Note: This article is for EPCS Liaisons

Note: UM Duo enrollment is required on the same mobile device before enrolling in EPCS Duo.

Duo EPCS Two-Factor authentication solution has two EPCS device options to choose from; Duo Mobile Passcode and Token Passcode:

• Providers can use a Hardware token, this is provided by Duo Security Company. Follow the steps in these sections:
  
  • Search for and Verify Provider Information
  • Provision a Hardware Token
• Providers can us the Duo Mobile App on a Smart Device (this is the Duo Mobile Passcode Authentication Option). Follow the steps in these sections:
  
  • Search for and Verify Provider Information
  • Provision an EPCS Smart Device

Useful Links

Duo - Enroll iPhone

Duo - Enroll Android Phones

EPCS Duo Android Mobile Device Enrollment Process

EPCS Unit Liaison List

Resync EPCS Duo Hardware Token

Search for and Verify Provider Information

Regardless of the type of EPCS device selected, all providers must be searched and selected in the same way. These steps walk you through searching and selecting a provider within the application.

You cannot use Microsoft Internet Explorer to access the EPCS Provisioning Tool. You must use Google Chrome or Mozilla Firefox.

Click here to access the new EPCS Provisioning Tool.

1. Log in with your Uniqname and Michigan Medicine (Level-2) password. The search screen appears.

2. Click on Search EPCS Provider.

3. Enter the Provider's Uniqname and click Search.

4. Verify the correct results are displayed and click on the Provider's Uniqname. A new screen appears listing all of the provider's information.

4. Verify the EPCS MLearning Completed field is TRUE.

• TRUE indicates the provider has completed the required MLearning EPCS certification (containing an eLearning and an attestation statement).

5. Verify the photo and information of the provider on the MCard matches the individual you are assisting and photo on the screen.

6. Enter the Last 6-Digits of the verification code found on the back of the MCard.

• If the provider's ID card has expired the provisioning tool will stop the process. This must be corrected before you can proceed.

7. Click Next.

8. Select either Smart Device or Hardware Token based on the provider's preference.

If a provider selected the Hardware Token, complete the additional steps in the Provision a Hardware Token section. If they have chosen the Smart Device option, skip to the Enroll with a Smart Device section on page 7.

Provision a EPCS Duo Hardware Token

1. Enter the serial number on the back of the EPCS device.

1. Once you begin to enter the serial number, a drop down appears with serial numbers listed. Select the correct number from the drop down.
   
   

   If the serial number is not listed in the drop down, the token cannot be used. Select another EPCS device and try again.

   
   
   
   
   
   

   When entering the serial numbers, please note the following instances may occur:  On back of the hardware token, you will see 27-5596221-3. The number will appear in the drop down is 2755962213GO60ATH. If you type "27-" in the field, you will see a pop-up window indicating "no results found." You must skip all the hyphens when entering the serial number. If you type a portion of the number (ex: type 221<27-5596221-3>), the drop down will provide a list of all serial numbers including the typed portion. Select the correct serial number.

2. Click Next after the application verifies the serial number. 

3. Have the provider enter their Level-2 password.

4. Have the provider enter the Passcode that appears on the EPCS device.

5. Click Enter when the provider is finished.

6. Enter your Level-2 password to witness the verification and click Confirm to finish.

A screen appears confirming the process is completed. Inform the provider they will receive an In Basket Message when MiChart EPCS access is granted and available - this could take 24-36 business hours after liaison provisioning due to the secondary MiChart authentication process.

Provision a EPCS Smart Device

Note: UM Duo enrollment is required on the same mobile device before enrolling in EPCS Duo.

If the provider has chosen to use a EPCS Smart Device, complete the following steps:

1. Select the smart device the provider would like to use from the list the system automatically generates. Click Next.

2. Have the provider complete the following steps listed on the screen (Does not require user to be on Michigan Medicine network):

1. Install the Duo Mobile App.
   
   

   You can install the Duo Mobile app from Apple's App Store, Google Play Store, or MM Apps. You may need your Apple App Store or Google Play credentials to install the Duo Mobile App. For specific instructions on how to install apps, please visit: Apple App Store Google Play Store UMHS Apps for iOS (only applicabe if Intune/Company Portal is installed) UMHS Apps for Android Devices (only applicable if Intune/Company Portal is installed)

   
   
2. Open the activation email on the smart device
3. Click the link within the email. 
   
   

3. Have the provider enter their Level-2 password.

4. Have the provider enter the Passcode that appears on the smart device.

• The provider can find the passcode by taping the key icon in the Duo Mobile app.
• Click the link to the right of the field if the provider needs help retrieving a passcode.

5. Click Enter when the provider is finished.

6. Enter your Level-2 password to witness the verification and click Confirm to finish.

A screen appears confirming the process is completed. Inform the provider they will receive an In Basket Message when the EPCS device is processed by MiChart Security and ready to be used in MiChart. This could take 24-48 business hours due to a secondary authentication process.