Secure Provider Portal User Access Verification—Immediate Action Required

Date: 05/21/26

Secure Provider Portal User Access Verification

To protect member PHI and ensure compliance with Meridian and HIPAA requirements, all provider groups are required to actively manage and verify secure provider portal user access. Maintaining accurate access is a shared responsibility and is critical to safeguarding your organization’s data. Failure to maintain accurate access may result in compliance and security risks.

Account manager requirement

• Each provider group must designate at least one secure provider portal account manager per TIN
• The account manager is responsible for managing all portal user access for that TIN
• Requests from your organization will be returned to your account manager after designation

Account managers’ responsibilities and expectations

• Review and respond to all user access requests
• Approve or deny requests promptly
• Regularly audit user access by:
  • Removing inactive or unauthorized users
  • Confirming access aligns with job responsibilities
  • Ensuring appropriate permission levels

Designated account managers, immediate action required

• Review all pending requests within 7 calendar days
• Requests not addressed within 7 days may be automatically declined

Access oversight expectations - account managers’ areas of accountability

• Approving only users with a valid business need
• Assigning appropriate access levels
• Denying unknown or inappropriate requests

How to Verify or Deny a User

1. Log in to the Meridian secure provider portal
2. Select your TIN
3. Navigate to “User Management” (top-right menu)
4. Locate users marked “Verify Account / Update User”
5. Assign appropriate permissions
6. Select “Verify Account” → “Verify User”
7. Add a comment and click “Update User”

Important: If “Verify Account” is not selected, the user will not be granted access and may be disabled

If TIN does not have an account manager

Meridian will take additional steps to validate user access, which may include:

• Contacting practice to confirm the request
• Requesting verification details (e.g., name, group, TIN, phone number)
• Collecting supporting information to confirm request
• Conducting additional validation

Key Reminders

• Do not approve users you do not recognize
• All users must be verified before access is granted
• If there are no pending requests, no action is needed

Support

For assistance, please contact your Provider Engagement representative at ILProviderRelations@mhplan.com. If you do not have an assigned representative, please complete our intake form or call Provider Services at 866-606-3700.