Confirmation codes sent in SMS and push notifications#

You can use push notifications sent to the mobile app or SMS messages for login confirmation (the second authentication factor).

To use the confirmation codes, you must:

  • configure and enable the authentication method Confirmation via SMS/push. For the method to work correctly, it is necessary to define:

    • length of the confirmation code;

    • validation time;

    • number of attempts to enter the confirmation code for 1 login;

    • total number of attempts (number of code sends and code entry attempts, after which this authentication method will be temporarily blocked for the user);

    • blocking time when attempts are exceeded (in minutes);

    • configure the sending methods:

      • send push notification - you should specify an attribute with a cell phone number or other user ID required by the service, for example, ${phone_number};

      • send SMS - specify attribute with user’s cell phone number, for example, ${phone_number};

  • configure Blitz Identity Provider connection to the SMS gateway and push notification service (see Notifications and sending messages).

Attention

If the user does not have a mobile phone number, he will not be able to use method of login verification by confirmation code sent via SMS.