Agent authorization is live: get 2027 authorizations out before Nov 1

HealthSherpa turned on agent authorization on October 12, 2026. A day later, CMS retired the two workarounds agents relied on for years: the Invalid Action path and the three-way call. From here on, a client has to authorize their agent directly before that agent can enroll or renew them.

What changed

• Authorization is required for 2026 special enrollment business right now.
• Every 2027 active renewal needs a new authorization, even for clients you already serve.
• The request reaches the client by text or email from HealthSherpa, not from the agent's number. The link is good for 15 minutes, and the client can ask for a new one.
• Agents can send up to 3 requests per channel (text and email) per application in a rolling 24 hours.
• ID proofing is required for higher-risk cases: adding or changing the agent of record, a premium of $30 or less, or someone new to the Marketplace.
• Every 2027 request sent before Nov 1 requires identity verification, and agents can bulk-send to as many as 1,000 clients at once.
• Authorization does not replace consumer consent or the eligibility application review. Those are still collected separately.
• If the phone number and email on the application are wrong, the client has to call the Marketplace to fix them. HealthSherpa says an easier fix is in the works.

Watch: sending 2027 authorizations

Key dates