Best Practice Identity

With a Best Practice ID, you can access Best Practice online products such as Best Practice Mobile, the Bp Premier Online website for cloud product configuration, the Bp Customer Portal, and Bp Omni.

Bp Premier customers can view these products here Best Practice Online Services.

Sign up for a Best Practice ID

To sign up for a Best Practice ID user account, you will need a unique email address.

For Bp Premier customers with Best Health Booking or Best Practice Mobile subscriptions, you will need to follow the self-service sign up steps listed below. Alternatively, the Best Practice team can send you an invitation email containing a link.

When you redeem an invitation you will be prompted to:

1. Verify your email.
2. Read and accept the Terms of Use for Cloud Products.
3. Set up multi-factor authentication to keep your account secure.

Set up a Best Practice ID for Bp Premier users

The following self-service workflow allows you to set up access to Premier Online products such as Best Practice Mobile and Best Health Booking configuration.

1. From within Bp Premier, open the Online Services menu from the top toolbar and select My Best Practice ID.



2. When prompted, enter your Bp Premier password and click Next.
3. The system will check that your current Bp Premier password meets the minimum complexity requirements for online access. If your password does not meet the requirements, you will be prompted to change it. This will also update your password that you use to access Bp Premier.
4. Enter the email address that you want to use to log in to your Best Practice ID. An invitation link will be sent to your email and you will be shown a one-time invitation code. Copy the code by clicking on the copy icon, or write it down.



5. Open the email and click on the invite link.
6. Enter the one-time verification code that you copied from step 4.
7. Re-enter your Bp Premier password.
8. Read and accept the cloud terms of use and privacy policy, and click Create Account.



9. Add a primary and backup identity verification method to keep you and your data safe online. (You will only be asked to verify your identity with one of these when you login).



You're all set. Head to the online product you want to access and log in.

To link your Best Practice ID account to more than one Best Practice Software cloud application or Bp Premier practice, use the same unique email address for your username. For example, if you work at two practices, login to Bp Premier at each practice and repeat the set up workflow above.

Your user account is where you can update your security settings or see which applications and practice sites your Best Practice ID is linked to.

Use your Bp Premier password to login to Best Practice Mobile or Bp Premier Online Services website. Your practice administrator can reset your password in Bp Premier if required.

If you have access to The Aviary Customer portal, you will also be able to create a cloud password (‘Best Practice ID password’). You can use this password to login to all your linked applications.

The ability to change your cloud password will only be enabled when logging in with this option.

To meet security requirements for web-based access, your password must be between 8 and 20 characters, contain no spaces, have at least 1 numerical digit, and contain at least 1 special character (!@#$%^&*).

Your practice administrator can help staff meet this requirement by enabling strong password settings in Bp Premier.

When using Best Practice Mobile or other cloud applications, an inactivity timeout will occur if there has been no activity for 15 minutes. This extra layer of security has been provided to support your compliance with health security standards.

To quickly unlock your screen after an inactivity timeout, you can add or edit a secure Quick PIN from Best Practice ID security settings if you did not create a PIN during the sign up process.

2-step verification provides an additional layer of protection to your account when signing in.

Best Practice Software requires you to have a minimum of two identity verification methods so that you can recover your account if you lose access to one.

Accepted verification methods include:

• Authenticator apps
• Alternative email
• Mobile phone number.

When you log in, the system will default to the highest protection method set up on your account.

You can change your identity verification methods in the Best Practice ID user account settings. For security reasons, you will be required to verify your identity with another method first.

NOTE  The alternative email address cannot be the same as your Best Practice ID username.

A session is defined as a period of time during which you are signed into a Best Practice Software online application from a browser or device. A session is renewed when you sign in on a new device or browser window, or when you re-enter your password or Quick PIN.

If you lose your device, you can sign out everywhere by selecting End all sessions in the Security settings.

You can view which applications are associated with your Best Practice ID from the user home. Links are automatically removed from your profile when you leave a practice.

NOTE  Speak with your practice administrator for details of which cloud products and services are enabled at your practice.

You will be prompted to verify your identity when you start a new session. A new session will be created after you have logged out, start a new browser session or login to a new device. A session can last up to 24 hours.

NOTE  Best Practice Mobile users that log in with biometrics will not be prompted with multifactor authentication for 14 days.

Best Practice ID supports most authenticator apps including Microsoft Authenticator, Google Authenticator, Authy, and Last Pass.

When you create your Best Practice ID account or add an Authenticator from your user account settings, the set up flow will guide you through the steps below:

1. Download an Authenticator app on your mobile phone.



2. Open the Authenticator app and click add 'other account'.
3. Scan the QR code and the "Best Practice ID" account will be automatically added to your Authenticator.

NOTE  If you experience issues with scanning the QR code, you can click 'Can't scan QR' and type in the account name and secret key.



4. Enter the 6 digit code from the Authenticator app.

You can choose to use your backup verification method when logging in to Best Practice cloud applications.

To update your MFA method, log in to your Best Practice ID user account and go to the Multi-factor authentication (MFA) card from Security > Sessions.

SMS will be available as a backup option. For phone-based identity verification, Best Practice Software recommends using the Authenticator application.

Contact Best Practice Support if you are unable to use your MFA identity verification methods or access your Best Practice ID user account.

Best Practice Software have implemented geo-based restrictions, along with other security measure such as multi-factor verification and data encryption, to protect your data online.

The geolocation-based access verifies users of Best Practice software are logging in from within Australia or New Zealand. This is the recommended minimum setting for customers using Best Practice Mobile or Best Health Booking.

Practice administrators will be able to manage practice staff access via the Premier Online configuration portal or by contacting Best Practice support.

Best Practice ID does not replace Bp Premier user management functions. Your online access will automatically be removed from your profile if you leave the practice.

To request to delete your user account completely, you can contact Best Practice Support.