HARP

HCQIS Access Roles and Profile (HARP) is a secure identity management portal provided by the Centers for Medicare and Medicaid Services (CMS). Creating an account via HARP provides users with a user ID and password that can be used to sign into many CMS applications. It also provides a single location for users to modify their user profile, change their password, update their challenge question, and add and remove two-factor authentication devices.

Who will get a HARP ID?

If you have an EIDM account, your EIDM credentials will also work on HARP and you do not need to follow the steps below to request a HARP ID.

QUICK START GUIDE

How to get a HARP ID

Scenario #1
If you have an active EIDM account*, your EIDM credentials will work in HARP, and there is no need to register for a new HARP ID. However, you do need to log into HARP using your EIDM credentials to migrate your EIDM account to HARP via the steps below.

Step 1: Click on the following link: https://harp.qualitynet.org/.

Step 2: Enter your EIDM User ID and Password.

Step 3: Acknowledge the Terms & Conditions and click Login.

Note – Your EIDM is not your EUA ID. Please do not use your EUA ID to log into HARP.

*If you have an EIDM account, but you experience issues following the above steps, please contact the QualityNet Help Desk at 1-866-288-8912.

Scenario #2
If you do NOT have an EIDM account, register for a HARP account via the steps below.

A tutorial video on creating a HARP account is available on YouTube: https://youtu.be/G1zj8JqxWg4

Step 1: Click on the following link: https://harp.qualitynet.org/

Step 2: Enter your profile information (please use your corporate email address) – Click Next
(Because HARP ID can be used to login to several CMS applications which access sensitive information such as PHI or PII, identity proofing is required. This includes providing your SSN. If you do not wish to provide your SSN, a manual proofing option is available on that screen. Manual proofing may, however, delay the process.)

Note to CMS Federal Employees Only – if you used your CMS email address to complete this step, you are encouraged to select the Bypass Proofing option. By using your CMS email address, the Bypass Proofing option expedites the process. Follow the instructions in the pop-up window to complete this step.

Step 3: Choose your User ID, password, and challenge question – Click Next

Note – Do not use your EUA User ID as your HARP ID.

Note to CMS Federal Employees Only – if you selected the Bypass Proofing option, registration process ends here.

Step 4: Answer the five Identity Proofing Questions
(Experian will provide personal questions based on information pulled using the provided SSN and other personal information. Answering these questions correctly verifies your identity)

Step 5: Your account has been completed and you will receive a confirmation email. – Click Login to Complete Setup

Step 6: Login using your newly created User ID and password

CONGRATULATIONS! You’re done! You are now registered with HARP

Video: Getting My HARP ID

Note to CMS Federal Employees Only: Follow the instructions in this handout to bypass proofing: CMS Bypass Proofing Handout

Video: HARP User Profile

Requesting a User Role in HARP

A tutorial video on the HARP User Roles is available on YouTube:

Step 1: Login to your HARP account which will take you to your User Profile. From there, select “User Roles”. The Program and Role chosen in the screenshot is an example.

Step 2: Request a role.

Step 3: Select the desired Program.

Step 4: Select your Organization.

Step 5: Select the desired User role.

Step 6: You will be notified via email when your role has been approved.

Video: HARP Security Official Role

Video: HARP User Roles

Each organization needs to designate a Security Official (SO) who will be responsible for approving individuals for access to various programs within their organization. For more information, please see the HARP Security Official Role page.

Need Help?

Please contact the QualityNet Help Desk with questions regarding registering or access via email at qnetsupport@hcqis.org or phone at 1-866-288-8912.

Please contact the Experian Help Desk for identity proofing questions. The Experian Help Desk is open Monday through Friday from 8:30 a.m. to 10:00 p.m., Saturday from 10:00 a.m. to 8:00 p.m., and Sunday from 11:00 a.m. to 8:00 p.m., Eastern Standard Time. You can contact the Experian Help Desk at (866) 578-5409. The Experian website can be accessed at experian.com

Each organization needs to designate a Security Official (SO) who will be responsible for approving individuals for access to various programs within their organization. Below are the steps for requesting to be assigned as your organization’s SO for a Program. Once your request is approved, you will review and approve requests from members of your organization for access to the desired programs.

Requesting the SO Role in HARP

Step 1: Log in to your HARP account which will take you to your User Profile. From there, select "User Roles"

Step 2: Request a role

Step 3: Select the desired Program

Step 4: Select your Organization

Step 5: Select the Security Official role

Step 6: You will be notified via email when your role has been approved.

Approving User Roles in HARP

Step 1: Log in to your HARP account which will take you to your User Profile. From there, select "Security Official."

Step 2: On this page, you will view the Pending Role Requests

Step 3: Choose the Role Requests

Step 4: Select Approve or Reject

Step 5: An email will be sent to the requester notifying them of approval or rejection.

Video: HARP Security Official Role

FAQs

General

User IDs must be between 5-100 characters and unique (cannot already be taken by another user).

Passwords must be a minimum of 12 characters and include a lowercase letter, uppercase letter, number (0-9), and symbol (!@#$%^&*). They cannot contain first name, last name, or part of user ID.

HARP is a secure identity management portal and asks for personal information to verify the user's identity. HARP uses Experian to remotely proof users by taking user-entered data, such as date of birth and social security number (SSN), to generate a list of personal questions for the user to answer to verify his/her identity.

RIDP is the process of validating sufficient information that uniquely identifies you (e.g., credit history, personal demographic information, and other indicators). This method is used for verifying the identity of a user as opposed to manual proofing or in-person proofing. If you are requesting electronic access to protected CMS information or systems, you must be identity proofed to gain access.
CMS uses the Experian identity verification system to remotely perform identity proofing. Experian is used by CMS to confirm your identity when you need to access a protected CMS Application.
You may have already encountered RIDP through various interactions with banking systems, credit reporting agencies, and shipping companies.
When you log in to HARP, you will have the option to RIDP. You will be asked to provide a set of core credentials which include:
- Full Legal Name, Social Security Number, Date of Birth, Current Residential Address
Experian will use your core credentials to locate your personal information in Experian and generate a set of questions. Experian will attempt to verify your identity to the appropriate level of assurance with the information you provided. Most users can complete the ID proofing process in less than five minutes. If you encounter problems with RIDP, you will be asked to contact Experian Support Services via telephone at (866) 578-5409 to resolve any issues.

If you cannot identity proof online, you will be asked to contact the Experian Verification Support Services Help Desk at (866) 578-5409. The system will provide you with a Reference Number to track your case. For security purposes, the Experian Help Desk cannot assist you if you do not have the reference number.

For more questions visit the HARP Help page

Video: Getting My HARP ID

Note to CMS Federal Employees Only: Follow the instructions in this handout to bypass proofing: CMS Bypass Proofing Handout

Video: HARP User Profile

Video: HARP Security Official Role

Video: HARP User Roles

Need Help ?

If you have any issues with registering, please contact your QualityNet Help Desk. For questions related to the new service offerings, please visit the HARP Help page or contact QualityNet_IT_Services@hcqis.org.