Difference between revisions of "XP Cloud:Setting up User Authentication with the Google Authenticator App"

From X-Payments Help
Jump to: navigation, search
m
m
 
(11 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
<noinclude>{{XPC_manual_TOC}}</noinclude>
 +
 +
__NOTOC__<br>
 
X-Payments Cloud can be set up to use a user authentication method based on using codes from the Google Authenticator application. The idea is simple: You install the app on a device you own, typically a smartphone, and connect it to your X-Payments Cloud account. The app can generate one-time passwords that serve as the second piece of evidence to prove your identity - in addition to your login and password - when you try to login to X-Payments Cloud.
 
X-Payments Cloud can be set up to use a user authentication method based on using codes from the Google Authenticator application. The idea is simple: You install the app on a device you own, typically a smartphone, and connect it to your X-Payments Cloud account. The app can generate one-time passwords that serve as the second piece of evidence to prove your identity - in addition to your login and password - when you try to login to X-Payments Cloud.
  
 
To set up user authentication via the Google Authenticator app, follow these steps:
 
To set up user authentication via the Google Authenticator app, follow these steps:
 
# Install the Google Authenticator app on your phone/mobile device. The installation instructions are available [https://support.google.com/accounts/answer/1066447?hl=en here].
 
# Install the Google Authenticator app on your phone/mobile device. The installation instructions are available [https://support.google.com/accounts/answer/1066447?hl=en here].
# In the X-Payments Cloud admin panel, go to the configuration page for the authentication method based on using Google Authenticator ('''Google Authenticator 2nd step verification''').<br />[[File:xpc_google_auth2.png|740 px|border]]<br />This page opens automatically after you select Google Authenticator as your preferred user authentication method when you log in to X-Payments Cloud for the first time.<br />[[File:xpc_google_auth1.png|740 px|border]]<br /> Also, you can access this page at any time using the "Google Authenticator app <u>configure</u>" link on your profile details page ('''Profile''' > '''View details'''):<br />[[File:xpc_google_auth_link.png|740 px|border]]<br />
+
# Go to the configuration page for the authentication method based on using Google Authenticator.<br />[[File:xpc_google_auth2.png|670 px|border]]<br />This page opens automatically after you select Google Authenticator as your preferred user authentication method when you log in to X-Payments Cloud from your store for the first time.<br />[[File:xpc_google_auth1.png|670 px|border]]<br /> Also, you can access this page at any time using the "Google Authenticator app <u>configure</u>" link on your X-Payments Cloud profile details page ('''Profile''' > '''View details'''):<br />[[File:xpc_ga_app_configure.png|670 px|border]]<br />
# Sync the time on the device where you have installed the Google Authenticator app with the time in X-Payments Cloud. Never mind the time zone difference; it is only the minutes and seconds that need to be synchronized. The current time in X-Payments Cloud is displayed right on the '''Google Authenticator 2nd step verification''' page:<br />[[File:xpc_google_auth_time.png|740 px|border]]<br />
+
# Sync the time on the device where you have installed the Google Authenticator app with the time in X-Payments Cloud. Never mind the time zone difference; it is only the minutes and seconds that need to be synchronized. The current time in X-Payments Cloud is displayed right on the Google Authenticator method configuration page:<br />[[File:xpc_google_auth_time.png|670 px|border]]<br />
# Add your X-Payments Cloud account to the Google Authenticator App. To do so, scan the QR code from the '''Google Authenticator 2nd step verification''' page:<br />[[File:xpc_google_auth_qr.png|740 px|border]]<br />Or manually register your X-Payments Cloud account in the Google Authenticator app using the Secret code displayed below the QR code:<br />[[File:xpc_google_auth_secret.png|740 px|border]]<br />
+
# Add your X-Payments Cloud account to the Google Authenticator App. To do so, scan the QR code from the Google Authenticator method configuration page:<br />[[File:xpc_google_auth_qr.png|670 px|border]]<br />Or manually register your X-Payments Cloud account in the Google Authenticator app using the Secret code displayed below the QR code:<br />[[File:xpc_google_auth_secret.png|670 px|border]]<br />
# To test your X-Payments Cloud 2nd step user authentication configuration, look up the current one-time password in the Google Authenticator app installed on your phone, enter this password into the appropriate field on the '''Google Authenticator 2nd step verification''' page and click "Check":<br />[[File:xp3_2step_ga_checking.png|border]]<br />Note that the lifetime of a one-time password is one minute, and the same code cannot be used more than once.<br />
+
# To test your X-Payments Cloud 2nd step user authentication configuration, look up the current one-time password in the Google Authenticator app installed on your phone/mobile device, enter this password into the appropriate field on the Google Authenticator method configuration page and click "Check":<br />[[File:xpc_google_auth3.png|670 px|border]]<br />Note that the lifetime of a one-time password is one minute, and the same code cannot be used more than once.<br />
Provided that the password from the Google Authenticator app has been entered correctly, you should see a popup message saying that the authentication method has been configured successfully:
+
Provided that the password from the Google Authenticator app has been entered correctly, you will get a confirmation.
:[[File:xp3_2step_ga_check_success0.png|border]]<br /><br />
+
:[[File:xpc_google_auth4.png|670 px|border]]<br /><br />
Now user authentication via the Google Authenticator app is enabled and configured:
+
Now user authentication via the Google Authenticator app is enabled and configured.
:[[File:xp3_2step_ga_configured.png|border]]<br /><br />
 
