Practice Fusion EPCS certification credentials
- Name of certified e-prescribing software application: Practice Fusion EHR
- Software version certified: 3.7
- Name of software application provider (company name): Practice Fusion, Inc.
Prior to beginning EPCS signup, you must have:
- Your DEA number
- Access to a smartphone that can receive text messages, download applications, and take photos. This smartphone is necessary for both EPCS signup AND when completing all electronic controlled substance prescriptions using the EHR. You will need to download the ID.me app to your mobile phone during the EPCS sign-up process.
- A Practice Fusion administrator other than yourself to grant you permission to e-sign controlled substances. The other administrator does not need to be enabled for e-prescribing. If you are the only administrator in your practice, you will need to designate another staff person as an administrator temporarily in order to complete EPCS sign-up. You can change that user’s administrator status after EPCS verification is complete.
- If you have not previously completed ID.me identity verification for e-prescribing enablement, you will need to complete ID.me identity verification during EPCS signup. To do this, you will need:
- Before starting the identity verification process, we recommend requesting a current copy of your credit report to reference. During identity verification, you will be asked questions based on your credit report. Information such as name, address, and phone number that you enter during identity verification must match the information on your credit report.
- A government issued photo ID such as a Driver’s license, state ID, or passport
Begin the EPCS activation process from your Practice Dashboard.
On your EHR Dashboard, select the Controlled Substances eRx tile (see Graphic 1 below). To see this tile, you will need to have e-prescribing enabled for your account. For instructions on setting up e-prescribing, click here.
Graphic 1: Controlled substances eRx tile
1. Confirm your DEA number
Enter your valid DEA number and click Confirm as shown in Graphic 2 below.
Graphic 2: Confirm DEA number
2. Set up the ID.me Authenticator app and verify your identity with ID.me
Click Launch ID.me. to be logged out Practice Fusion and taken to ID.me to complete identity verification (see Graphic 3 below). The ID.me verification process includes four steps:
- Step A: Confirm your Practice Fusion login email address.
- Step B: Set up the ID.me Authenticator app on your phone as required for multi-factor authentication
- Step C: Verify your personal details
- Step D: Verify your identity
Graphic 3: Set up authentication and verify your identity with ID.me
2A. Confirm your Practice Fusion login email address
Graphic 4: Link Practice Fusion login account to ID.me
Graphic 5: Confirmation email sent
Graphic 6: Confirm Email Address
Graphic 7: Close tab after email is confirmed
2B. Set up the ID.me Authenticator app on your phone as your required multi-factor authentication
For EPCS, you have two options to authenticate using the ID.me Authenticator smartphone app (see Graphic 8 below).
- ID.me Authenticator app (required for EPCS): Select the ID.me Authenticator option and then enter your phone number to receive a link to download the ID.me Authenticator app (see Graphic 9 below). Click the link and follow the steps to download the app (see Graphic 10 below). Once you have download the app, ID.me will send you a push notification via the ID.me app to complete the two-factor authentication (2FA) process.
- Code Generator Application: Select code generator application. You will see a QR code on the screen (see Graphic 11 below). If you do not already have a code generator app like ID.me Authenticator, download the app. This will be used to generate a single-use code for signing in. Once you have download the app and scanned the QR code, enter the the 6-digit code from the ID.me app (see Graphic 12 below) to complete the two-factor authentication (2FA) process.
Graphic 8: Methods for 2FA
Graphic 9: Choose app download method
Graphic 10: ID.me Authenticator app for download
Graphic 11: Scan code with code generator app
Graphic 12: Enter 6-digit code after scanning
Note: Do not delete this app from your smartphone after this step, as it will be needed to e-sign prescriptions for controlled substances. A recovery code can be used in the event you lose access to your two-factor authentication device (see Graphic 13 below). For more information on managing your ID.me Authenticator app, click here. Click Generate recovery code and save the code, or click Continue to skip this step.
Graphic 13: Recovery code
2C. Verify your personal details
ID.me uses this information along with details from your credit profile to verify your identity. The security of your information is taken very seriously and your personal information or credit history is never shared with anyone else. Verifying your identity with ID.me will NOT change your credit score. If you've frozen your credit report, contact ID.me and they will send you a personal identification number (PIN) so you can share your free credit report with them. You only need to share your credit report once.
Enter your information as it appears on your credit report:
- Name, Date of Birth, Social Security Number, and Gender: Enter your legal name, your date of birth, and social security number as shown in Graphic 14 below. Click Continue.
- Address: Enter your home address as shown in Graphic 15 below and click Continue.
