XP Cloud:Setting up User Authentication with SMS/Text Messages

From X-Payments Help
Jump to: navigation, search
X-Payments Cloud User Manual
  1. X-Payments Cloud: General information
  2. Getting started with X-Payments Cloud
  3. Two-factor User Authentication
  4. General Settings
  5. Payment Configurations
  6. 3D-Secure Settings
  7. KOUNT Antifraud Screening
  8. NoFraud Fraud Prevention
  9. Signifyd Fraud Protection
  10. Managing Users
  11. Customizing the User Interface
  12. Managing Payments
  13. Supported Payment Gateways


X-Payments Cloud can be set up to use an authentication method based on using one-time passwords received via SMS/text messages. The service is provided by Twilio.

To set up user authentication via SMS/text messages, follow these steps:

  1. On your first login to X-Payments Cloud from your store, select SMS/text messages as your preferred user authentication method:
    Xpc sms auth1.png
    The configuration page for the user authentication method based on using SMS/text messages (2-step authentication via SMS/text messages) opens.
    Xpc sms auth2.png
    If you are already past the stage of your first login, you can access this page at any time via a link on your X-Payments Cloud profile details page. Here's how to do it: At the top of the X-Payments Cloud settings page in your X-Cart store's Admin area, select Settings > Advanced.
    Xpc advanced link.png
    The X-Payments Cloud admin panel opens in a new browser tab as a standalone site. Go there and select Profile > View details. Your profile details page opens. Click on the "SMS/Text message configure" link to access the page you require:
    Xpc sms configure.png
  2. Use the Phone number field to specify the phone number that you would like to use to receive SMS/text messages with one-time passwords for the second step of user authentication. Click Save to save the changes.
    Xpc sms auth3.png
    The phone number will be saved, and a new message - "The phone number is not verified" - will be displayed.
  3. Verify the phone number you have added.
    Click the Send verification code button:
    Xpc sms auth4.png
    Once you do it, an SMS/text message with a one-time password for user authentication will be sent to your phone, and the Send verification code button will be replaced with a blank field for verification. Type the one-time password you have received into this field, then click Verify.
    Xpc sms auth5.png
    Provided that the password is correct, a message saying "The phone number is verified" will be displayed:
    Xpc sms auth6.png
    This means user authentication via SMS/text messages has been set up and enabled successfully.

Now if you use this user authentication method, you will need to use one-time passwords sent to your phone.

Xpc sms auth.png

Important: After setting up your preferred user authentication method, be sure to create and save a list of backup codes for access to X-Payments:

If necessary, you can change the phone number at which you receive SMS/text messages with one-time passwords. Note that to complete the task you will be required to enter a one-time password from an SMS/text message sent to your currently connected device (If you have authentication via Google Authenticator enabled as an additional method, you can also use a one-time password generated by Google Authenticator instead of the password from the SMS/text messsage - these passwords are the same and can be used interchangeably).