 
At the second step of user authentication, you can now use one-time passwords generated by the Google Authenticator app:
 
At the second step of user authentication, you can now use one-time passwords generated by the Google Authenticator app:
:[[File:xp3_2step_ga_auth.png|border]]<br /><br />
+
:[[File:xpc_unlock_google.png|670 px|border]]<br /><br />
 
'''Important:''' After setting up your preferred user authentication method, be sure to create and save a list of backup codes for access to X-Payments Cloud:
 
'''Important:''' After setting up your preferred user authentication method, be sure to create and save a list of backup codes for access to X-Payments Cloud:
:* [[X-Payments:Setting_up_user_authentication_with_backup_codes | Setting up User Authentication with Backup Codes]]<br /><br />
+
:* [[X-Payments Cloud:Setting up User Authentication with Backup Codes | Setting up User Authentication with Backup Codes]]<br /><br />
  
 
Later on, if you need to set up Google Authenticator on a different device, you will have to reconnect the app. Note that to complete the task you will be required to enter a one-time password from your currently connected Google Authenticator app (If you have authentication via SMS/text messages enabled as an additional method, you can also use a one-time password received via SMS/text message instead of the password from Google Authenticator - these passwords are the same and can be used interchangeably).
 
Later on, if you need to set up Google Authenticator on a different device, you will have to reconnect the app. Note that to complete the task you will be required to enter a one-time password from your currently connected Google Authenticator app (If you have authentication via SMS/text messages enabled as an additional method, you can also use a one-time password received via SMS/text message instead of the password from Google Authenticator - these passwords are the same and can be used interchangeably).
  
 
To re-connect the app:
 
To re-connect the app:
# On the configuration page for the authentication method based on using Google Authenticator ('''Google Authenticator 2nd step verification'''), click the '''Re-connect the app''' button:<br />[[File:xp3_2step_ga_reconnect1.png|border]]<br />A popup window will be displayed providing a form for you to enter a one-time password from your currently connected app:<br />[[File:xp3_2step_ga_reconnect2.png|border]]<br />Type in the one-time password from Google Authenticator (or an SMS/text message) and click Enter. The popup window will be closed, and the method configuration page will show the note "The authentication method is not configured!":<br />[[File:xp3_2step_ga_reconnect_3.png|border]]<br />
+
# Go to the configuration page for the authentication method based on using Google Authenticator:<br />[[File:xpc_configured_google_auth_link.png|670 px|border]]<br /><br />
 +
# Click '''Re-connect the app''':<br />[[File:xpc_google_reconnect.png|670 px|border]]<br />A popup window will be displayed providing a form for you to enter a one-time password from your currently connected app:<br />[[File:xpc_google_reconnect1.png|670 px|border]]<br />Type in the one-time password from Google Authenticator (or an SMS/text message) and click Enter. The popup window will be closed, and the method configuration page will show the note "The authentication method is not configured!":<br />[[File:xpc_google_reconnect2.png|670 px|border]]<br />
 
