Page History

HCQIS Access Roles and Profile (HARP) is a secure identity management portal provided by the Centers for Medicare and Medicaid Services (CMS). Creating an account via HARP provides users with a user ID and password that can be used to sign into many CMS applications. It also provides a single location for users to modify their user profile, change their password, update their challenge question, and add and remove two-factor authentication devices.

<div style="background-color: #E1F3F8; box-shadow: 0 0 0 5px #fff; padding: 40px 0; width: 25%; display: inline-block; text-align: center;">
<a href="https://qnetconfluence.cms.gov/display/HS/HARP?preview=/66653342/122690239/20201116_HARP-quick-start-guide.pdf"><h1><strong>Quick Start Guide</strong></h1></a>
</div>
<div style="background-color: #E1F3F8; box-shadow: 0 0 0 5px #fff; padding: 40px 0; width: 25%; display: inline-block; text-align: center;">
<a href="https://www.youtube.com/playlist?list=PLaV7m2-zFKphoCXj7sIx2G1fwMZQQ0EJP"target="_blank"><h1><strong>Training Videos</strong></h1></a>
</div>
<div style="background-color: #E1F3F8; box-shadow: 0 0 0 5px #fff; padding: 40px 0; width: 25%; display: inline-block; text-align: center;">
<a href="https://harp.cms.gov/login/help"><h1><strong>HARP Help (FAQ)</strong></h1></a>
</div>
<div style="background-color: #E1F3F8; box-shadow: 0 0 0 5px #fff; padding: 40px 0; width: 25%; display: inline-block; text-align: center;">
<a href="https://harp.cms.gov/login/contact"><h1><strong>Contact Help Desk</strong></h1></a>
</div>

<div style="background-color: #E1F3F8; padding: 20px; margin-top: 20px;">
<h3>Scenario #2: Remote Identity Proofing</h3>
<p>Your identity is verified remotely via verifiable personal information .</p>
</div>

Step 1: Click on the following link:  https://harp.cms.gov/register

HARP will verify your identity using personal information such as date of birth, email, and Social Security Number through Experian by cross referencing databases to determine identity legitimacy.

Step 2: Enter your profile information (personal and corporate email address) and select Next.

Because your HARP ID can be used to login to several CMS applications which access sensitive information such as PHI or PII, identity proofing is required. This includes providing your SSN. If you do not wish to provide your SSN, a manual proofing option is available. Manual proofing may, however, delay the process.

Changes to the current Remote Identity Proofing (RIDP) process? 

In order for the HARP system to remain in compliance with NIST guidelines, a Risk Based Alternative (RBA) solution was developed in coordination with Experian.  The traditional Knowledge-Based Authentication (KBA) method that relies on questions, depends on static information, which can be susceptible to theft or exposure. The new RBA method utilized verifiable personal information utilizing various source databases processed through Experian.  This solution represents a more refined and secure approach to identity verification.  Experian’s RBA solution dynamically evaluates a variety of risk indicators in real-time, utilizing a broad spectrum of data points and sophisticated algorithms to determine identity legitimacy.  This approach significantly reduces the potential for fraud, providing a higher level of security for consumers and CMS alike.

What does this mean for you? 

The new RBA solutions will occur May 23, 2024.  Will only apply to new user registrations. A user with an existing application role will not have to Identity Proof again. 

What’s different?

Credit history will no longer be used. The data elements Users will now provide is Personal Identifiable Information (PII). All information used to verify your identity pertains to you. PII data elements include:

1. Legal first & last name
2. Date of Birth
3. Personal email address
4. Business email address
5. Personal phone number
6. Home Address
7. Social Security Number
8. Updated: Terms and Conditions (added ‘External Service Consent’ section)

Step 3: Choose your user ID, password, and challenge question and select Next.

Note: You will not be able to change your user ID after registration.

Step 3a: If your profile information fails to verify your identity, you have two options:

• If you think you know what you entered incorrectly, you can retry remote proofing by returning to the Profile Information screen and selecting Retry Remote Proofing. Entering the last four digits of your SSN and date of birth or your Reference Number will pre-populate the fields below.
• Call Experian to verify your identity over the phone and then enter your reference number on the Profile Information screen by selecting Enter Reference Number. This will pre-populate the fields below.

Step 4: Your account has been created and you will receive a confirmation email.

Step 5: For security reasons, all HARP accounts are required to have two-factor authentication. Select Login to Complete Setup to log into HARP and set up two-factor authentication. Once you have set up two-factor authentication, feel free to log into your respective CMS application. Follow your application’s instructions for how to request a role.

CONGRATULATIONS! You’re done! You are now registered with HARP.

If you are unable to successfully complete remote proofing, you will need to initiate manual proofing.

<div style="background-color: #E1F3F8; padding: 20px; margin-top: 20px;">
<h3>Scenario #3: Manual Identity Proofing</h3>
<p>Your identity is verified by physically sending identification documents.</p>
</div>

Step 1: Click on the following link:  https://harp.cms.gov/register

If you were unable to successfully complete remote proofing or you do not want to enter your full SSN, then you will need to initiate manual proofing.

Step 2: Enter your Profile Information and select Initiate Manual Proofing below the SSN field.

SSN field is optional if you initiate manual proofing.

Step 3: Choose your user ID, password, and challenge question and select Next.

Note: You will not be able to change your user ID after registration.

Step 4: Send the following documents to your application's help desk via email, fax, or mail

1. One of three approved forms of Government Photo IDs:
   1. Current driver’s license issued by state or territory; OR
   2. Federal or State government issued photo identification card; OR
   3. U.S. Passport
2. Two copies of financial institution official bills or statements addressed to the address used during the registration process. Payroll information is also accepted.
3. If you choose not to fill out the HARP SSN field, you will need to provide only the last four digits of your SSN to your application's help desk

Step 5: The help desk will contact you via email if they need to request additional information. When your documents have been verified, you will receive an email confirming your account creation. 

Step 6: For security reasons, all HARP accounts are required to have two-factor authentication. Select Login to Complete Setup to log into HARP and set up two-factor authentication. Once you have set up two-factor authentication, feel free to log into your respective CMS application. Follow your application’s instructions for how to request a role.

CONGRATULATIONS! You’re done! You are now registered with HARP

For any questions related to manual proofing, contact the Identity Access Management (IAM) team, Monday-Friday 7am-7pm CST by phone 1-888-599-0426 or email identityproofing@cms.hhs.gov for manual proofing questions.