​​​The ​​CFACTS application is migrating to AWSCloud for better performance and efficiency. The updated system is known as CFACTS-Cloud. We will be posting updates regularly to help you navigate this transition. 

The migration to AWS cloud is now complete, here’s what you need to know about the new link and authentication flow for this new environment. 

When will CFACTS-Cloud be live? 

On May 17, 2024, we moved over to the new cloud environment from our on-premise servers. 

Do I need to update my bookmark for CFACTS? 

Yes, https://cfacts3.cms.cmsnet will be changing to https://cfacts.cms.gov. Add a new bookmark for this page and name it CFACTS-Cloud.  

Additionally, you will want to bookmark https://idm.cms.gov as CFACTS-Cloud uses IDM to authenticate users. 

Do I need a new job code? 

If you are an existing CFACTS user: You don’t need to do anything. We’ve worked with the EUA team to make sure your job codes are updated. If you have an issue with job codes, click here to access support portal and we will work with you to resolve it quickly. 

If you are a new CFACTS user requesting access for the first time, use the following (new) job code: 

CFACTS_USER_PRD: This is for the main production environment (used for regular CFACTS activities). When you request this code, use the justification “To perform essential job functions related to role as a FISMA Stakeholder (e.g. ISSO/CRA) including but not limited to those systems”. 

How do I login to CFACTS-Cloud? 

Not much has changed but we are using Okta to authenticate. See steps below. 

Step 1: Navigate to CFACTS-Cloud via URL or IDM 

You can either go to https://cfacts.cms.gov or you can access the CFACTS tile via IDM at https://idm.cms.gov.  

Accessing via URL: Select the OKTA-PROD option 

You will see a screen with a dropdown. This is the Okta subscriber page. Select the first option which will be OKTA-PROD. You can save this selection by clicking the tickbox below. 

Accessing via IDM: Select the CFACTS tile 

You will see a CFACTS button. Select that and move to step 2. 

Step 2: Enter EUA credentials  

Whether you access via IDM or directly via the URL, you will have to enter your EUA credentials and go through muti-factor authentication (MFA). You can also use Google authenticator, Okta Verify, or SMS text or email. You can also use your PIV card here. If you haven’t configured your Okta, you will only have the option to select email.  

Accessing via IDM: Select the OKTA-PROD option 

You will see a screen with a dropdown. This is the Okta subscriber page. Select the first option which will be OKTA-PROD. You can save this selection by clicking the tickbox below. 

Step 3: Accept the CMS Notice and Consent Banner 

Before you access CFACTS, you must accept the notice and consent banner that appears at the top of the page. Accept that and now you’re in CFACTS! You will see a notable difference in performance and speed. 

This has been a huge step for CFACTS and you’ll see improvement in both reliability and speed. It’s been quite the journey for the CFACTS team. Please feel free to reach out with any questions. 

Who to contact 

Post any questions or comments on the #cfacts-community channel in CMS Slack, or request support by using the CFACTS support portal.