The Centers for Medicare & Medicaid Services (CMS) has established a process to allow Fee-For-Service (FFS) Medicare providers to use online enterprise applications to access, update and submit information over the Internet. CMS enterprise applications are those hosted and managed by CMS and for the most part do not include internet applications offered by Fiscal Intermediaries (FIs)/Carriers/Medicare Administrative Contractors (MACs).

In order to protect CMS and user information, all users must register and be approved in CMS' security system prior to accessing these applications. The Individuals Authorized Access to the CMS Computer Services (IACS) is the security system CMS uses to register users and control issuance of User IDs, passwords and access to CMS web-based applications. The IACS Provider/Supplier Community (IACS-PC) is one of many communities required to use the CMS security system to access CMS data.  Through IACS, provider organizations will be able to manage users whom they authorize to conduct transactions on their behalf, which may include staff and contractors.

CMS will notify providers as web based applications become available and provide clear instructions that specify what providers should register in IACS. 

Do not register unless you fit the criteria in the CMS notice. For example, DMEPOS suppliers interested in becoming a contract supplier under the Medicare Competitive Bidding Program will receive explicit instructions on how and when to register for access to bid software.  The call to register would not be for all suppliers, but instead for those submitting bids.

At the point that a provider is notified through CMS communication to register in IACS for access to applications, CMS recommends review of 3 MLN Matters Special Edition articles prior to registering.  These articles detail steps Medicare FFS providers will use to access CMS enterprise applications using IACS-PC.

Article SE0747 provides an overview of the IACS-PC registration process as well as registration instructions for Security Officials (SOs) and individual practitioners. Article SE0753 addresses questions and gives remaining instructions for registering provider organizations including registering a Backup Security Official (BSO), User Group Administrator (UGA), and End User. Article SE0754 discusses the final steps in accessing CMS enterprise applications.  Links to these articles can be found in the Related Links Inside CMS section below.

CMS has prepared a reference chart outlining the steps for organizations to access CMS enterprise applications. You can find the link to this chart in the Related Links Inside CMS section below.

The Downloads section, below, lists IACS Quick Reference Guides applicable to the Provider/Supplier Community. These guides provide users with information and instructions to register in IACS and request access to CMS application(s) available to your user community. The guides are provided in standard and accessible versions according to the 1998 Amendment to Section 508 of the Rehabilitation Act. The displayed titles show "Standard" and "508 Accessible", respectively. Please, contact your Help Desk if you have any questions on the IACS' guides or system functionality.