How to set up 2FA

This instruction describes how to set up 2FA services in the Back Office so that your clients can enable 2FA in the B2CORE UI and obtain verification codes to sign in to the B2CORE UI or confirm their phone numbers.

How to set up 2FA with SMS

Before setting up 2FA with SMS, make sure that you have added and configured a 2FA SMS provider (such as Twilio or Vonage).

To deliver 2FA codes to your clients via SMS:

• Configure the following system settings by navigating to System > Settings:

  • Unique phone (located in the Client settings section)

  • Confirmation phone code lifetime (located in the Other settings section)

  • Sms limit for each recipient (located in the Other settings section)

To learn more about these settings, refer to Settings.

• Create a template for delivering 2FA codes via SMS.

• Check configuration of the wizards related to 2FA with SMS.

How to create a template for delivering 2FA codes via SMS

To create a custom SMS template for delivering 2FA codes:

1. Navigate to System > Templates > Sms > Confirmation Templates, and then click +Create in the upper-right corner of the page.

2. On the Create template page, fill in the following fields:

• In the Name field, enter default.

• In the Caption field, enter a name that you want to use for the template in the Back Office (such as 2FA SMS).

• In the Template field, specify the message text, such as:

  <Your company name>: Your verification code is %CODE%.

  The text can be specified in the HTML format.

1. Click Save to save the template.

How to check configuration of the wizards related to 2FA with SMS

To enable your clients to receive verification codes via SMS to sign in to the B2CORE UI or confirm their phone numbers, make sure that the wizards related to 2FA with SMS are properly configured.

To check the wizard configuration:

1. Navigate to System > Wizards.

2. Make sure that the following wizards are enabled:

• 2FA SMS

• 2FA SMS Auth

• Phone Confirm

1. Check that no restrictions are applied to these wizards, by doing the following:

• Click the Edit button related to a required wizard.

• Switch to the Workflow tab.

• Click the Actions button displayed to each wizard step, and then select the Country restrictions or Client type restriction option.

• Make sure that in the Restrictions popup displayed for each option, the Enabled field is set to No.

Your clients are now enabled to receive 2FA codes via SMS.

In addition, you can enable client phone number confirmation during registration by delivering verification codes via SMS (for details, refer to How to add and configure the registration wizard).

How to test operation of 2FA with SMS

After you have configured 2FA with SMS in the Back Office, you can test its operation as follows:

1. Sign in to the B2CORE UI.

2. Click the profile icon in the upper-right page corner, and then select Security in the dropdown.

3. In the Two-factor authentication section, enable the SMS Confirmation option.

4. Enter your phone number in the displayed form.

5. Click Continue.

If you have received a verification code to a specified phone number, 2FA with SMS operates properly.