factor authentication.

Two-factor authentication (2FA), sometimes called multifactor authentication (MFA), greatly reduces the likelihood that someone could prescribe controlled substances on your behalf without your knowledge by requiring two methods of authentication. These methods are a combination of something you know (i.e., a password) and something you have (e.g., smartphone, smartwatch). To complete these steps you'll need a desktop or laptop computer and a smartphone. Here's how to set up 2FA:

1. If the browser tab you used to create your ID.me account is still open, return to that tab.

   OR

   Open your browser and log into your Eyefinity EHR account, click Preferences, and click Identity Verification.

2. Locate the Code Generator option and click Select or Add.

   A QR code displays. Leave this window open.

3. On your smartphone, download and install the ID.me Authenticator app.

   

4. Open the app and tap the green + icon to add an account.
5. Tap the Scan QR Code button.
6. If prompted, allow the ID.me Authenticator app access to your camera.
7. Point your smartphone's camera toward the computer screen so the QR code is in view.

   

   When the QR code is recognized the app displays a six-digit code.

8. On the computer, click the Continue button.
9. Enter the six-digit code displayed in the ID.me Authenticator app and enter a short name for your device.
10. Click Continue.

    The code displayed is valid for only 30 seconds. A countdown timer displays the time until to the code expires. If the code expires before you click Continue, you may need to enter a new code.

    

    You have successfully enable 2FA.

Once you've enabled two-factor authentication, the ID.me web page asks you to enter your medical credentials to verify your eligibility for EPCS. You can enter your medical credentials only by accessing ID.me through Eyefinity EHR.

1. If the browser tab you used to create your ID.me account and enable 2FA is still open, return to that tab.

   OR

   Open your browser and log into your Eyefinity EHR account, click Preferences, and click Identity Verification.

   ID.me gives you the option of verifying your identity by answering questions about your credit history or by uploading photos of your driver's license or passport.

   Choosing to answer questions about your credit history does not affect your credit score. If you have a fraud alert message on file with a credit reporting agency, you must remove the fraud alert message. Usually this request must be made in writing and could take weeks to process. Contact the credit reporting agency that initiated the fraud alert. You may restore your fraud alert after you have verified your identity through ID.me. If you recently changed your name or if you’ve been the victim of identity theft, you may be required to provide physical documentation of your identity.

2. After verifying your identity, enter your individual NPI and complete the remaining fields. The NPI must match the individual NPI entered in Eyefinity EHR.

   ID.me instantly verifies your medical ID.

3. Click Continue once your medical ID is available.
4. Click Allow to authorize Eyefinity EHR to connect to your ID.me account.

If you're unable to complete any part of this process online, you will be prompted to speak with an ID.me agent.

Before you can prescribe controlled substances, two people must confirm your access:

• A member of your practice who has administrator access to Eyefinity EHR
• Another provider who has undergone the identity verification process for EPCS

The office administrator and the validating provider must perform the following steps together:

1. The office administrator logs in to Eyefinity EHR on the web as an administrator.
2. The office administrator selects the provider.
3. The office administrator verifies the provider's Rx DEA IDs are entered:
   1. Click the Settings tab.
   2. Verify the DEA ID, License Number, and License State are entered correctly.
4. The office administrator clicks the EPCS Access Control tab.
5. Under the Electronic Prescribing of Controlled Substances (EPCS) heading, the office administrator performs the following steps:
   1. Select the I Agree check box.
   2. Select the Enable Practitioner Rights to EPCS radio button.
   3. Select both of the EPCS Activation check boxes.
   4. Select a Second Account Activator.
6. The validating provider opens the ID.me Authenticator app on his or her smartphone.
7. The validating provider enters the Security Code displayed in the app and clicks Activate EPCS.

In addition, the office administrator must complete the following steps to update the provider's Surescripts registration:

1. Log in to Eyefinity EHR on the web as an administrator.
2. Select the provider.
3. Click the ePrescribe tab.
4. Click the SPI hyperlink that corresponds to the provider's primary practice location.
5. Select the Controlled Substances check box and click Update Surescripts Data.
6. If the provider will prescribe controlled substances at other locations, repeat steps 4 and 5 for each location.

Writing prescriptions for controlled substances is similar to writing prescriptions for noncontrolled substances, with two small differences:

• Not all pharmacies accept EPCS, so your pharmacy options may be limited.
• You'll be required to enter a six-digit security code generated by your ID.me Authenticator app to send the prescription to the pharmacy. This means you'll need access to your smartphone or smartwatch with the ID.me Authenticator app.

To learn how to write electronic prescriptions, go to ePrescribing a Medical Prescription on the iPad or Prescribing Medications Electronically in the Browser