Difference between revisions of "X-Payments:Two-factor authentication"

From X-Payments Help
Jump to: navigation, search
(Created page with "Starting with X-Payments version 3.0, we have changed the system of user authentication in X-Payments. In the previous versions of X-Payments, we already used an authenticati...")
 
m
 
(41 intermediate revisions by the same user not shown)
Line 1: Line 1:
 +
<noinclude>{{XP_manual_TOC}}</noinclude>
 +
 +
__NOTOC__<br>
 
Starting with X-Payments version 3.0, we have changed the system of user authentication in X-Payments.
 
Starting with X-Payments version 3.0, we have changed the system of user authentication in X-Payments.
  
Line 8: Line 11:
 
The authentication methods based on using the Google Authenticator app and SMS/text messages are primary methods; they can be used independently or alongside one another. Authentication with backup codes is a complementary method; it can be used as a fallback user authentication method if your primary method is unavailable for some reason.
 
The authentication methods based on using the Google Authenticator app and SMS/text messages are primary methods; they can be used independently or alongside one another. Authentication with backup codes is a complementary method; it can be used as a fallback user authentication method if your primary method is unavailable for some reason.
  
−
So, if you have installed the latest version of X-Payments, or have upgraded to X-Payments version 3.0 (or later), the first time you will attempt to log in to X-Payments - right after entering your login and password - you will be required to choose a method for the 2nd step of user authentication that you would like to use:<br />[[File:xp3_2step_choose_method.png|border]]<br /><br />
+
So, if you have installed the latest version of X-Payments, or have upgraded to X-Payments version 3.0 (or later), the first time you will attempt to log in to X-Payments - right after entering your login and password - you will be required to choose a method for the 2nd step of user authentication that you would like to use:<br />
−
The available options are user authentication with the Google Authenticator app and user authentication with SMS/text messages. The method you choose at this step will be set as your preferred method for user verification. If you wish, later you will be able to set up an alternative method and, if necessary, change your preferred method.
+
:[[File:xp3_2step_choose_method.png|border]]<br />
−
 
+
The available options here are user authentication with the Google Authenticator app and user authentication with SMS/text messages. To continue with the setup of the chosen method, click the '''Continue''' button. You will be directed to the method configuration page. To set up the chosen method for use with your X-Payments, follow the instructions below:
−
To continue with the setup of the chosen method, click the '''Continue''' button. You will be directed to the method configuration page. To set up the chosen method for use with your X-Payments, follow the instructions below:
+
:* [[X-Payments:Setting_up_user_authentication_with_the_Google_Authenticator_app | Setting up user authentication with the Google Authenticator app]]
−
:* [[#Setting up user authentication with the Google Authenticator app | Setting up user authentication with the Google Authenticator app]]
+
:* [[X-Payments:Setting_up_user_authentication_with_SMS/text_messages | Setting up user authentication with SMS/text messages]]
−
:* [[#Setting up user authentication with SMS/text messages | Setting up user authentication with SMS/text messages]]
 
−
 
 
−
If you need to change your preferred user authentication method or set up an additional method, you can access your authentication method settings from your profile details page:<br />[[File:xp3_2step_ga_enabled_configured0.png|border]]
 
  
−
After setting up your primary authentication method, we strongly recommend that you create a list of backup codes that will allow you access to X-Payments if the user authentication method(s) you normally use are not working:
+
The authentication method you choose before your first login to X-Payments will be set as your preferred method for user verification. If you wish, later you will be able to [[X-Payments:Setting_up_an_additional/alternative_method_of_user_authentication | set up an additional/alternative method]] of user authentication and, if necessary, [[X-Payments:Changing_your_preferred_user_authentication_method |change your preferred method]].
−
:* [[#Setting up user authentication with backup codes | Setting up user authentication with backup codes]]
 
  
−
==Setting up user authentication with the Google Authenticator app==
+
After you configure a method for the second step of user authentication, you will be required to enter a one-time password provided to you via your preferred method of authentication every time you log in to X-Payments, unless you configure X-Payments to [[X-Payments:Configuring_X-Payments_to_skip_the_2nd_step_of_user_authentication | skip this step for two weeks]] on you device.  
−
This authentication method is based on using the Google Authenticator application which you install on your phone. The application is connected to your X-Payments installation, after which it can generate one-time passwords that serve as the second piece of evidence to prove your identity after you have entered your X-Payments login and password.
 