- Phone number:Select the phone type you have as shown in Graphic 16 below and enter your phone number. Click Continue. ID.me will verify your identity by sending you a link via text (SMS) as shown in Graphic 17 below or a code via voice call. Check your phone and click the link. Your phone has now been confirmed as shown in Graphic 18 below. Go back to the browser on your computer to continue identity verification.
- Confirm your information Review the information that you entered. Click Edit next to the section if information needs to be changed. Once confirmed that the information is correct, click the checkbox as shown in Graphic 19 to accept the use of the Fair Credit Reporting Act data to verify your identity. Then click Continue.
Graphic 14: Enter your personal information
Graphic 15: Enter most recent home address
Graphic 16: Select type of phone
Graphic 17: Confirming phone
Graphic 18: Phone confirmed, go back to computer browser
Graphic 19: Confirm information is correct
2D. Verify your identity
Select one of the methods below to verify your identity (see Graphic 20 below). You can answer security questions based on your credit history or upload a photo of a government ID along with a photo of yourself to verify your identity.
- Answer questions about your credit history Click Start Now. Answer multiple choice verification questions based on your credit profile and financial activity. Then click Continue. Note: This will not affect your credit score.
- Upload photos of your license or state ID Click Start Now. Upload photos of your driver’s license and enter your social security number. Then ID.me will confirm your identity with public records.
- Upload a photo of your passport Upload a photo of your passport and enter your social security number. Then ID.me will confirm your identity with public records.
- Upload photos of your passport card Upload photos of your passport card and enter your social security number. Then ID.me will confirm your identity with public records.
Graphic 20: Answer security questions or upload photos to verify identity
3. Authorize Practice Fusion
After completing one of the above methods of verification, click Allow as shown in the Graphic 21 below.
Graphic 21: Authorize Practice Fusion
4. Request EHR permissions for prescribing controlled substances
After allowing your verified identity information to be shared with Practice Fusion, you will be prompted to log back into the EHR. After logging in, you will automatically return to the EPCS setup screen (see Graphic 22 below). Per DEA requirements, a practice administrator other than yourself will need to grant you permission to e-sign prescriptions for controlled substances. For instructions, see How do I set up EPCS e-signing permissions?
- You can send a message to administrators in the practice letting them know you are trying to complete activation of EPCS for your EHR account (see Graphic 23 below). Click Send message next to one of the administrators in your practice. If you are a solo practitioner, please read the FAQ below.
Graphic 22: Request EHR permissions for prescribing controlled substances
Graphic 23: Send message to administrator
To complete EPCS sign up, follow the steps on this article: Setting up EPCS e-signing permissions: Step 2 of 2
Frequently Asked Questions
Why do I need to complete an additional verification process for EPCS? I already completed it when signing up for e-prescribing.
Not all practitioners are eligible to prescribe controlled substances, so EPCS was built as an add-on to our e-prescribing module. The EPCS activation process includes a number of requirements that are specifically mandated by the DEA. If you already completed the verification process with ID.me for e-prescribing, you will not need to go through that process again, but you will need to download the ID.me Authenticator app as this is a requirement for EPCS.
What is ID.me and why is it asking for my personal information?
Practice Fusion partnered with ID.me, a credential service provider, to meet DEA requirements for identity verification and e-signing prescriptions for controlled substances. Your personal information will be only be used to verify your identity. No information will be saved except for your name and contact information.
Where do the verification questions come from?
Identity verification questions are based on your personal credit history.
What if I fail the verification process?
If you fail the identity verification process, a message will be displayed indicating that the number of allowable attempts has been reached and you will need to try again later. For more information, see: What if I fail identity verification during eRx and EPCS sign up?
What do I do if I'm the only user in my practice?
It’s a DEA requirement that two individuals be involved in setting e-signing control for electronic prescriptions for controlled substances (EPCS). According to the requirement, one individual must be the DEA registrant who has obtained the two-factor authentication credential. For Practice Fusion practices, this person is the provider registered with the DEA who has completed identify verification through ID.me and linked the ID.me Authenticator app on their smartphone to their Practice Fusion account.
The DEA specifies that the second individual must be someone who can be responsible for verifying that the registrant’s DEA number and state medical license number are current and in good standing. This individual is also responsible for managing e-signing controls, which means they will determine which providers at the practice have the ability to e-prescribe controlled substances.
Because the DEA specifies these responsibilities for the second individual, an account administrator other than the DEA registrant must log in and grant access to e-prescribe controlled substances. You have flexibility in choosing this account administrator.
We understand the two individual requirement for setting e-signing controls may be a challenge for sole practitioners, but it is a DEA requirement.
Why do I need a smartphone?
A smart phone is required to use the ID.me application, which will be linked to your EPCS account. The ID.me Authenticator application is used to generate the time sensitive push notification that is used to both confirm changes to e-signing controls and is also used to e-sign prescriptions for controlled substances.