App security

Verify contact information

Element name: widget_verify_phone/email Dependencies: Twilio credentials must be added in the API connector

Purpose: Verifies a users email or phone number by sending a code to the entered value and allowing the user to submit the code for verification.‌

Phone/Email entry

This state exposes an input for the user to enter their email or phone number.‌

1. User inputs a valid phone number

2. User clicks ‘Send code’ to send a verification code to the phone number entered in the input

3. After the user has initially sent a code to their phone, they have the option to enter a new number from the code verification screen. In this scenario a ‘Go back’ button is shown which will take the user back to the code verification screen using the phone number they previously entered.

Phone/email entry view‌

Code verification

This state exposes an input for the user to submit the code the received to verify the phone number entered‌

1. User enters the verification code the received

2. Click ‘Submit code’ to verify the code entered

3. Will send a new code to the user if they didn’t receive the previous one

4. Shows the input phone number screen so the user can change the phone number the code is being sent to.

Code verification view‌

2fa Widget

Element name: widget_2fa Dependencies: Twilio credentials must be added in the API connector, 2fa must be required either at the app or account level

Purpose: This widget is used to verify a user’s phone number by sending a code to a phone number or email they have previously verified for their account. This widget can only be used to send a code to previously verified values and does not allow the user to enter a new phone number or email address.‌

1. User enters the verification code they received

2. Click ‘Submit code’ to verify the code entered

3. Will send a new code to the user if they didn’t receive the previous one

4. Allows the user to receive the code at a previously verified email address. This option is only available if the application requires users to verify their email address.