# Scan the QR code or manually enter the Secret code to re-connect the app.
 
# Scan the QR code or manually enter the Secret code to re-connect the app.
 +
 +
[[Category:X-Payments Cloud User Manual]]

Latest revision as of 18:21, 29 June 2020

X-Payments Cloud User Manual
  1. X-Payments Cloud: General information
  2. Get Started with X-Payments Cloud
  3. Two-factor User Authentication
  4. General Settings
  5. Payment Configurations
  6. Services
  7. Users
  8. User Interface
  9. Payments
  10. Supported Payment Gateways
  11. What's New in X-Payments Cloud


X-Payments Cloud can be set up to use a user authentication method based on using codes from the Google Authenticator application. The idea is simple: You install the app on a device you own, typically a smartphone, and connect it to your X-Payments Cloud account. The app can generate one-time passwords that serve as the second piece of evidence to prove your identity - in addition to your login and password - when you try to login to X-Payments Cloud.

To set up user authentication via the Google Authenticator app, follow these steps:

  1. Install the Google Authenticator app on your phone/mobile device. The installation instructions are available here.
  2. Go to the configuration page for the authentication method based on using Google Authenticator.
    Xpc google auth2.png
    This page opens automatically after you select Google Authenticator as your preferred user authentication method when you log in to X-Payments Cloud from your store for the first time.
    Xpc google auth1.png
    Also, you can access this page at any time using the "Google Authenticator app configure" link on your X-Payments Cloud profile details page (Profile > View details):
    Xpc ga app configure.png
  3. Sync the time on the device where you have installed the Google Authenticator app with the time in X-Payments Cloud. Never mind the time zone difference; it is only the minutes and seconds that need to be synchronized. The current time in X-Payments Cloud is displayed right on the Google Authenticator method configuration page:
    Xpc google auth time.png
  4. Add your X-Payments Cloud account to the Google Authenticator App. To do so, scan the QR code from the Google Authenticator method configuration page:
    Xpc google auth qr.png
    Or manually register your X-Payments Cloud account in the Google Authenticator app using the Secret code displayed below the QR code:
    Xpc google auth secret.png
  5. To test your X-Payments Cloud 2nd step user authentication configuration, look up the current one-time password in the Google Authenticator app installed on your phone/mobile device, enter this password into the appropriate field on the Google Authenticator method configuration page and click "Check":
    Xpc google auth3.png
    Note that the lifetime of a one-time password is one minute, and the same code cannot be used more than once.

Provided that the password from the Google Authenticator app has been entered correctly, you will get a confirmation.

Xpc google auth4.png

Now user authentication via the Google Authenticator app is enabled and configured. At the second step of user authentication, you can now use one-time passwords generated by the Google Authenticator app:

Xpc unlock google.png

Important: After setting up your preferred user authentication method, be sure to create and save a list of backup codes for access to X-Payments Cloud:

Later on, if you need to set up Google Authenticator on a different device, you will have to reconnect the app. Note that to complete the task you will be required to enter a one-time password from your currently connected Google Authenticator app (If you have authentication via SMS/text messages enabled as an additional method, you can also use a one-time password received via SMS/text message instead of the password from Google Authenticator - these passwords are the same and can be used interchangeably).

To re-connect the app:

  1. Go to the configuration page for the authentication method based on using Google Authenticator:
    Xpc configured google auth link.png

  2. Click Re-connect the app:
    Xpc google reconnect.png
    A popup window will be displayed providing a form for you to enter a one-time password from your currently connected app:
    Xpc google reconnect1.png
    Type in the one-time password from Google Authenticator (or an SMS/text message) and click Enter. The popup window will be closed, and the method configuration page will show the note "The authentication method is not configured!":
    Xpc google reconnect2.png
  3. Scan the QR code or manually enter the Secret code to re-connect the app.