Configure MarketLink CMS EDE runs

The applicable phase Application UI Toolkit is reviewed in full; auditors need a methodology that evaluates each UI element, not only test-case-covered questions.

Phase-specific required test cases must be completed according to the User Guide tab, with screenshots through eligibility results and consistency between the results page and EDN.

Supplemental partner test cases increase approval readiness and should not replace required toolkit cases.

Each required API test case needs correct results and complete required evidence, including complete request/response headers and body where required; raw JSON/XML must remain unmodified.

Required consumer communications, notices, disclaimers, language access, and associated critical communications must be evidenced in the applicable pathway.

The consumer must be able to access the most recent EDN; EDN and raw Get App API JSON requirements apply across required toolkit cases.

Identity proofing, RBA outcomes, acceptable documentation, IDM, Okta, and MFA gates must be evidenced or explicitly blocked until authorized access exists.

Auditors must provide complete descriptions of each requirement and must not exclude required review-standard criteria; the DE Entity Documentation Package must be complete at submission.

Testing credentials must be valid and all APIs/components accessible during CMS mini audit; post-submission changes must follow the applicable change process.

The security/privacy audit package needs SAP, ARC-AMPE SSPP, SAR, and POA&M completeness; SAR findings include documentation review, control testing, scanning, penetration testing, and interviews.