§ Security

Multi-factor authentication.

ApexEHR’s multi-factor authentication summary for ONC criterion 170.315(d)(13).

Last updated June 11, 2026 Questions? support@apexehr.com

ONC Criterion

170.315(d)(13) Multi-Factor Authentication

Attestation Position

Yes. ApexEHR supports multi-factor authentication.

Supported Use Cases

  • Password plus TOTP verification during sign-in
  • Password plus passkey or security-key verification during sign-in
  • User MFA setup, verification, and enablement for future sign-ins
  • Recovery-code and trusted-device support for continuity scenarios

Summary

Based on documented backend and frontend MFA flows, ApexEHR supports second-factor authentication using authenticator-app and WebAuthn-based methods, with supporting recovery workflows.