Identity Assurance Level 2 (IAL2)

Identity Assurance Level 2, or IAL2 is an identity proofing standard that satisfies surescripts requirements for e-prescribing. In order for a provider account to be authenticated by the Surescripts standard, each provider will need to go through an Identity Proofing (IDP) process. Once a provider completes this IDP process, their e-prescribing account may be activated. Providers will NOT need to bind a token to their account for Identity Assurance Level 2.

It is important to note that if a provider is going to be on-boarding for EPCS, they will not need to complete the Surescripts IDP process. This will instead go through a similar IDP process involving setting up their passphrase and binding their EPCS token. If this is the process you need, you can use the EPCS provider on-boarding.

Provider IDP process

Once the IDP invite has been sent to you (the provider) by BestNotes Support, you will get a system generated email from This document is intended to be used as a guide through the IDP process.

  1. You will need to access your email and open the IDP Invitation email. Within the email, there is a link to select to begin the IDP process. If for any reason this link is not working, request a new invite by reaching out to BestNotes Support or call (866) 543-6646.
  2. When you select the link, the InfinID application will open and you will see a notification that your organization has requested you to complete the identity proofing. To move forward, select "Next."
  3. Then you will be presented with a prerequisites page. Having a personal credit card during this process is not required, but can help with passing IDP as Experian uses financial history to verify your identity. You will not be charged for IDP. When ready, select "Continue."
  4. You will then need to accept the InfinID Terms of Use. Select the checkbox and select "I Accept" to continue.
  5. You will now need to enter some personal information, which Experian will use to verify your identity. All required fields are noted with a red asterisk.
    • When entering "Date of Birth", select the calendar icon, select the year, followed by month, and then the day.
    • Make sure when entering the address, you leave out any special characters. For example, if you live at "1 E. Main St Apt. 204" you should enter it as "1 E Main St Apt 204" without any periods.
    • It is important to enter your mobile number. If Experian can verify that it is a mobile number, and you are the primary account holder, they will send a text message with the IDP transaction number. If you do not enter your mobile number, or it cannot be verified, Experian will mail you a letter with your IDP transaction number which can take 3-5 business days to arrive.
    • Entering a credit card number can greatly increase the changed of passing IDP. It must be VISA or MasterCard, and must be a personal credit card. Only the first 8 digits are required and no charges will be applied.
  6. After entering all personal information and selecting continue, you will be presented with 3 security questions pertaining to financial history. Select any applicable answers and select "Continue."
  7. On the next screen, you will scan the QR code on your mobile device.
  8. After accepting the terms of use, you will select an identifying document to submit to


  9. You will then be prompted to photograph your identifying document (front and back).

  10. Next, you will be asked to take an image of yourself (“selfie”). It is recommended to take a selfie without glasses.

  11. The application will prompt you to exit from your mobile screen to go back to the identity proofing screen where your scanned the QR code. Here, you will select the "Check Status" button.

  12. If you pass the identity proofing you will be notified via email that your identity has been successfully verified and will receive a verification code. It is safe to leave this screen at this time if you have not yet received the number.

    1. If you entered a mobile phone number and Experian was able to verify it, you may receive a text message with a verification code. You can then enter the verification code on the screen to complete the identity proofing.

    2. If you do not receive a text message, Experian will mail a letter with the IDP transaction number which takes 5-7 business days to arrive. You can close out of this screen and proceed to enter your verification code once you have received the letter.

       Note:  The verification code within the text message is only valid for 7 days, and the transaction number within the letter is only valid for 30 days.

  1. The confirmation email that Experian has verified your identity contains a link to select, which will allow you to enter the verification code.
    Note:  The link in this email will be required to continue the process. Without this email, you may need to restart the process from the beginning.
  2. Upon selecting the link, you will be prompted to enter your verification code, then select "Continue."
  3. After entering your transaction number, you will receive a confirmation email. You will then log into DrFirst to activate your account.

Back to top of page