  
−
To set up user authentication via the Google Authenticator app, follow these steps:
+
After setting up your primary user authentication method, we strongly recommend that you create a list of backup codes that will allow you access to X-Payments if you lose the phone associated with your two-factor authentication settings, or if the authentication method you normally use becomes unavailable for some reason:
−
# Install the Google Authenticator app on your phone/mobile device. The installation instructions are available [https://support.google.com/accounts/answer/1066447?hl=en here].
+
:* [[X-Payments:Setting_up_user_authentication_with_backup_codes | Setting up user authentication with backup codes]]
−
# In the X-Payments back end, go to the configuration page for the authentication method based on using Google Authenticator ('''2-step authentication with Google Authenticator'''). This page opens automatically after you select Google Authenticator as your preferred user authentication method when you log in to X-Payments for the first time. Also, you can access this page at any time using the "Google Authenticator app <u>configure</u>" link on your profile details page ('''Profile''' > '''View details'''):<br />[[File: .png|border]]<br />
 
−
# Sync the time on the device where you have installed the Google Authenticator app with the time in X-Payments. Never mind the time zone difference; it is only the minutes and seconds that need to be synchronized.
 
−
# Add your X-Payments account to the Google Authenticator App. To do so, scan the QR code on the right-hand side of the '''2-step authentication with Google Authenticator''' page, or use the Secret code displayed below the QR code to manually register your X-Payments account in the Google Authenticator app.
 
−
# To test the configuration, enter a one-time password from your Google Authenticator application on the '''2-step authentication with Google Authenticator''' page and click "Check":<br />[[File:xc3_2step_ga_check.png|border]]<br />
 
−
Provided that the password from the Google Authenticator has been entered correctly, you should see a success message saying that the authentication method has been configured successfully:<br />[[File:xc3_2step_ga_check_success.png|border]]<br /><br />
 
−
Now user authentication via the Google Authenticator app is enabled and configured.<br />[[File:xc3_2step_ga_enabled_configured.png|border]]
 
  
−
==Setting up user authentication with SMS/text messages==
+
[[Category:X-Payments User Manual]]
−
==Setting up user authentication with backup codes==
 

Latest revision as of 17:12, 30 March 2017

X-Payments user manual
  1. X-Payments:General information
  2. What's New
  3. System requirements
  4. Installation
  5. Two-factor user authentication
  6. Configuring X-Payments
  7. Managing users
  8. Customizing the interface
  9. Managing payments
  10. Unistalling X-Payments
  11. Upgrading
  12. Moving X-Payments from one host to another
  13. Viewing X-Payments logs
  14. FAQ
  15. Troubleshooting
  16. Glossary
  17. Supported payment gateways
  18. Popular Payment Methods Configuration Instructions


Starting with X-Payments version 3.0, we have changed the system of user authentication in X-Payments.

In the previous versions of X-Payments, we already used an authentication method that depended on more than one "factor": to access the X-Payments back end, a user had to prove their identity by presenting two separate pieces of evidence - 1) a login and a password; 2) a PIN code. In X-Payments version 3.0, user authentication is still based on the two-factor model, but we have provided more options regarding the second component required for user identification. Instead of PIN codes, X-Payments now provides three methods which can be used to verify a user's identity after authenticating them via a login and a password:

  • authentication with the Google Authenticator application;
  • authentication via SMS/text messages (Twilio integration);
  • authentication via backup codes generated by X-Payments.

The authentication methods based on using the Google Authenticator app and SMS/text messages are primary methods; they can be used independently or alongside one another. Authentication with backup codes is a complementary method; it can be used as a fallback user authentication method if your primary method is unavailable for some reason.

So, if you have installed the latest version of X-Payments, or have upgraded to X-Payments version 3.0 (or later), the first time you will attempt to log in to X-Payments - right after entering your login and password - you will be required to choose a method for the 2nd step of user authentication that you would like to use:

Xp3 2step choose method.png

The available options here are user authentication with the Google Authenticator app and user authentication with SMS/text messages. To continue with the setup of the chosen method, click the Continue button. You will be directed to the method configuration page. To set up the chosen method for use with your X-Payments, follow the instructions below:

The authentication method you choose before your first login to X-Payments will be set as your preferred method for user verification. If you wish, later you will be able to set up an additional/alternative method of user authentication and, if necessary, change your preferred method.

After you configure a method for the second step of user authentication, you will be required to enter a one-time password provided to you via your preferred method of authentication every time you log in to X-Payments, unless you configure X-Payments to skip this step for two weeks on you device.

After setting up your primary user authentication method, we strongly recommend that you create a list of backup codes that will allow you access to X-Payments if you lose the phone associated with your two-factor authentication settings, or if the authentication method you normally use becomes unavailable for some reason:

Retrieved from "https://www.x-payments.com/help/?title=X-Payments:Two-factor_authentication&oldid=956"