What is 2FA
See this article for more information about 2FA.
Signing into Twilio Account
If you already have a Twilio account, log in.1. Click on the account profile (top left-hand side,
above the screenshot below), the account information displays.
Note: The options
that are showing in the left panel, in our example were pinned.2. Click on
the Explore Products + and locate Account security – Verify in the list.
3. Click on
the Verify link.
The Verify Services will display.
4. Click on
the Create new service button.
5. Enter the
FRIENDLY NAME, then click on the Create button.
The General Tab
6. Copy the new Service SID.
Code length is the code given when the user logs in and gets
the 2FA prompt for SMS or Voice.
The SMS Tab
7. Click on the SMS
tab, Fraud guard is On by default.
The WhatsApp Tab
8. Click on the
WhatsApp tab, then disable the Channel is enabled feature.
The Email Tab
9. Click on the Email
tab, then disable the Channel is enabled feature as it is not supported by W5.
The Voice Tab
10. Click on
the Voice tab. A voice relays the call
if selected. The Friendly name
pronunciation will
be the name showing under the General tab.
The Push Tab
11. Click on
the Push tab, nothing needed as it is not supported by W5.
The TOTP Tab
12. Click on
the TOTP tab.
These are the settings for using a QR code on screen, or
scanning the QR code with your phone using authenticators
(e.g., Google
Authenticator or Microsoft Authenticator).
13. Click on
the Save button once setup has been completed
Setting up W5 Twilio Verify Site Options
1. Go to the
Site Options form (Admin tab > System Control > Configuration >
Options (Enhanced)).
Expand on Security
and click on Two-Factor Auth (2FA) in left-side panel.
2. Click on Twilio Verify.
Twilio Verify – Twilio Verify Service SID
3. Return to
Twilio Service settings > General tab and click on Copy for the Service SID.
4. Return to
W5 and paste it into the Twilio Verify / Twilio Verify Services SID
(2FA_VERIFY_SERVICESID) field.

Twilio Verify – Twilio Account SID
5. Return to
Twilio Service settings > click on your profile (at the top under Console),
click on the Copy button for Account SID.
6. Return to
W5 and paste it into the Twilio Account SID (2FA_VERIFY_ACCOUNTSID) field.

Twilio Verify – Twilio Account Auth Token
7. Return to
your Twilio Service settings > profile, click on the Copy button for Auth
Token.
8. Return to
W5 and paste it into the Twilio Account Auth Token (2FA_VERIFY_AUTHTOKEN)
field.

Setting up Two-Factor Auth (2FA) Site Options
1. Go to the
Site Options form (Admin tab > System Control > Configuration >
Options (Enhanced)). Expand on Security
and
click on Two-Factor Auth (2FA) in left-side panel. Choose the options you want W5 to support.
Setting Two-Factor Auth to Twilio Verify
2. Select
Twilio Verify as shown below.
Voice Verification Disabled (Default: Enabled)
(2FA_VER_VOICE)
3. Select
Enabled or Disabled, noting no selection is equivalent to “Enabled”.
SMS Verification Disabled (Default: Enabled) (2FA_VER_SMS)
4. Select
Enabled or Disabled, noting no selection is equivalent to “Enabled”.
TOTP Verification Disabled (Default: Enabled) (2FA_VER_TOTP)
5. Select
Enabled or Disabled, noting no selection is equivalent to “Enabled”.
Required for W5 Windows application logins
(2FA_LOGINTYPE_WIN)
6. Select
the options that relates to which users are required for the Windows product.
Required for W5 Web Portal logins (2FA_LOGINTYPE_WEB)
7. Select
the option that relates to which users are required for the W5 Web Portal
logins.
8. Click on the Save button once completed.
9. Log out of W5 then log back in to make the changes
effective.
Setting up W5 User's 2FA
1. Go to the
User’s Security Profile form (Admin tab > Security > Users > Lookup
and select the User).
2. Enable
the Two Factor Auth. Required checkbox, then click on the Save button.

User Registering Themselves for 2FA
Next time this user logs in, they will be required to
register for 2FA. There are two options: Register your phone # for SMS/Calls and Register to use mobile app codes. The user can use one or the other or both based on their preference. Certainly, it is simplest for them to choose to just register their cell phone #.
Register your phone # for SMS/Calls
1. On the
login screen, click on Register your phone # for SMS/Calls, enter phone number, then click on the OK button.
2. Choose a
method to verify your identity, Click Send me a code via SMS text to have Twilio send you a code.
3. Enter the Code sent to your phone, then click on the OK button.
If you phone number changes, contact your W5 administrator.
Register to use mobile app codes
1. On the
login screen, click on Register to use mobile app codes.
Even if you have already Registered your phone # for SMS/Calls, you may choose to also Register to use mobile app codes.
Once selected, you are provided with a QR code. This is a
secret ID that represents your unique login. You can use an authenticator app on your smart phone to register this new account and generate codes for you in the future if you prefer this mechanism over receiving SMS messages / phone calls.
Using the Google Authenticator or Microsoft Authenticator on your Smart Phone
1. First of all, you will need to download either the Google Authenticator or Microsoft Authenticator (or another authenticator) on your smart phone. Below are links for Android and iOS for the Google and Microsoft Authenticator.
2. Using
your chosen Authenticator on your phone, click the button to add a new account and then proceed to scan the QR code or
manually
register the text indicated to the right of the QR code. Note there is a
timeout set for this.
After your have done so, W5 will prompt you to enter the code showing on your phone for the newly added account.
User Login Once Registered
1. On the
login screen, you will be given options to verify your identity (this is based
on how the user registered).
For the example below, when Use a verification code from my mobile app has been selected, enter the code shown in your authenticator app on your smart phone.