Epic Haiku/Canto Two-Factor Authentication

Two-Factor Authentication (2FA) is now required for Haiku and Canto logins. Users will utilize their Microsoft Authenticator app for authentication. New authentication is required every 14 hours (once daily). Enrollment for 2FA must be completed in Epic. The user will be prompted to enroll when they log into Epic if they have previously logged into Haiku.

Two-Factor Authentication Enrollment

  1. Upon login, you will encounter the Two-Factor Authentication – Enrollment Welcome screen. Click Get Started to begin.


2. On the Configure screen, you will be presented with a QR code

A screenshot of a computerAI-generated content may be incorrect.

 

a) Have the user their Microsoft Authenticator app A blue lock with a person in the middleAI-generated content may be incorrect.their Mobile device.

b) Tell the user to click the scan button A blue circle with white textAI-generated content may be incorrect.and scan the QR code on the screen in Epic hyperdrive. Once scanned, the user will be redirected to a screen that lists available accounts used with the app.

A screen shot of a qr codeAI-generated content may be incorrect. 

 

c) Navigate back to the Configure screen in Epic hyperdrive (depicted above) and click Next.

 

  1. In Epic hyperdrive, you should now be on the Verify screen. Enter the passcode displayed in the app and click Verify.

A screenshot of a computerAI-generated content may be incorrect.

 

  1. You will be redirected to a verification Success screen. Click Next. You are finished with the

enrollment process and are now protected by Two-Factor Authentication! Click Finish.

A screenshot of a computerAI-generated content may be incorrect. A screenshot of a computer and a phoneAI-generated content may be incorrect.

 

MOBILE APP LOGINS

The workflow for mobile login is the same for Canto and Haiku (iOS and Android). Icons for each are below. New authentication is required every 14 hours (once daily). If the user authenticated via hyperdrive less than 14 hours ago, they would not have to authenticate in the mobile app. The user will not be prompted to authenticate until after they enroll 2FA. It is recommended to log into Epic hyperdrive first.

 

  1. Open the mobile app and login using your available/preferred method, password, pin or biometric.
  2. At the User Authentication screen, instruct the user enter their one-time passcode. They will need to navigate to the Microsoft Authenticator app to get the one-time passcode. Once entered, the user will need to click the right arrow. The user will then be taken to the mobile app home screen.

A screenshot of a phoneAI-generated content may be incorrect. A screenshot of a passwordAI-generated content may be incorrect.

 

New phone - Haiku Reset/Reconfigure

If the user has a new phone or simply needs to reconfigure the Haiku app. This will help reset or reconfigure their Haiku or Canto authentication.

  1. Ensure that the user has installed Haiku on their phone or Canto is installed on their iPad. If the user has not installed the Haiku or Canto app, have them go into the app store and install Haiku or Canto app.
  2. Email the configuration link to the user. 
  3. Ensure that Microsoft Authenticator is installed. If not, assist user with the installation process. 
  4. After installing apps, log into Epic Hyperspace.
  5. Select the Epic drop down and select My Settings. 

 

 

  1. Select Two-Factor Authentication Enrollment. 
  2. Select Reconfigure and click Finish.