Skip to content

Authentication settings: social login and one-time passwords

Where: Settings > General Settings > Authentication
Who can use it: Sidebar permission: settings.view or manage settings. No plan or add-on is needed.
Open this page in SureTill

The Authentication tab with the Social Login switch and provider cards, OTP Login and Customer OTP Before Order sections.

The Authentication tab is titled Authentication Methods. It has three sections: Social Login, OTP Login and Customer OTP Before Order. The values are stored when you press Commit Changes.

  1. Create an OAuth client in the Google Cloud console (console.cloud.google.com) and copy its Client ID and Client Secret.
  2. Open Settings > General Settings and click the Authentication tab.
  3. Turn on Social Login, then turn on the Google switch.
  4. Paste the Client ID and the Client Secret.
  5. Click Commit Changes.

Facebook (developers.facebook.com) and Apple (developer.apple.com) work the same way with their own fields.

Step by step: let staff sign in with a one-time password

Section titled “Step by step: let staff sign in with a one-time password”
  1. Turn on OTP Login.
  2. Choose the Delivery Method, the OTP Expiry and the OTP Length.
  3. If you use SMS, set up an SMS gateway in Integrations > SMS Gateways first.
  4. Click Commit Changes.

Step by step: verify customers before an online order

Section titled “Step by step: verify customers before an online order”
  1. Turn on Customer OTP Before Order.
  2. Choose the Verification Method: SMS, Email or SMS + Email.
  3. Click Commit Changes.
Setting What it does
Social Login Master switch. The provider cards appear only when it is on. Default: off.
Google Switch. When on, shows the fields Client ID and Client Secret (password field). Default: off.
Facebook Switch. When on, shows App ID and App Secret (password field). Default: off.
Apple Switch. When on, shows Service ID and Client Secret (JWT), a password field. Default: off.
OTP Login Switch. Allows staff to sign in with a one-time password sent by email or SMS. The settings below appear only when it is on. Default: off.
Delivery Method Email Only, SMS Only or Email + SMS. Default: Email Only.
OTP Expiry (minutes) A number from 1 to 30. Default: 5.
OTP Length 4, 6 or 8 digits. Default: 6 digits.
Customer OTP Before Order Switch. Asks customers to verify their phone or email before they place an online order, to reduce fake orders. Default: off.
Verification Method SMS, Email or SMS + Email. Default: SMS.