Identity proofing (IDP) is a required step to activate your DrFirst ePrescribe integration in Practice Better. This article walks you through the full process, which is completed through ID.me and InfinID on behalf of DrFirst.
⚠️ Important: Once started, you must complete identity proofing within 24hrs of starting the process. Record the temporary code to re-enter the workflow within 24hrs if you're interrupted. If you cannot complete your IDP within 24hrs, you'll need to start over from the beginning.
In this article:
- Before You Begin
- Provider Identity Proofing (IDP) Overview
- Setting Up Your Token for EPCS
- Creating Your Signing Passphrase (EPCS only)
- Completing EPCS Setup with Practice Better
- Getting Help
Before You Begin
Before starting, make sure you have the following ready:
- A valid, unexpired government-issued photo ID: Driver's License, Passport, or State ID.
- A smartphone or tablet with a camera and web browser.
- (EPCS only) A two-factor authentication (2FA) token: either the Symantec VIP Access app soft token (free, downloaded from the App Store or Google Play) or a OneSpan Digipass GO7 hard token (requested from your EHR vendor).
📍 Note: If you are enrolling in EPCS, you must also add your 2FA token within 24 hours of starting this process.
Provider Identity Proofing (IDP) Overview
These steps apply to both EPCS and non-EPCS providers. If you are enrolling in EPCS, complete all steps in this section first, then continue to the Additional IDP Steps for EPCS section below.
-
Open the IDP invitation email from infinIDAdmin@drfirst.com and click the enrollment link to begin.
📍 Note: If the link isn't working, contact Practice Better support to request a new IDP email.
-
Review the prerequisites page and record your temporary code. You'll
need
this code to re-enter the workflow if you're interrupted. Click
Continue to proceed.
- Click Continue, then select Verify with ID.me.
-
On the ID.me sign-in screen, sign in to your existing ID.me account or create a new one.
📍Note: If you already have an ID.me account, signing in with your existing credentials will streamline the process. If you're unable to sign in, visit the ID.me Help Center → or email healthcare.support@id.me.
- Select your preferred identity document verification method: Driver's License or State ID, Passport, or Passport Card. Enter your mobile phone number and click Continue. A text message with a link will be sent to your phone.
- On your mobile device, tap the text message link. Click Start document upload.
-
Take a photo or upload images of the front and back of your chosen document. Place your document on a well-lit surface with a dark background and ensure all four corners are visible.
📍Note: Ensure your images are clear and not blurry, including any photo, barcode, or text on the document.
- You will be directed to a screen to remind you that are your verifying for InfinID. Read the text and select Continue.
-
Click Continue again to Capture a Selfie for verification.
📍 Note: It's recommended to take your selfie without glasses.
- Once your images are submitted, your mobile screen will prompt you to return to the original browser tab on the device where you started.
- Click Begin to enter your medical information.
- Enter your NPI Number (Type 1, Individual Provider) and, if enrolling in EPCS, your DEA number and state. Click Continue.
- Review the pre-populated information linked to your NPI and DEA number for accuracy, then click Continue.
- Once you see the "You're Verified" screen, click Continue.
-
Review the permissions screen showing the information that will be shared with DrFirst, including your name, address, NPI number, DEA number, and license details. Click Allow to share your verified identity information and complete the verification step.
✅ This is a required step. Clicking Allow sends your verified credentials to DrFirst to activate your ePrescribe account.
Non-EPCS providers
Your identity proofing is now complete. You'll receive a confirmation email. Your account will be auto-activated once you log in to DrFirst (Rcopia) and send a prescription within seven days. If you don't do this within seven days, you'll need to repeat the identity proofing process.
EPCS providers
Continue to the next section to complete token setup and passphrase creation.
Setting Up Your Token for EPCS
After clicking Allow on the permissions screen, EPCS providers will be directed to the Token Registration screen to set up two-factor authentication (2FA).
📍 Note: You must add at least one token to complete EPCS enrollment. Adding two tokens is strongly recommended in case one is lost or becomes inaccessible. Tokens must be added within 24 hours of starting the IDP process. Your account supports up to five tokens.
