1. Help Center
  2. Managing your account
  3. Connection and multifactor authentication

Learn more about multi-factor authentication

🔏The security of your account has been strengthened with the introduction of multi-factor authentication. This protection is part of the minimum security measures required by the ministère de la CybersĂ©curitĂ© et du NumĂ©rique du QuĂ©bec.  

  1. What is multi-factor authentication?
  2. What is a one-time verification code?
  3. Why do I now have to enter a one-time verification code to access my account?
  4. Am I required to enable multi-factor authentication?
  5. What methods can I use to receive my verification code?
  6. What is an authentication app?
  7. Why is it not possible to receive a verification code via email?
  8. What are the alternative methods to receive a verification code if I do not own a cell phone? 

  1. Do I need to enter a validation code every time I log in?
  2. How long is the validation code valid?
  3. At my workplace, I need to log in at two different computer stations. Will I have to enter a code on each station?
  4. Considering my work schedule, I change sites. Can I configure multifactor authentication for more than one location?
  5. I'm not allowed to use my cell phone at work. How can I receive my validation code?

  1. Connection Issues 

 

Multi-factor authentication

1. What is multi-factor authentication?

Multi-factor authentication (MFA), also known as two-factor authentication (2FA) or two-step verification, is an enhanced security feature that requires two methods to authenticate you. This mandatory security measure aims to prevent unauthorized access to your account. In addition to your password, you must enter a one-time verification code. This code, unique to each session, can be delivered to you through an authentication app or via SMS.

2. What is a one-time verification code?

A one-time verification code is a string of characters or digits used to authenticate a user. Once multi-factor authentication is enabled, you will need to enter a one-time verification code each time you log in, unless you are logged in from the same IP address. Each code can only be used once.

This code can be delivered to you through an authentication app or via SMS.

3. Why do I now have to enter a one-time verification code to access my account?

Multi-factor authentication is part of the minimum security measures required by the ministère de la Cybersécurité et du Numérique du Québec. This feature helps protect your personal information and the patient data contained within the Omnimed application.

4. Am I required to enable multi-factor authentication?

Yes. Multi-factor authentication is mandatory for all Omnimed users. It is part of the minimum security measures required by the ministère de la CybersĂ©curitĂ© et du NumĂ©rique du QuĂ©bec. 

5. What methods can I use to receive my verification code?

Omnimed offers two authentication methods: through an authentication app and via SMS.

  • The authentication app (highly recommended) involves downloading an app on your device that generates a random code every 30 seconds.
  • SMS authentication (optional) involves receiving a code via text message.
We recommend setting up both methods so you can access your account in any situation. If there is an issue with the first method, the second method will allow access. It is your responsibility to ensure you always have access to your backup method.

6. What is an authentication app? 

An authentication app generates random codes approximately every 30 seconds. This type of app downloaded to your mobile device is a more secure solution compared to SMS because the code remains valid for a longer period of time.

There are several free two-factor authentication apps that can be used to log in to Omnimed, such as:

7. Why is it not possible to receive a verification code via email?

The ministère de la Santé et des Services Sociaux (MSSS) does not authorize email as a communication method for multifactor authentication.

8. What are the alternative methods to receive a verification code if I do not own a cell phone? 

Please refer to your organization's cybersecurity policy to find out about authorized alternatives, or consult your IT support contact.

 

 

Logging in with multi-factor authentication

1. Do I need to enter a validation code every time I log in?

Your authentication with your validation code remains active for a duration of 12 hours for each IP address.

If you log in to your Omnimed account multiple times during the day and the workstations are connected to the Internet at the same IP address (devices on the same computer network), you will likely only need to enter your validation code once when you start work. However, when you get home, you will need to enter a validation code again as it is a different Internet network.

Note that some devices may automatically delete cookies, requiring you to enter a validation code each time you log in to Omnimed.

2. How long is the validation code valid?

The validity period of the code depends on the authentication method. Each unique code is valid for 30 seconds with the authentication app and 5 minutes when the code is sent via SMS.

Make sure to have your device with you when logging in to Omnimed!

3. At my workplace, I need to log in at two different computer stations. Will I have to enter a code on each station?

This depends on the Internet network configuration at your workplace.

If both computers are connected to the same Internet network, the validation code will not be required again for a period of 12 hours. During this time, the user only needs to enter their username and password.

However, if the clinic has two separate Internet networks, the user will need to enter a validation code on each workstation. Authentication will remain active for 12 hours on each computer.

4. Considering my work schedule, I change sites. Can I configure multifactor authentication for more than one location?

Multifactor authentication is not configured for a specific workstation or site; it is associated with your user account. Once the setup steps are completed, you can log in to your Omnimed account from any workplace.

5. I'm not allowed to use my cell phone at work. How can I receive my validation code?

Please refer to your organization's cybersecurity policy to find out about authorized alternatives or consult your IT support contact.

 

Connection issues

 
 Consult this article for MFA connection issues (new tab)