Integration · 7 min read
Two-Factor Authentication (2FA) integration guide
Two-Factor Authentication (2FA) connects supported security & fraud prevention workflows to LucidCP. Use this checklist to configure, link and validate the module before production traffic.
Procedure
Step-by-step
-
01
Prepare the provider account
Confirm that your Two-Factor Authentication (2FA) account is active and create the site key, secret or policy values supplied by the security provider. Use a test or sandbox environment when the provider offers one.
Step 1 of 7 · Confirm that the security integration is available in Modules & Gateways.Select the preview to inspect the full-resolution interface. -
02
Open the configuration area
Go to Admin → Site Settings → Security and select Two-Factor Authentication (2FA).
Step 2 of 7 · Open Site Settings → Security to reach the relevant protection controls.Select the preview to inspect the full-resolution interface. -
03
Enter and protect credentials
Copy values exactly, keep TLS verification enabled and never place production secrets in screenshots, tickets or browser-side code.
Step 3 of 7 · Enter the provider keys or policy values on the real LucidCP settings screen.Select the preview to inspect the full-resolution interface. -
04
Test the connection
Use LucidCP’s connection test where available. Resolve authentication, network or permission errors before linking the integration.
Step 4 of 7 · Review thresholds, challenge behaviour and connection status before saving.Select the preview to inspect the full-resolution interface. -
05
Connect the workflow
Associate login, registration or checkout risk checks. Save the configuration and re-open it to verify the selected mapping.
Step 5 of 7 · Enable the integration for the login, registration or order flow that needs it.Select the preview to inspect the full-resolution interface. -
06
Run acceptance checks
Perform allowed, challenged and rejected test scenarios. Confirm both the LucidCP record and the provider-side result.
Step 6 of 7 · Verify the protected customer flow with a controlled test account.Select the preview to inspect the full-resolution interface. -
07
Monitor after launch
Review activity logs, module queue, failed jobs and provider logs during the first production transactions.
Step 7 of 7 · Monitor security decisions and related activity after launch.Select the preview to inspect the full-resolution interface.
Checklist
Best practices
- Start with the smallest API permission set and expand only when a documented action requires it.
- Rotate provider credentials regularly and immediately after a suspected leak.
Reference
Module details
- Integration
- Two-Factor Authentication (2FA)
- Category
- Security & Fraud Prevention
- Availability
- Included with licence
- Directory page
- View integration profile
