Message Validation, Processing, and Provisioning System (MVPS) Access for Jurisdictions

User has SAMS User ID

Center for Surveillance, Epidemiology, and Laboratory ServicesDivision of Health Informatics and Surveillance

Agenda

Overview Jurisdiction MVPS Dashboard Access – User has SAMS UserID Deactivation of MVPS User Accounts Overview of Adding New User to MVPS Dashboard Appendix

2

Overview

Center for Surveillance, Epidemiology, and Laboratory ServicesDivision of Health Informatics and Surveillance

Overview

Security Overview

The goal of the Message Validation, Processing and Provisioning System (MVPS) is to validate and process nationally notifiable messages sent by jurisdictions and provisioning those data to the CDC Programs in an automated process.

Jurisdictions and CDC programs will have access to transactional message data through the MVPS Dashboard.

Jurisdiction user access to the dashboard will be managed by the CDC Secure Access Management System (SAMS).

4

Key Terms

• CDC system used to validate and authenticate users for access to CDC systems, including MVPS

Security Access Management Services

(SAMS)

• Person responsible for adding users to MVPS and initiating access to SAMSMVPS Support Manager

• Person designated by the jurisdiction• Responsible for adding jurisdiction users to MVPS Jurisdiction Data Manager

5

MVPS Jurisdiction User Roles

6

Adds authorized jurisdiction users to MVPS Adds and/or edits jurisdiction user role and

access to conditions Accesses data for one or more conditions

through the MVPS Dashboard

*Jurisdiction Data Manager Jurisdiction User Accesses data for one or more conditions

through the MVPS Dashboard

* An alternate jurisdiction data manager can also be designated. Jurisdictions should consider who in their organization would best fit this role(s): an IT-focused resource such as the surveillance system manager; a surveillance lead who provides a science leadership role, or another resource who can meet jurisdiction needs. The jurisdiction data manager, in most cases, will be the person who implements the activities listed above; not necessarily the person who authorizes it. The authorization process will be determined by each jurisdiction.

MVPS Dashboard Access - User Has SAMS User ID -

Center for Surveillance, Epidemiology, and Laboratory ServicesDivision of Health Informatics and Surveillance

MVPS Dashboard Access - User Has SAMS User ID -

• Contacts the jurisdiction data manager to request access to MVPS Dashboard

Jurisdiction User

8

1

2

3

4

• User logs on to MVPS by using the SAMS portal

5

MVPS Dashboard Access for User with SAMS UserIDMVPS Dashboard Access for User with SAMS UserID

New jurisdiction user contacts the jurisdiction data manager to request access to MVPS Dashboard

1

9

User should: • Verify SAMS User ID is active and aligned with current

jurisdiction.* • Include in request the first name, last name, e-mail

address and SAMS UserID. • Submit approved authorization, including specific

conditions, to jurisdiction data manager per the jurisdiction’s procedures.

* If the user’s current SAMS ID was issued when the user was aligned with another jurisdiction, then the user will need to complete the SAMS registration process again. If you have questions, please contact samshelp@cdc.gov.

Jurisdiction data manager grants user access to MVPS based on jurisdiction’s established authorization process

2

MVPS Dashboard Access for User with SAMS UserID

Note: At this point the jurisdiction user cannot access the MVPS Dashboard. Steps 3 and 4 must be completed before access request is completed.

MVPS Dashboard Access for User with SAMS UserID

Jurisdiction data manager send email to Request MVPS Access to MVPS Support Manager via EDX@cdc.gov

3

10

MVPS Support Manager verifies SAMS User ID; activates MVPS link in SAMS portal

4

MVPS Dashboard Access for User with SAMS UserID MVPS Dashboard Access for User with SAMS UserID

• Send an e-mail messages to the edx@cdc.gov mailbox with the name and contact information for the person identified to use the Message Validation Processing and Provisioning System (MVPS).

• Include the name and contact information for the jurisdiction data manager

• Once the MVPS link has been added to the SAMS logon page, the user will receive an e-mail with a SAMS/MVPS access link.

User clicks on the MVPS link to access the MVPS Dashboard

Link to MVPS will appear under My Applications on the SAMS landing page.

11

MVPS Dashboard Access for User with SAMS UserID

Jurisdiction user signs into SAMS portal to access the MVPS Dashboard

5

MVPS Dashboard Access for User with SAMS UserID

Deactivating a MVPS User Account

Center for Surveillance, Epidemiology, and Laboratory ServicesDivision of Health Informatics and Surveillance

Deactivating a MVPS User Account

MVPS users accounts must be deactivated in a timely manner

Deactivating Users Jurisdiction data manager

o Changes the user’s role within MVPS to prevent access to data.

o Contacts the MVPS Support Manager to request deactivation of a jurisdiction user’s SAMS/MVPS account.

