Here are the different methods of authentication for institutional Access customers:
Email Domain Match As of October 14, 2025. Email domain match is an additional authentication option provided to customers for Access Medical along with all authentication methods outlined below For this method to authenticate users with a customer’s trial or subscription, users must create an Access profile using their institutional email address that must match the domain and/or subdomains listed on the customer’s account (e.g., @fau.edu, @student.fau.edu). When users first sign up, they create their McGraw Hill account and will receive a “Temporary Access Link” via email (previously referred to as “Magic Link”). Users reauthenticate every 180 days through the temporary access link.
IP Authentication Institutional subscribers submit their network IP ranges to McGraw Hill Medical during subscription setup. These ranges are verified and loaded into the system and all users coming from inside the range are automatically provided seamless access from any IP-authenticated computer. Please note that these can't be private IP addresses. Please also indicate if you have a proxy IP. Our technical support team must add the proxy IP on their end as well.
Referring URL/Domain Institutional subscribers can place registered links to our site(s) behind their secure login (for example, a library site that has already validated a student). The institution must register the domain and URLs where the links are placed with McGraw Hill Medical during subscription setup. These links will then automatically and seamlessly log the user into the site(s) every time they are clicked.
Referring URLs enable subscribers to integrate Access Medical content in their courses by embedding our durable URLs in their LMS (e.g., Blackboard, Canvas, etc.).
To add a Referring URL to your account subscription, please contact Technical Support (platformsupport@mheducation.com) or Customer Success (customersuccess@mheducation.com) at McGraw Hill.
Shibboleth Authentication Shibboleth is a single-sign-on method that is attached to the institution, and allows them one sign on to multiple products they subscribe to. If an institution has a Shibboleth Federation ID they would like to register, they can contact Tech Support to set this up. As of May 2018 we support the following federations:
OpenAthens
InCommon
UK Access Management Federation
We are also a member of eduGAIN, which allows us to enable Shibboleth authentication for participating federations and their affiliated institutions who are also members of eduGAIN.
We ask that you provide us with an entity ID and scoped affiliation.
SAML Authentication SAML is a single sign-on method that allows one to sign on to multiple resources and provides seamless interoperability between systems. If an institution would like to implement SAML authentication, they can contact Platform Support, platformsupport@mheducation.com, for additional information on implementing this access method.
EZproxy Configuration Remote access to the Access resources via EZProxy requires EZproxy 2.4c GA (2004-03-21) or later combined with this database definition:
T [Insert Site Name]
U [Insert Site URL]
DJ [Insert Site Domain]
DJ mhmedical.com
You can find our most recent EZproxy stanza at this link, https://help.oclc.org/Library_Management/EZproxy/Database_stanzas/McGraw-Hill_Medical
The stanza in that link applies to all of our medical sites so we recommend customers copy the entire stanza exactly into their proxy's configuration file in the event that they subscribe to a new site.
Please update your config file so that your proxy server allows you to connect to our sites. We can’t update it from our end.
Again, please identify and provide your proxy IP!
Token Authentication: Tokens are only to be used when IP authentication is not an option. Tokens can be provided to the customer who will distribute a unique code to every end-user. The end-user will then create an Access profile using that code.
Many institutions provide a username and password through the library to provide remote access to their users. If your institution provides remote access this way:
- Go to your institution's library website.
- Locate the databases or electronic resources page.
- Locate the site you wish to access. When you click on it, you will be re-routed to your institution's log-in page and asked for your institutional log-in credentials (often the same username and password you use to log into your computer or gain access to your institution's intranet, though log-in credentials vary by institution). Once you have logged in, you will be rerouted to the site.
Note: Not all institutions provide remote access this way. If the instructions above do not apply to you, please contact your library to find out about remote access at your institution.
Once there, please create a free Access profile so you can log in directly to the site moving forward.