Frequently Asked Questions

The most frequently asked questions (FAQ) by EIDM users are listed below:

For more information, please refer to the pages.

General Information

1.     What is CMS EIDM?

EIDM is the acronym for CMS' Enterprise Identity Management system, which includes User Registration, Authentication, Authorization, and Identity Lifecycle Management (IDLM) Services.

2.     What does EIDM have to do with the CMS Enterprise Portal?

EIDM is integrated with the CMS Enterprise Portal. This integration makes it possible for users to register and receive a single User ID/Password on the CMS Enterprise Portal, which they can then use to access multiple CMS applications.

3.     What is a CMS EIDM user account?

An EIDM account ensures that only authorized users can access protected information and systems by registering via the CMS Enterprise Portal.

4.     I am new to CMS Enterprise Portal. How do I create my user account?

Once you are on the CMS Enterprise portal landing page, select the ‘New User Registration’ link. You are required to enter some personal information and choose a desired User ID/Password following the guidelines provided. Once the details have been successfully updated in EIDM, the system will display a message confirming the creation of the user account.

5.     How should I enter my name if I have two first names, for example Mary Kate?

EIDM requires users to enter the first part of the name in the first name field and the second part of the name in the middle name field. For example, Mary Kate would be entered as First Name: Mary, Middle Name: Kate.

6.     How should I enter my name if I only have one name, like Madonna?

EIDM requires users to enter your mono-name in both the first and last name fields. For example, Madonna would be entered as First Name: Madonna , Last Name: Madonna .

7.     How do I access reports in EIDM?

The EIDM Reports Interface allows users to generate various reports for applications currently integrated with EIDM. In order to gain access to the Reports Interface, you can request a role within the EIDM Reports Application. Please refer to the “Reports Interface” document in the Quick Reference Guide section of the page for additional details.

Personal Information

8.     What personal information am I required to provide in order to register for my user account?

You must provide your legal name, current home address, primary phone number, and E-mail address. You must enter your first and last name as they appear in legal documents, such as your driver’s license or passport. If you have a suffix included in your name (such as Sr., Jr., II, etc.), make sure you select it from the suffix field exactly as it appears on legal documents.

9.     Why should I submit personal information to create a user account? How safe is it?

EIDM collects personal information to uniquely identify users when registering with the system. We may also use your answers to the challenge questions and other Personal Identifiable Information (PII) to later identify you in case you forget or misplace your User ID/Password. We safeguard the information you provide with FIPS 140-2 compliant encryption standards. For additional information refer to the EIDM Privacy Impact Assessment (PIA):

EIDM Privacy Impact Assessment

10.     Is it possible to register for an EIDM user account with a foreign address and an international phone number?

Yes, EIDM allows users to register with a foreign address and an international phone number. At a minimum, foreign addresses must include the following information:

  1. House number, street name, and country; and
  2. An international phone number that must start with the country code, followed by the area code, and the primary phone number.

11.     Is it possible to change my foreign address to a US address, and vice versa?

Yes, EIDM allows users to change their address from a foreign address to a US address, and vice versa. Use the ‘Change Address’ link under the ‘My Profile’ menu to change your address.

12.     What will you do with my Personal Identifiable Information (PII)?

EIDM uses an external authentication service provider, Experian, to verify your identity based on the information you provide. Experian verifies your information against its records to successfully identify you. On public-facing websites CMS provides specific Terms & Conditions regarding how personal information is handled when registering for a CMS EIDM user account.

13.     How can I update my personal information?

You can update your personal information by selecting ‘My Profile’ from the dropdown menu at the top right hand corner of the CMS Portal home page. You will be directed to the ‘View My Profile’ page, where you can change your personal information by selecting the links on the right side of the page. You may be requested to answer challenge questions based on the changes you make.

14.     Where can I find information regarding who has the right to request a Social Security Number (SSN)?

Federal law mandates that State Departments of Motor Vehicles, tax authorities, welfare offices, and other governmental agencies request your SSN as proof that you are who you claim to be. However, the Privacy Act of 1974 requires that any government agency requesting your SSN provide details on how this information will be used, and what law or authority requires its use.

For information on who has the right to request your SSN please select the following link:

Who Can Lawfully Request My Social Security Number?

The Privacy Act can be read at the following link:

The Privacy Act of 1974

15.     I already provided my personal information during registration to setup an EIDM user account. Why do I have to provide it again to access certain applications?

When you have selected an application or role that requires a higher level of security, you are required to complete Identity Verification. In most cases, you may need to provide a few more details (i.e. SSN, Date of Birth) to be able to request access to the selected application or role.

16.     Will my Social Security Number (SSN) be shared with any federal or private agency?

No, EIDM will never share your SSN with any other federal or private agency. Your SSN will never be used for anything other than identity verification purposes.

