STAAH Max V2 - Two-Factor Authentication Rollout for MAX Users - WhatsApp (OTP)

STAAH Max V2 - Two-Factor Authentication Rollout for MAX Users - WhatsApp (OTP)

Two-Factor Authentication (2FA) adds an extra layer of security when signing into the Channel Manager Extranet. When enabled, it requires you to verify your identity using a randomly generated code sent to your registered email address.
 
We are pleased to announce that you’ll have the option to receive your One-Time Password (OTP) via WhatsApp by registering your mobile number. If you're already receiving OTPs via email, enabling WhatsApp notifications will allow you to receive the code through both channels for added convenience.
 
1.      How to setup:

For Master Login users, you can register your mobile number by following these steps:

  1. Log in to the Channel Manager
  2. Go to Settings (top right corner)
  3. Select Property Profile
  4. Navigate to the About Us page
  5. From there, you’ll be able to add your mobile number for WhatsApp OTP delivery.
 

For Sub Login users, you can register your mobile number by following these steps:

  1. Log in to the Channel Manager
  2. Go to Settings (top right corner)
  3. Select Permissions
  4. Navigate to the User Permission page
  5. From there, locate your user, click on edit and add your mobile number for WhatsApp OTP delivery.


Sub Login users without access to the User Permission page will need the master user to add the mobile number on their behalf.

2. Verification - After they have entered their number and saved, a popup will appear, that a verification notification has been sent to the registered number and to approve/verify number


Pending verification - An icon is visible next to the number which indicates the number is pending notification. Simply select to re-send notification


3.      Verify: Verification is simple, simply click 'Click on approve'' via WhatsApp
 


User is then diverted to page confirming number is verified

 

4. Enable/Disable Two-Factor Authentication: Property Listing > General Permissions

 

Other information to note:

1. Only Master login will see the WA number field in 'About us'. Sub users will see via Users
2. If a user needs to update their number, simply add new number in WA OTP field. OTP will continue to go to the registered number until verified. The pending verification icon will include below info


3. Affiliates - 2FA will apply
4. Affiliate Partner users (applicable to certain partners/regions) - no change. At present, 2FA not applicable
5. If email is working and WA number added, users will get both notifications (code is the same for both)
6. Option to disable 2FA applicable until deadline. Post deadline users will need to login with OTP.


IMPORTANT: 2FA will be mandatory and automatically activated starting Monday 12 May 2025.