Multi-factor Authentication in LegendEHR #

LegendEHR employs MFA in 4 different ways for enhanced security and privacy.

Email authentication via OTP #

This is a user-level authentication. If system administrators have enabled this option, users are only allowed to log in if they enter the OTP sent to their registered email address.

Phone number authentication via OTP #

This is a user-level authentication. If system administrators have enabled this option, users are only allowed to log in if they enter the OTP sent to their registered phone number.

Device Encryption #

LegendEHR enables system administrators to encrypt specific user devices with the system. Users are only allowed to login through the registered devices. Any device that is not registered with LegendEHR is obstructed from accessing the system.

IP address authentication #

This is office level authentication. Offices may use static IP addresses that can be registered with LegendEHR. Users are only allowed to access the system if they are connected to the office network and have the static IP address registered with the system. LegendEHR also gives the option to whitelist certain users who might need to access the system outside of office hours.