Identity Verification and Multi-Factor Authentication (MFA)

17. What is Identity Verification?

Identity Verification is the process of providing sufficient information (e.g., identity history, credentials, or documents) to a service provider for the purpose of proving that an individual is who he/she claims to be. Individuals requesting electronic access to CMS protected information or systems must be identity proofed prior to being given access.

18.     Why does Experian require my personal information?

Experian uses your personal information to verify your identity against your personal information record.

19.     Does verifying my identity by Experian affect my credit score?

No, verifying your identity via Experian will not affect your credit score in any way. Identity verification inquiries are known as “soft inquiries”; such inquiries are displayed in the consumer version of the credit profile. The consumer’s credit profile is neither viewable nor reported to lenders. If you order a credit report from Experian, you will see an entry of inquiry by the Centers for Medicare & Medicaid Services with CMS’ address on the date the request was made.

20.     What if I have problems completing Identity Verification? Is there an Experian Help Desk?

Yes, Experian Verification Support Services is a dedicated call center for individuals who have failed the online Remote Identity Proofing (RIDP) process while attempting to obtain a CMS EIDM user account. If you fail online RIDP, EIDM will generate a reference code and the Experian Verification Support Services contact information will be provided on the screen for further action.

21.     What happens if the Experian Help Desk cannot verify my identity?

If your identity cannot be verified, even with assistance from the Experian Help Desk, then you will need to contact your application specific Help Desk to go through a document based proofing process. If your Application Help Desk cannot verify your identity, your access to CMS applications that require a higher level of security will be restricted.

22.     Why am I not able to change my User ID?

The User ID identifies you uniquely to EIDM; therefore, you cannot change your User ID.

23.     Can I use the same User ID and password for different applications?

Yes, you may use the same User ID and password to access different applications. Once you have logged into the CMS Portal home page, you can request access to other applications.

24.     What are challenge questions and why do I need to select and answer them when setting up my account?

When you register your account, you must select three different questions and provide an answer for each question. EIDM uses challenge questions for security purposes to verify your account if you forget your password, change your address, change your phone number, or need to unlock your account. In such cases, providing the correct responses to the challenge questions will enable EIDM to verify your account.

25.     What is Multi-Factor Authentication (MFA)?

MFA is a type of login (authentication) that, in addition to a User ID and password, requires another “factor” such as a Security Code. To comply with CMS policy, most users will need to establish a second login “factor” commensurate with the level of access requested. CMS uses Symantec’s Validation and Identity Protection (VIP) service to add a second layer of protection for your online identity. Symantec provides validation and identity protection through computer, phone, and E-mail.

For more information on MFA, please refer to the CMS EIDM User Guide on the page.

Annual Certification

26.     What is Annual Certification?

CMS security guidelines require that each year, the use of a role must be approved or the role will be removed from your profile. Annual Certification is the process of approving a user’s continued use of a role, and is valid for one year. Annual Certification is typically performed in the same manner as the original role approval process used by Business Owners, their representatives, authorizers, Help Desks, or other approvers. If the continued use of a role is not approved, then the role will be removed from your profile and an E-mail will be sent notifying you that the role has been removed.

Users have the option to notify their approvers of the continued need for their roles. This helps ensure that the annual certification of their role is completed in a timely manner.

For more information on Annual Certification, please refer to the “Completing Annual Certification” document in the Quick Reference Guide section of the page.

27.     What is an Account Review?

Account Reviews check for the presence of at least one application role in a user’s account. If an account does not have any application roles associated to it and has been inactive for more than 180 days, it will fail Account Review. If the account has been inactive for more than 360 days, it will be deleted, and the user will be informed via E-mail. Account Reviews are conducted every six (6) months.

28.     I got an E-mail that my role is due for Annual Certification. What should I do?

If you need continued access to your application role, submit the role for certification. Please follow the instructions provided in the E-mail.

29.     I got an E-mail that my role was removed because it failed Annual Certification. How do I get my role back?

If you still need access to the role that was removed, you must request the role again. Please follow the instructions provided in the E-mail.

Section 508

30.     What is Section 508?

Section 508 is a federal law that requires agencies to provide people with disabilities equal access to electronic information and data comparable to those who do not have disabilities, unless doing so would impose an undue burden on the agency. Section 508 standards are the technical requirements and criteria used to determine whether the agency is meeting the requirements of this law.

31.     How do I access EIDM in 508 Accessibility Mode?

EIDM users can use the ‘Screen Reader Mode’ link that is located on the ‘My Profile’ page to turn the accessibility mode on or off. The ‘Accessibility Settings’ link is also located on the 'My Profile' page. To use either of these features, you must sign into the CMS Portal and select the ‘My Profile’ link from the dropdown menu at the top right hand corner of the CMS Portal home page.

Page Last Modified:
04/04/2017 12:22 PM