EPCS: Activate EPCS/Logical Access Control (Web)

This article provides instructions on how to complete Logical Access Control (LAC).

During this step, administrators will authorize/activate providers for EPCS in Rcopia. 

Note: 

  • This article does not apply to iPrescribe self-registered users
  • Occurs after a provider has successfully completed the identity proofing process through the EPCS Gold Invite and has associated two-factor authentication (hard and/or soft token + passphrase) to their account 
  • Only providers who have reach an EPCS "Enrolled" status will appear in the LAC screen. If a provider does not show on the LAC screen, their EPCS account is not in "Enrolled" status with the practice organization or practice location.
  • Administrator privileges are required to access LAC via Utilities in the Rcopia menu
  • The Last Change field in the LAC column will update based on any activity on the EPCS account (e.g., email change, grant change, DEA change, name change).

Completing Logical Access Control (LAC)

Note: Only an Administrator will have the capability of performing LAC. The Administrator must be logged into their own DrFirst Account and must be a staff user, not a provider. Users with an NPI on their own profile may function as Administrators but do not have access to LAC.

The designated practice administrator who will complete LAC will: 

1. Log in to their Rcopia account by navigating to Rcopia's Login Page: https://web3.drfirst.com/login 

2. Go the the main (hamburger) menu on the top left corner. 

3. Select Utilities.

4. Select Logical Access Control (LAC).

Utilities_LAC_tile.png

(click to enlarge)

5. To locate the provider, enter provider information in the search field, then click Search.

  • First Name
  • Last Name
  • NPI

LAC_Search_Prescribers.png

(click to enlarge)

6. Click the Active radio button for the appropriate/desired prescriber to grant EPCS authorization. 

Conversely, to disable EPCS prescription permissions, Admins can click Inactive.

7. Under Granting Administrator, the administrator will enter their own first and last name as it appears on their user account.

LAC_Granting_Admin_screen.png

(click to enlarge)

8. Under Authorizing Prescriber, the administrator will populate the Enter NPI field with the provider's NPI number, then click Validate.

9. The Provider will complete the remaining fields, then click Authorize. Alternatively, a designated practice provider who is already activated for EPCS may complete these steps. 

  • Choose a Device from list: This field should auto-populate all active registered tokens.
      • Please ensure the token being used is selected.
  • Enter the signing passphrase: The provider should have already set the signing passphrase (controlled substance password) during EPCS enrollment.
  • Enter the One Time Pin (OTP) from the selected token: This six-digit code generates every 30 seconds.

LAC_Authorizing_Prescriber.png

(click to enlarge)

10. You will be redirected to a page that will prompt you to click Refresh. Doing so will reload the LAC page with the desired grant change(s) applied. 


Note:  If you receive the error "Your Logical Access Control session has ended. No changes were made" please repeat this process and be sure the Active button is selected in Step 4.

LAC_after_auth_ack.png

(click to enlarge)

Congratulations, the EPCS grant has now been activated, and the provider can now start prescribing controlled substances electronically!

Was this article helpful?
4 out of 8 found this helpful
  • We looked in our LAC table in our software and we don't see the provider listed as an option to select so we are unable to authorize them.

    0
  • Good afternoon Meghan, to escalate this issue please Submit a request to DrFirst Support. The article, How to Submit a Request provides more details on this process. 

    1