[UCRDBR] Kaiser Permanente Two-Factor Authentication Requirement

[Departmental Benefits Representatives]

[A blue text on a black background  AI-generated content may be incorrect.]

November 2, 2026
To:
Department Benefits Representatives (DBRs)
From:
Central HR Benefits Office on behalf of UC Office of the President
Re:
 Kaiser Permanente Two-Factor Authentication Requirement



DBRs, please share this information via your internal listserv.  Please do not reply to this email.  Please send a separate email with questions to benefits at ucr.edu<mailto:benefits at ucr.edu>.



UCOP has advised that beginning Tuesday, December 1, 2026, Kaiser Permanente, in partnership with the University of California, will require two-factor authentication (2FA) for members when signing in to the  Kp.org<https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiT0cyaWRpYXhxbnRmeWVFQUprZlliMWgtM2FzIiwic3VmZml4IjoibDJTYXA0LjE3OTMzMjE0MjMifQ..3DnjdOowEFgs3pkijztUGg.2dGnu3wOO6qMZanBgnflZttz1E33XCNOSlQ0o7igu65bYpZ52YRcRy2MdEpdVhmyNYFcgdDS9WnHl_0H6DVS9tlKHZTCLb-jmGILru4MR-fecj3vSVy_DhiwvshbhtUZKf1GFKa7JLQpG1p8Nx8yQA.HEO6HI-qurstUXQ5CREExQ&nonce=I56HpdLH0wJd2Dn5GiQS8aXUxKInJlLTCBICoH3VhmI&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal&bm=true> website. This security measure is designed to help protect member accounts and reduce the risk of unauthorized account access. It will also align Kaiser Permanente with the University of California Office of the President Information Technology Security's requirement for all vendor web portals and applications that provide access to individually identifiable information or protected health information to use multi-factor authentication or UC's Single Sign-On.
Member Notifications
Registered Kaiser members with online accounts, including subscribers and family members, will receive notifications from Kaiser Permanente about this change.
Notification Schedule
* November 4, 2026: Notification letters will be mailed to registered members who have not selected email as their preferred communication method.
* November 11, 2026: Notification letters will be emailed to registered members who have selected email communications.
* November 24, 2026: Reminder text messages will be sent to members who have opted to receive text notifications. The message will encourage members to verify that their email address, mobile number, username, and password are up to date.
Sample text: Important security update: Employer-required 2FA is coming to kp.org<http://kp.org/> on December 1, 2026. Please confirm your email, mobile number, username, and password are up to date before the launch.
What Registered Members Need to Know
Members will continue to sign in using their current username and password. The difference is that 2FA will be required. Members who have not previously enabled 2FA will be required to enter a one-time verification code sent to the member's email address or mobile phone by text message when signing in. Members who currently use 2FA as part of their login do not need to take any additional action. The 2FA requirement cannot be removed or disabled.
Members who use biometric authentication, such as fingerprint or facial recognition, with the Kaiser mobile app or who connect through other apps, such as Apple Health or Fitbit, may have a different 2FA login experience.
All members are encouraged to have up-to-date email and phone information on their Kaiser account before Tuesday, December 1, 2026, to avoid access issues. Members registering on Kp.org<https://identityauth.kaiserpermanente.org/as/authorization.oauth2?response_type=code&client_id=KPORGOauthClientPAWebSessionV1&redirect_uri=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fpa%2Foidc%2Fcb&state=eyJ6aXAiOiJERUYiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiMlVIZ3EzQi1QZ09vSmZ3YWJLeW4wRlFVdVI4Iiwic3VmZml4IjoiUzRMeGhHLjE3OTI3OTQyMDkifQ..uF-e-yvmoBetWPWhgp2HtA.8KWpOcdJksgepsrX-VlZts1LL76eFPi0zHgA8-kD55gGGgjo0AgheQE1yKaOfsTRYth1U6Kz9UO56NeGBRwuDi1aUiu4OcAepQsF_NR4hMBSXyQ5zROnGpbkJgdwYaREJUdMpCeC-KuTQdF3LWjJbA.w0eOWYQ8HCMEz111x8ejZA&nonce=ivOzplGM6her-kZe1CF3bwTbiu-U9Jz16x4nqXgfGjQ&scope=openid&vnd_pi_requested_resource=https%3A%2F%2Fhealthy.kaiserpermanente.org%2Fsecure%2Finner-door&vnd_pi_application_name=KPORG_HEALTHY_AEMandPortal&bm=true#/signon> for the first time should follow the instructions provided during the registration process.
Kaiser Permanente Member Services and Website Support
Contact Member Services with questions:

* CA members (Northern California/Southern California): 1-800-464-4000<tel:(800)%20464-4000> - Hours: 24 hours a day, 7 days a week
* Mid-Atlantic commercial members: 1-800-777-7902<tel:(800)%20777-7902> - Hours: 7:30 AM-9:00 PM Eastern Time, Monday through Friday; closed on Saturdays and Sundays
Questions about access issues may be directed to Kaiser Permanente Website Support at 1-800-556-7677<tel:(800)%20556-7677>.







-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20261102/5b9ecc4c/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 11254 bytes
Desc: image001.png
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20261102/5b9ecc4c/attachment.png>