Overview

This list of capabilities continues to grow.

From the start, Dashboard was designed with the consideration of leading development methodologies and technologies including elements of design thinking. As a result, the interface includes a number of solutions which have already been tested with the help of prospective and real-life users, and any clients of ecommpay can contribute to the further development of the interface—if you are interested, let your account manager know.

If you have questions about using Dashboard, refer to this documentation or contact ecommpay specialists.

Since Dashboard provides access to financial data and allows executing financial operations, the following protective measures are implemented to ensure secure handling of data:

According to the requirements mandated by PSD2 (Revised Directive on Payment Services, Directive (EU) 2015/2366) the following protective measures are implemented to ensure secure handling of data:

• Access control via user accounts with permissions distributed according to assigned access roles (learn more).
• Additional user authentication that requires the second "authentication factor"–with Google Authenticator app.
• Confirmation of payouts with one-time verification codes sent to the phone numbers previously provided by Dashboard users (to learn more about using this capability, contact your ecommpay account manager).

These measures comply with the requirements of PSD2 (Revised Directive on Payment Services, Directive (EU) 2015/2366) and ensure user convenience and security.

Certain permissions granted to use Dashboard do not require providing the second authentication factor. This applies to the following sections and the corresponding permissions:

• In My profile it applies to editing user profile, managing API tokens, and managing the Telegram bot of ecommpay technical support.
• In Payments it applies to viewing payment registry, viewing payment information, using configuration, issuing refunds, and capturing and releasing held funds as part of executing a two-step purchase.
• In Reports it applies to managing reports.
• In Projects it applies to viewing projects.
• In Subscriptions it applies to viewing the registry of regular COF purchases (subscriptions), viewing detailed COF purchase information, updating its settings and cancelling it.
• In Manual payments it applies to issuing refunds, capturing and releasing held funds.
• In Remittances it applies to creating and editing remittance recipient accounts and viewing lists of the recipient accounts and the remittances.

Any permission not included in the list above implies that the user should provide the phone number and enable two-factor authentication.

Dashboard role-based access model implies the use of certain permissions that do not require providing the second authentication factor and the phone number. In all other cases, users are required to enable two-factor authentication.

First time users with permissions that require the use of two-factor authentication should proceed as follows when they access Dashboard:

1. If they need to add the phone number, they should contact the user with the Merchant admin role who will add the number to the required user account.
2. They should specify their username and password when signing in.
3. They should activate the two-factor authentication in the Google Authenticator app using the verification code sent by text (SMS).
4. Verify their identity in Dashboard with the one-time code generated by the Google Authenticator app.

Users in roles that do not require two-factor authentication can activate it and add a phone number in the user account if they have the appropriate permission.

To provide a phone number and activate two-factor authentication,

1. Open the user profile.

   Click the user name or the user account icon in the top right corner and select My profile in the dropdown menu.

2. Add the phone number:
   1. Switch to the editing mode by clicking on the User Profile panel.
   2. Enter and confirm the phone number.

      The phone number should be specified in international format (+{international country code}{phone number}) in the corresponding field. To confirm, enter the SMS verification code in the popup window.

   3. Save changes by clicking Save on the upper-right side of the User Profile panel.
3. Enable two-factor authentication.

   Turn on the Two-factor Authentication toggle switch located on the Security panel and follow the instructions provided in the interface.

4. Make sure all changes have been saved.

   The two-factor authentication switch should be on, and the phone number should be shown in the user profile.

1. Open the user profile by clicking on the user account icon and clicking My profile in the dropdown menu.
2. Add the phone number by clicking on the User Profile panel and save changes.
3. Enable two-factor authentication by turning on the Two-factor Authentication toggle switch located on the Security panel and follow the instructions provided in the interface.
4. Make sure all changes have been saved. The two-factor authentication switch should be on, and the phone number should be shown in the user profile.