Shufti - Settings

Security

ShuftiPro heavy rely on its security features which can be easily accessed and changed by following these easy steps:

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select the option of “Security” from the opened tab
4. You will see a window open up on the right side of the screen with the following options
   • 2FA Configuration
   • SAML Authentication
   • Password
   • P2 Data

You can select any of these options to perform the action you want.

2FA configuration:

Shufti back-office has a number of options when it comes to changing certain settings for the account depending on the requirements.

These functionalities are available for both Test and Production environments.

Follow the below-mentioned steps to enable 2-factor authentication:

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Click on the “Security” tab
4. Choose the option named “2FA Configuration”

This will further gives you two options:

• Email-based 2FA
• Google Authenticator

You can choose the option you prefer to enable or disable the 2FA configuration.

SAML Authentication:

ShuftiPro SAML enables Single Sign-On (SSO), where users only need to authenticate once to access multiple web applications.

To enable the SAML Authentication just follow these steps:

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select the option of “Security” from the opened tab
4. Choose the option of “SAML Authentication”.

This will direct you to the next page where you will have to submit the information required in “SSO URL”, “Identity Provider URL” and “Public Certificate” to enable the SAML authentication.

Change Back-Office Password:

Shufti back-office has a number of options when it comes to changing certain settings for the
account depending on the requirements.

These functionalities are available for both Test and Production environments.

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select the option of “Security” from the opened tab
4. Choose the option of “Password” to change it

A dialogue box opens with the fields of “Current Password”, “New Password” and “Confirm Password”

5. Enter the required information

Enter the required data in these fields and make sure “New Password” and “Confirm Password” fields are the same

6. Click on “Update Password”

After following the above-mentioned steps, the “New Password” is activated for the account and only this will be accepted for log-in.

P2 Data:

ShuftiPro offers the option to toggle between hiding or displaying P2 data, providing users with control over the visibility of sensitive information.

To use this feature follow these simple steps:

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select the option of “Security” from the opened tab
4. Click the option of “P2 Data” to change it.

Simply clicking on the P2 Data can change it from Show to Hide and vice versa.

Access API keys (Test and Production)

Shufti back-office has a number of options when it comes to changing settings for the account
depending on the requirements.

These functionalities are available for both Test and Production environments.

1. Log-in to Shufti back-office using back-office credentials (Email and Password),

On the top left corner make sure you have shifted to the desired environment (Test/Production). Make

sure you switch to the desired environment before proceeding.

2. Click on the “Settings” tab,
3. Select the option “API keys”,

A dialogue box opens displaying API keys. The user can simply copy the API keys for use.

4. Click on the button next to the API keys to copy them.

In case the user updates the Timezone, all verification data is stored with respect to the time frame
of the selected region.

These functionalities are available for both Test and Production environments.

1. Log-in to Shufti back-office using back-office credentials (Email and Password),
2. Click on the “Settings” tab,
3. Select the “Secondary Users” tab,

On the top right corner, in the dialogue box click on the option “Add Secondary Account”. Upon
clicking the “Add Secondary Account” button, a dialogue box will appear. This is where the user has
to enter information regarding secondary users.

1. Click on “Add Secondary Account”
2. Enter the required information and select the desired services for allocating permissions.

Follow the steps below for accessing details and creating secondary users:

1. Log-in to Shufti back-office using back-office credentials (Email and Password),
2. Click on the “Settings” tab,
3. Select the “Login History” tab
4. This tab shows the following details of associated account’s logs.

Name/Email
Browser
Device
IP address
Time

The user can search for secondary users using this tab. It shows the status, permissions and
actions against each secondary user.

Follow the steps below for accessing details and creating secondary users:

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select “Data Retention Policy”

This will provide you with an option to select different time periods for data deletion.

1. 2 years (by default)
2. Never delete verification data
3. Delete verifications data instantly
4. Custom Period: Delete data after  day(s)

Depending on the requirements, you may select the desired period.

The settings will be applicable to both the past and the future data. For example, if you change the period from 4 years to 2 years, then all the data will be deleted which is older than 2 years right now or as soon as it gets older than 2 years in the future.

The user can search for secondary users using this tab. It shows the status, permissions and
actions against each secondary user.

Follow the steps below for accessing details and creating secondary users:

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select “Callback and Redirect URLs”
4. Click on “Add Domain”
5. Select the type as Callback OR Redirect
6. Enter the URL in domain section
7. Click on “Submit”

This will apply the restriction for these URLs. The URLs specified within the back-office can be used within the API request.

1. Log-in to Shufti back-office using back-office credentials (Email and Password)
2. Click on the “Settings” tab
3. Select “Document Originality”

Select the options you want to enable for acceptance. This configuration will be applicable to all verifications being performed from the account.

4.  Click on “Update”
Please make sure that the API based configuration for this feature is not in conflict with the configuration set through the back-office.