SecureAuth DEA Compliant Solutions for Electronic Prescriptions for Controlled Substances (EPCS)

DEA Compliant Solutions
Back to Blog
January 31, 2017
Jeff Hickman

SecureAuth DEA Compliant Solutions for Electronic Prescriptions for Controlled Substances (EPCS)

In March of 2010, the Drug Enforcement Administration (DEA) ruled on permitting the electronic prescriptions for controlled substances (EPCS) which allows providers and pharmacies the option of sending and receiving prescriptions for controlled substances electronically. As expected, the DEA imposed some strict rules on implementing and supporting EPCS, in part due to the widespread abuse of controlled substances. Part of the restrictions for EPCS is requiring two-factor authentication on the part of the prescribing physicians.

Why SecureAuth for EPCS?

SecureAuth’s flexible authentication framework allows providers to deploy DEA compliant 2-factor authentication in ways that are not intrusive on physicians; and in many casesSecureAuth can actually optimize workflows by reducing clicks. Its aim is to provide the quickest way to ensure that the accessing physician is the one authorized to approve the prescription, per DEA standards.


  • Multiple authentication methods that not only meet DEA regulation but make 2-factor authentication easy for physicians – such as push-to-accept, fingerprint biometric, and other DEA compliant methods
  • Flexible authentication platform that allows providers to select the 2FA method which best conforms to workflow requirements for e-prescribing
  • Seamless integration into major Electronic Medical Record (EMR) software.

2-Factor Authentication for Epic Hyperspace

One of the most widely used EMR platforms is Epic Hyperspace. SecureAuth provides a two-factor authentication module specifically for native integration into Epic. This value-added module (VAM) allows physicians to use either a Time-based One-Time Passcode (TOTP) or Mobile Login Request (Push to Accept). Both methods are FIPS 140-2 certified and accepted methods for use in EPCS. SecureAuth has found wide adoption from physicians in allowing them to provide two-factor authentication in a way that is convenient and easy for them to do.


Additional Benefits of SecureAuth:

  • Holistic/centralized/consolidated solution for all access control across on-premises, cloud, mobile, homegrown, and VPN resources allowing you to purge multiple disparate solutions that raise costs while providing a consistent user experience. Options to deploy on-premises, in the cloud, or hybrid of the two.
  • Passwordless Authentication means users don’t have to create, strengthen, change, or inadvertently share, or call the helpdesk to reset passwords.
  • Audit log visualization (dashboard) and data sharing with SIEMs/SOCs to more quickly identify authentication anomalies and correlate with other security information for accelerated remediation.

Contact us today to explore and learn more about SecureAuth

Never Miss a Beat
Subscribe to Our Blog

SecureAuth Identity Platform Adaptative Authentication

Identity and Access Management

Empower your digital initiatives with secure access for everyone and everything connecting to your business

Product Features

Adaptive Authentication

Extend verification of a user identity with contextual risk checks

Multi-Factor Authentication

Leverage a broad portfolio of authentication factors for desktop and mobile

Intelligent Risk Engine

Protect your identities with advanced risk profiling analytics

Single Sign-On

Provide app discovery and one-click login through portal or desktop SSO

User Lifecycle Management

Enable admins with strong CRUD capabilities and users with self-service tools

Secure All Identities


Customer Identities

Deliver a frictionless customer experience safeguarding user data and privacy


Workforce Identities

Govern and control access rights for employees, partners, and contractors

SecureAuth Authenticate App

Passwordless MFA client with
Symbol-to-Accept. Stronger security.

The Value of Deploying Multi-Factor Authentication in a Digital World

Value of Deploying Multi-Factor Authentication in a Digital World

Read this white paper to gain insights and understanding of why passwords create risk and blind spots for organizations and their users.


Passwordless Authentication

Reduce the risk of breaches by eliminating passwords

2FA is Not Enough

Block popular phishing and brute force attacks used by bad actors

Protecting Office 365

Extend adaptive authentication and flexible MFA to all apps including Office 365

Securing Portals and Web Apps

Balance strong security and an exceptional user experience

RSA Migration

Transition to a modern identity and access management solution



Financial Services


Energy and Utilities

Public Sector


White Papers


Analyst Reports



Recorded Webinars

Innovation Labs

Support Portal

Calculate Your Savings

Lower support costs by enabling your users the control to reset passwords, account unlocks, device enrollment and update profiles

Meet SecureAuth

About SecureAuth