Message Validation, Processing, and Provisioning System (MVPS) Access for Jurisdictions User has SAMS User ID Center for Surveillance, Epidemiology, and Laboratory Services Division of Health Informatics and Surveillance

Agenda  Overview  Jurisdiction MVPS Dashboard Access – User has SAMS UserID  Deactivation of MVPS User Accounts  Overview of Adding New User to MVPS Dashboard  Appendix 2

Overview Center for Surveillance, Epidemiology, and Laboratory Services Division of Health Informatics and Surveillance

Security Overview  The goal of the Message Validation, Processing and Provisioning System (MVPS) is to validate and process nationally notifiable messages sent by jurisdictions and provisioning those data to the CDC Programs in an automated process.  Jurisdictions and CDC programs will have access to transactional message data through the MVPS Dashboard.  Jurisdiction user access to the dashboard will be managed by the CDC Secure Access Management System (SAMS). 4

Key Terms CDC system used to validate and authenticate users for access to CDC systems, including MVPS Security Access Management Services (SAMS) Person responsible for adding users to MVPS and initiating access to SAMS MVPS Support Manager Person designated by the jurisdiction Responsible for adding jurisdiction users to MVPS Jurisdiction Data Manager 5

MVPS Jurisdiction User Roles 6  Adds authorized jurisdiction users to MVPS  Adds and/or edits jurisdiction user role and access to conditions  Accesses data for one or more conditions through the MVPS Dashboard * Jurisdiction Data Manager Jurisdiction User  Accesses data for one or more conditions through the MVPS Dashboard * An alternate jurisdiction data manager can also be designated. Jurisdictions should consider who in their organization would best fit this role(s): an IT-focused resource such as the surveillance system manager; a surveillance lead who provides a science leadership role, or another resource who can meet jurisdiction needs. The jurisdiction data manager, in most cases, will be the person who implements the activities listed above; not necessarily the person who authorizes it. The authorization process will be determined by each jurisdiction.

MVPS Dashboard Access - User Has SAMS User ID - Center for Surveillance, Epidemiology, and Laboratory Services Division of Health Informatics and Surveillance

Contacts the jurisdiction data manager to request access to MVPS Dashboard Jurisdiction User Grants user access to MVPS based on jurisdiction’s authorization process Jurisdiction Data Manager Submits MVPS Access Request to MVPS Support Manager via Jurisdiction Data Manager Verifies SAMS User ID; activates MVPS link in SAMS MVPS Support Manage r User logs on to MVPS by using the SAMS portal 5 MVPS Dashboard Access for User with SAMS UserID

New jurisdiction user contacts the jurisdiction data manager to request access to MVPS Dashboard 1 9 User should: Verify SAMS User ID is active and aligned with current jurisdiction.* Include in request the first name, last name, address and SAMS UserID. Submit approved authorization, including specific conditions, to jurisdiction data manager per the jurisdiction’s procedures. * If the user’s current SAMS ID was issued when the user was aligned with another jurisdiction, then the user will need to complete the SAMS registration process again. If you have questions, please contact Jurisdiction data manager grants user access to MVPS based on jurisdiction’s established authorization process 2 MVPS Dashboard Access for User with SAMS UserID Note: At this point the jurisdiction user cannot access the MVPS Dashboard. Steps 3 and 4 must be completed before access request is completed.

Jurisdiction data manager send to Request MVPS Access to MVPS Support Manager via 3 10 MVPS Support Manager verifies SAMS User ID; activates MVPS link in SAMS portal 4 MVPS Dashboard Access for User with SAMS UserID Send an messages to the mailbox with the name and contact information for the person identified to use the Message Validation Processing and Provisioning System Include the name and contact information for the jurisdiction data manager Once the MVPS link has been added to the SAMS logon page, the user will receive an with a SAMS/MVPS access link.

User clicks on the MVPS link to access the MVPS Dashboard Link to MVPS will appear under My Applications on the SAMS landing page. 11 MVPS Dashboard Access for User with SAMS UserID Jurisdiction user signs into SAMS portal to access the MVPS Dashboard 5

Deactivating a MVPS User Account Center for Surveillance, Epidemiology, and Laboratory Services Division of Health Informatics and Surveillance

MVPS users accounts must be deactivated in a timely manner Deactivating Users  Jurisdiction data manager o Changes the user’s role within MVPS to prevent access to data. o Contacts the MVPS Support Manager to request deactivation of a jurisdiction user’s SAMS/MVPS account.  MVPS Support Manager o Reviews and approves the deactivation request. o Deactivates the user in MVPS o Deactivates the user’s MVPS link in SAMS 13 Note: Deactivation communication must take place within 24 hours of a change in the user’s status