Adding the Symantec VIP Access App (Soft Token)
To set up your soft token:
- Download the Symantec VIP Access app from the App Store or Google Play if you haven't already.
- On the DrFirst Token Registration screen, click Add Token and click Add under the code generator option.
- Complete the required fields:
- Token Issuer: DrFirst
- Token Type: OTP SOFT TOKEN (VIP Access)
- Token Nickname: Nickname for the token to help identify it (Ex. “Symantec VIP token”, “key fob”, etc.).
- Serial Number or Credential ID: Enter the SYMC# that appears at the top of the screen without any spaces. For example: SYMC12345678 is the correct format. (If this is entered incorrectly after 3 times, the session will time out for 1 hour.)
-
One Time Passcode (OTP): The 6-digit number generated as the “Security Code” from the VIP Access app.
- Click Save. Your token status will show as activated on the web page.
Adding a Key Fob (Hard Token)
This requires ordering a hard token device from DrFirst. Learn more about Requesting a Hard Token for EPCS →
To set up your hard token:
- On the DrFirst Token Registration screen, click Add Token and click Add under the code generator option.
- Complete the required fields:
- Token Manufacturer: SYMANTEC or ONESPAN (check the label on the back of your device).
- Token Issuer: DRFIRST.
- Token Type: OTP HARD TOKEN.
- Token Nickname: A name to help identify this token (for example: "key fob").
- Serial Number: The serial number on the back of the token, entered without spaces or dashes.
-
One Time Passcode (OTP): The code currently displayed on the token.
- Click Save. Your token status will show as activated on the web page.
📍 Note: It's strongly recommended to add a second token before continuing. Click Add Token to add another, then click Continue once you're done.
Creating Your Signing Passphrase (EPCS only)
After completing token setup, you'll be prompted to create a signing passphrase and security question for your EPCS account.
- Passphrase: The password you'll use each time you prescribe a controlled substance. It must be at least eight characters, mixed case, and contain at least one number. Do not use special characters.
- Security Question and Answer: Used to recover your passphrase if you forget it. The security answer is case sensitive and must be entered exactly as written every time.
After entering all fields, click Continue. When you are done, you will see a confirmation message that you've completed identity proofing.
⚠️ Important: DrFirst cannot reset your passphrase. If you forget it and cannot answer your security question correctly, your account will be disabled and you'll need to complete identity proofing again from the beginning. Write down your passphrase and security question and answer, and store them somewhere secure.
Completing EPCS Setup with Practice Better
Once you've finished identity proofing and token setup, you're almost there.
Completing the EPCS activation requires the final authorization step of Logical Access Control (LAC), which allows providers to electronically prescribe controlled substances (EPCS).
When your IDP is complete:
- Send an email (please reply directly to your existing DrFirst integration request email) with Practice Better's support team to confirm you're ready for the next steps.
- Your next steps will depend on whether your ePrescribe setup is for a solo plan or a team plan:
-
Solo Practitioners:
- Practice Better support will arrange a Zoom call with you to complete the EPCS setup in your DrFirst account.
- After EPCS is successfully activated, Practice Better support will provide you with resources and your iPrescribe credential and signature password (to prescribe non-controlled substances).
-
Team Practitioners:
- Practice Better support will confirm that we've reached out to your designated Admin (via email separately), providing them with instructions to assist you with completing the EPCS activation.
- Practice Better support will let you know your account is set up and provide you with resources and your iPrescribe credential and signature password (to prescribe non-controlled substances).
-
✅ Once activation is complete, you'll be ready to electronically prescribe controlled substances directly through Practice Better's DrFirst integration.
Reminder: Every time you e-prescribe a controlled substance, you will need:
- Your passphrase (the controlled substance password you created)
- A current one-time PIN (OTP) from one of your registered tokens
Getting Help
Practice Better's support team can help with activation and setup questions related to the ePrescribe integration.
For help with creating prescriptions or DrFirst account-specific issues, contact DrFirst support directly and include your NPI number so they can locate your account.