CIBMTR.org

Initial Login and Password Management

Getting Your First Password or Resetting an NMDP User Account Password

Creating an initial account password and resetting an account password can be done the same way. A new user should get a temporary password from their Primary Data Manager after the account is created. However, it is also possible for the user to get their first password independently approximately 90 minutes after the account request is completed using the process described below.

Note: CIBMTR Portal requires secondary setup and will not be available immediately. Allow up to 2 business days or submit a CIBMTR Center Support ticket to request setup be expedited once you can log in.

Password Reset Instructions

On any NMPD login screen (links below) click on “Need Help Signing In?” then click on “Forgot Password”. CIBMTR suggests using the NMDP username in the pop up instead of the email address. Then click on “Reset Password”.

Password Requirements for NMDP User Accounts

  • Minimum Length: 8 characters or more
  • Complexity: Must include at least 3 of the following 4:
    • Uppercase letter
    • Lowercase letter
    • Number
    • Special character (examples: %.^=&<>*/;:?+_-!&$)
  • Restrictions:
    • Cannot be one of the last 24 passwords used
    • Cannot include your username
  • Change Frequency: Password can only be changed once every 24 hours

Multifactor Authentication Setup

Users must set up multifactor authentication using Okta Verify on a mobile device. Select Okta Verify and follow the on-screen prompts to set up the account on their mobile device or tablet. The Okta Verify app can be found in the Apple App Store or on Google Play. If you have trouble, it is not necessary to use multifactor authentication for CIBMTR Center Support. Instructions for setup can be found in the CIBMTR Center Support Knowledge Base article titled “FAQ: Okta Verify Multifactor Authentication Setup.”

Alternate methods of multifactor authentication are available. Submit a CIBMTR Center Support ticket or reach out directly to the NMDP Service Desk at 763-406-3411 (800-526-7809 ×3411 in the U.S.) for assistance.

Self-Service Multifactor Authentication Reset

If a user is getting a new mobile device, they can use their current device and remove their current multifactor authentication in Settings at https://nmdp.okta.com. Full instructions are available in the Knowledge Base in CIBMTR Center Support. Once the new device is available the user can log in and set up multifactor authentication with their new device. If the user has not removed the setup in their user account and the former mobile device is no longer available, the user will need to contact CIBMTR or NMDP for assistance.

Password Expiration Policy for NMDP User Accounts

Passwords are valid for 60 days. The user will receive three automated expiration notification emails from SCORCH@NMDP.ORG before the password expires at these timepoints: 7, 3, and 1 day before expiration.

No Email Received After Requesting a Reset Link

If the account is DEACTIVATED, no email will be sent. Have a coworker submit a CIBMTR Center Support ticket. CIBMTR suggests using the username instead of the email when requesting the password reset link in case the account email is not the one being used.

If still unresolved, create a CIBMTR Center Support ticket so the team can check the account status or reach out directly to the NMDP Service Desk at 763-406-3411 (800-526-7809 ×3411 in the U.S.) for assistance.

Login Screen Links

Account Management

CIBMTR Applications

Last modified: Dec 10, 2025