MVPS Support Manager o Reviews and approves the deactivation request.

o Deactivates the user in MVPS

o Deactivates the user’s MVPS link in SAMS

13

Note:

Deactivation

communication

must take place

within 24 hours of

a change in the

user’s status

Overview of Adding New Jurisdiction User to the MVPS Dashboard

The following slides are representative of the MVPS Dashboard functionality and provide an overview of the process.

The Jurisdiction Data Manager will have security access to add jurisdiction users to MVPS.

Center for Surveillance, Epidemiology, and Laboratory ServicesDivision of Health Informatics and Surveillance

Overview of Adding New Jurisdiction User to the MVPS Dashboard

Overview of Adding New Jurisdiction User – Step 1 of 4

The Add New User screen will display. Type the SAMS UserID in the ID box and the user’s name will appear. Note: All jurisdiction users must have an active SAMS UserID to be granted access to MVPS Dashboard.

Welcome, Marty JonesTo add a jurisdiction user, the jurisdiction data manager will access the User Management tab within the dashboard and click on Add New.

Welcome, Marty Jones

15

Choosing Yes for this option will allow the user to see message content within the MVPS Dashboard.

Click SAVE when all data have been entered.

The user’s first name, last name, and e-mail default from SAMS.

Jurisdiction data manager selects the user’s jurisdiction.

Note: Due to security within MVPS, the Assigned Jurisdiction drop down will display only the jurisdiction assigned to the jurisdiction data manager.

16

Overview of Adding New Jurisdiction User – Step 2 of 4

The jurisdiction data manager will click the Assign checkbox for each condition the user can access in the MVPS Dashboard.

After the appropriate jurisdiction is assigned, a listing of conditions will display.

After reviewing all user information, the jurisdiction data manager should click SAVE.

17

Overview of Adding New Jurisdiction User – Step 3 of 4

Overview of Adding New Jurisdiction User – Step 3 of 4

MVPS will provide verification that user was added.

Patty Smith’s account was successfully edited.

Continue editing Patty Smith

18

Overview of Adding New Jurisdiction User – Step 4 of 4

Overview of Adding New Jurisdiction User – Step 4 of 4

Appendix

Center for Surveillance, Epidemiology, and Laboratory ServicesDivision of Health Informatics and Surveillance

Appendix

SAMS Quick Facts and Helpful Tips

• No Sharing – Your invitation is customized just for you and is only usable for a single registration.

• Invitations Expire! – Your invitation is good for only 30 days.

• SPAM, SPAM, SPAM – If you’re expecting a SAMS invitation and it hasn’t arrived, check to make sure it didn’t get trapped by your anti-SPAM filter.

• Replacement Invitations – If your invitation is lost or expired, contact your jurisdiction data manager to request a replacement. Or, you can also contact the SAMS Help Desk at samshelp@cdc.gov.

• Tech Troubles – To access the SAMS portal, your browser must be configured to use TLS 1.0 encryption. If your computer is not configured for TLS, or if you are unsure, please contact your local IT system administrator.

• Help! – If you have questions or difficulties along the way, please contact the SAMS Help Desk.

20

Frequently Asked Questions about SAMS/MVPS Security Question Response1. What is SAMS? SAMS stands for Secure Access Management Services. It is CDC’s

enterprise identity management and access control system for externally facing sensitive or non-public applications.

2. What is the difference between SAMS and MVPS security? SAMS authenticates that you are who you say you are; MVPS security authorizes you to use MVPS functionality based upon the role you are assigned.

3. I have SAMS access for another CDC system. Do I need to go through the registration process again for MVPS?

MVPS requires a Level 2 SAMS security access. If the system you are currently accessing via SAMS is a Level 2 or higher security level, then you do not need to go through the SAMS registration process again.

4. I don’t know what level of security I currently have with SAMS. How do I find out?

Contact the SAMS Helpdesk at samshelp@cdc.gov.

5. I have taken a job at another jurisdiction doing this type of work. Does that affect my SAMS/MVPS security access?

A user’s security in SAMS and MVPS is based upon their jurisdiction. When an active user in SAMS/MVPS changes jurisdictions, he or she must go through the security access process again.

6. I can’t see conditions that I need to view within the MVPS Dashboard. What should I do?

The jurisdiction data manager assigns roles and conditions to each user when he or she is initially granted access to the MVPS Dashboard. Submit a request to your jurisdiction data manager to be able to view the new conditions.

7. I have a new position with my jurisdiction and do not need access to MVPS any longer, but I still need to keep my SAMS access for other CDC applications. Who do I notify?

The jurisdiction data manager must notify the MVPS Support Manager any time a jurisdiction user needs to be de-activated. A user may retain SAMS registration status, if applicable, but will no longer have access to the MVPS link on the SAMS landing page.

8. I got married and want to change my name in SAMS and MVPS. What should I do?

Users can update some of their SAMS account information by clicking the Modify My Identity Data link. User ID/e-mail addresses cannot be changed by using this link. If you need assistance, contact the SAMS Helpdesk at samshelp@cdc.gov.

21