Overview of Adding New Jurisdiction User to the MVPS Dashboard  The following slides are representative of the MVPS Dashboard functionality and provide an overview of the process.  The Jurisdiction Data Manager will have security access to add jurisdiction users to MVPS. Center for Surveillance, Epidemiology, and Laboratory Services Division of Health Informatics and Surveillance

Overview of Adding New Jurisdiction User – Step 1 of 4 The Add New User screen will display. Type the SAMS UserID in the ID box and the user’s name will appear. Note: All jurisdiction users must have an active SAMS UserID to be granted access to MVPS Dashboard. Welcome, Marty Jones To add a jurisdiction user, the jurisdiction data manager will access the User Management tab within the dashboard and click on Add New. Welcome, Marty Jones 15

Choosing Yes for this option will allow the user to see message content within the MVPS Dashboard. Click SAVE when all data have been entered. Choosing Yes for this option will allow the user to see message content within the MVPS Dashboard. Click SAVE when all data have been entered. The user’s first name, last name, and e- mail default from SAMS. Jurisdiction data manager selects the user’s jurisdiction. Note: Due to security within MVPS, the Assigned Jurisdiction drop down will display only the jurisdiction assigned to the jurisdiction data manager. The user’s first name, last name, and e- mail default from SAMS. Jurisdiction data manager selects the user’s jurisdiction. Note: Due to security within MVPS, the Assigned Jurisdiction drop down will display only the jurisdiction assigned to the jurisdiction data manager. 16 Overview of Adding New Jurisdiction User – Step 2 of 4

The jurisdiction data manager will click the Assign checkbox for each condition the user can access in the MVPS Dashboard. After the appropriate jurisdiction is assigned, a listing of conditions will display. After reviewing all user information, the jurisdiction data manager should click SAVE. 17 Overview of Adding New Jurisdiction User – Step 3 of 4

MVPS will provide verification that user was added. Patty Smith’s account was successfully edited. Continue editing Patty Smith 18 Overview of Adding New Jurisdiction User – Step 4 of 4

Appendix Center for Surveillance, Epidemiology, and Laboratory Services Division of Health Informatics and Surveillance

SAMS Quick Facts and Helpful Tips No Sharing – Your invitation is customized just for you and is only usable for a single registration. Invitations Expire! – Your invitation is good for only 30 days. SPAM, SPAM, SPAM – If you’re expecting a SAMS invitation and it hasn’t arrived, check to make sure it didn’t get trapped by your anti-SPAM filter. Replacement Invitations – If your invitation is lost or expired, contact your jurisdiction data manager to request a replacement. Or, you can also contact the SAMS Help Desk at Tech Troubles – To access the SAMS portal, your browser must be configured to use TLS 1.0 encryption. If your computer is not configured for TLS, or if you are unsure, please contact your local IT system administrator. Help! – If you have questions or difficulties along the way, please contact the SAMS Help Desk. 20

Frequently Asked Questions about SAMS/MVPS Security QuestionResponse 1.What is SAMS?SAMS stands for Secure Access Management Services. It is CDC’s enterprise identity management and access control system for externally facing sensitive or non-public applications. 2.What is the difference between SAMS and MVPS security?SAMS authenticates that you are who you say you are; MVPS security authorizes you to use MVPS functionality based upon the role you are assigned. 3.I have SAMS access for another CDC system. Do I need to go through the registration process again for MVPS? MVPS requires a Level 2 SAMS security access. If the system you are currently accessing via SAMS is a Level 2 or higher security level, then you do not need to go through the SAMS registration process again. 4.I don’t know what level of security I currently have with SAMS. How do I find out? Contact the SAMS Helpdesk at 5.I have taken a job at another jurisdiction doing this type of work. Does that affect my SAMS/MVPS security access? A user’s security in SAMS and MVPS is based upon their jurisdiction. When an active user in SAMS/MVPS changes jurisdictions, he or she must go through the security access process again. 6.I can’t see conditions that I need to view within the MVPS Dashboard. What should I do? The jurisdiction data manager assigns roles and conditions to each user when he or she is initially granted access to the MVPS Dashboard. Submit a request to your jurisdiction data manager to be able to view the new conditions. 7.I have a new position with my jurisdiction and do not need access to MVPS any longer, but I still need to keep my SAMS access for other CDC applications. Who do I notify? The jurisdiction data manager must notify the MVPS Support Manager any time a jurisdiction user needs to be de-activated. A user may retain SAMS registration status, if applicable, but will no longer have access to the MVPS link on the SAMS landing page. 8.I got married and want to change my name in SAMS and MVPS. What should I do? Users can update some of their SAMS account information by clicking the Modify My Identity Data link. User ID/ addresses cannot be changed by using this link. If you need assistance, contact the SAMS Helpdesk at 21