Difference between revisions of "XP Cloud:Setting up User Authentication with SMS/Text Messages"

From X-Payments Help
Jump to: navigation, search
m
m
Line 3: Line 3:
 
__NOTOC__<br>
 
__NOTOC__<br>
  
:[[File:xpc_sms_auth1.png| 760 px | border]]<br />
+
X-Payments Cloud can be set up to use an authentication method based on using one-time passwords received via SMS/text messages. The service is provided by Twilio.
:[[File:xpc_sms_auth2.png| 760 px | border]]<br />
+
 
:[[File:xpc_sms_auth3.png| 760 px | border]]<br />
+
To set up user authentication via SMS/text messages, follow these steps:
:[[File:xpc_sms_auth4.png| 760 px | border]]<br />
+
# In the X-Payments Cloud admin panel, go to the configuration page for the user authentication method based on using SMS/text messages ('''2-step authentication via SMS/text messages''').<br />[[File:xpc_sms_auth2.png| 740 px | border]]<br />This page opens automatically after you select SMS/text messages as your preferred user authentication method on your first login to X-Payments Cloud.<br />[[File:xpc_sms_auth1.png| 740 px | border]]<br />Also, you can access this page at any time using the "SMS/Text message configure" link on your profile details page ('''Profile''' > '''View details'''):<br />[[File:xpc_sms_auth_link.png|740 px | border]]<br />
:[[File:xpc_sms_auth5.png| 760 px | border]]<br />
+
# Use the '''Phone number''' field to enter a phone number that you would like to use to receive SMS/text messages with one-time passwords for the second step of user authentication. Click '''Save''' to save the changes.<br />[[File:xpc_sms_auth3.png| 740 px | border]]<br />The phone number will be saved, and a new message - "The phone number is not verified" - will be displayed.<br />
:[[File:xpc_sms_auth6.png| 760 px | border]]<br />
+
# Verify the phone number you have added.<br />Click the '''Send verification code''' button:<br />[[File:xpc_sms_auth4.png| 740 px | border]]<br />Once you do it, an SMS/text message with a one-time password for user authentication will be sent to your phone, and the '''Send verification code''' button will be replaced with a blank field for verification. Type the one-time password you have received into this field, then click the '''Verify''' button.<br />[[File:xpc_sms_auth5.png| 740 px | border]]<br />Provided that the password is correct, a message saying "The phone number is verified" will be displayed:<br />[[File:xpc_sms_auth6.png| 740 px | border]]<br />This means user authentication via SMS/text messages has been set up and enabled successfully.
 +
 
 +
Now if you use this user authentication method, you will need to use one-time passwords sent to your phone.
 +
:[[File:xc3_2step_sms_auth.png|border]]<br /><br />
 +
'''Important:''' After setting up your preferred user authentication method, be sure to create and save a list of backup codes for access to X-Payments:
 +
:* [[X-Payments:Setting_up_user_authentication_with_backup_codes | Setting up user authentication with backup codes]]<br /><br />
 +
If necessary, you can change the phone number at which you receive SMS/text messages with one-time passwords. Note that to complete the task you will be required to enter a one-time password from an SMS/text message sent to your currently connected device (If you have authentication via Google Authenticator enabled as an additional method, you can also use a one-time password generated by Google Authenticator instead of the password from the SMS/text messsage - these passwords are the same and can be used interchangeably).

Revision as of 00:51, 23 November 2019

X-Payments Cloud User Manual
  1. X-Payments Cloud: General information
  2. Get Started with X-Payments Cloud
  3. Two-factor User Authentication
  4. General Settings
  5. Payment Configurations
  6. Services
  7. Users
  8. User Interface
  9. Payments
  10. Supported Payment Gateways
  11. What's New in X-Payments Cloud


X-Payments Cloud can be set up to use an authentication method based on using one-time passwords received via SMS/text messages. The service is provided by Twilio.

To set up user authentication via SMS/text messages, follow these steps:

  1. In the X-Payments Cloud admin panel, go to the configuration page for the user authentication method based on using SMS/text messages (2-step authentication via SMS/text messages).
    Xpc sms auth2.png
    This page opens automatically after you select SMS/text messages as your preferred user authentication method on your first login to X-Payments Cloud.
    Xpc sms auth1.png
    Also, you can access this page at any time using the "SMS/Text message configure" link on your profile details page (Profile > View details):
    Xpc sms auth link.png
  2. Use the Phone number field to enter a phone number that you would like to use to receive SMS/text messages with one-time passwords for the second step of user authentication. Click Save to save the changes.
    Xpc sms auth3.png
    The phone number will be saved, and a new message - "The phone number is not verified" - will be displayed.
  3. Verify the phone number you have added.
    Click the Send verification code button:
    Xpc sms auth4.png
    Once you do it, an SMS/text message with a one-time password for user authentication will be sent to your phone, and the Send verification code button will be replaced with a blank field for verification. Type the one-time password you have received into this field, then click the Verify button.
    Xpc sms auth5.png
    Provided that the password is correct, a message saying "The phone number is verified" will be displayed:
    Xpc sms auth6.png
    This means user authentication via SMS/text messages has been set up and enabled successfully.

Now if you use this user authentication method, you will need to use one-time passwords sent to your phone.

Xc3 2step sms auth.png

Important: After setting up your preferred user authentication method, be sure to create and save a list of backup codes for access to X-Payments:

If necessary, you can change the phone number at which you receive SMS/text messages with one-time passwords. Note that to complete the task you will be required to enter a one-time password from an SMS/text message sent to your currently connected device (If you have authentication via Google Authenticator enabled as an additional method, you can also use a one-time password generated by Google Authenticator instead of the password from the SMS/text messsage - these passwords are the same and can be used interchangeably).