🏤Back office
The back office provides centralised administration for all aspects of the payment gateway, including transaction monitoring, analytics, reporting, key management, and configuration. It enables oversight required by system administrators and authorised users.
To access your XGateway account, enter the company email address and password provided after completing the signup.
Dashboard: This section provides a summary of key activities, including statistics on transactions and customer engagement. It also features charts for a quick overview of the product.
Accounts: Tracking accounts for all supported currencies and networks, checking the status and balance, requesting settlement.
Transactions: Searching over the details of transactions processed by the system, exporting reconciliation reports.
Invoices: Merchants can see created, processed and cancelled invoices, search by customer or order IDs, and create new invoices if necessary.
Customers: Tracking the end users registered in the system. This page also displays VIP status of users, if available.
Settings: Setting up system-wide preferences such as time zone, Two Factor Authentication (2FA) flow, creating new users, etc.
Dashboard
This section provides a summary of key activities, including statistics on transactions and customer engagement. It also features charts for a quick overview of the product.
Accounts
Merchants can track accounts for all supported currencies and networks, check the status and balance, search for specific entries. Authorised merchants (admin access level) can request settlements for selected account.
Transactions
Merchants can search and get details over the transactions processed by the system, including failed and service transactions. Transactions list filtered by a number of fields can be exported (downloaded) as CSV for further processing. Authorised merchants can get callback details for confirmed transactions to verify it was registered properly in their system.
Invoices
Merchants can see created, processed and canceled invoices, search by customer or order IDs, and create new invoices if necessary.
Customers
This page provides an overview, details and search over the end users (customers) registered in the system. This page also displays VIP status of the user, if available.
Settings: Security
Page allows to set up system-wide preferences like time zone that is used to display the data, align the charts and generate reports. Security tab allows to set up Authenticator app, request to reset it.
Administrator role granted during the merchant on-boarding procedure is still managed via the customer support.
Settings: Users
Authorised merchants (with administrator role assigned) can also create new users with lesser privileges under the 'Users' tab and delete existing ones.
Two-Factor Authentication
Critical operations such as settlements are additionally protected by 2FA.
When a new merchant is integrated with the XGateway service, a new user is created with admin access to the merchant Back Office. To gain full control over the app this user should connect the Google Authenticator from App Store / Google Play:
Log in to the system
Navigate to the Settings/Security tab and find the Authenticator App widget
Set up the Google Authenticator app on your trusted device
Connect the Authenticator app using the widget
The Two-Factor Authentication is used to guard access to sensitive features, such as settlement request creation.
Green label ‘Enabled’ will indicate that Authenticator app is set properly for your account.
Security codes from the 2FA flow can be used to perform settlements over a certain account. Press the ‘Settle Up’ button on the Accounts page, it’ll initiate the modal window for 2FA. The 2FA token is the security code from Google Authenticator app.
The Administrator account, created by the XGateway team during on-boarding, can create and disable auxiliary merchant users - see the Settings/Users tab. There are two roles available: Admin and User roles. 2FA rules apply to them as well. Managing auxiliary roles can be done from merchant Back Office, while managing the Administrator account is only possible via the customer support.
Resetting 2FA
It is important to block access to your security codes if your 2FA device is compromised. Navigate to the Settings/Security tab, find the Authenticator App widget, and simply click ‘Reset’ button.
Status of your 2FA app will immediately change and access rights will be temporarily revoked. Ticket for the tech support will be created automatically, and access will be restored manually by the tech support team.
Resetting 2FA will not block read-only or non-sensitive features within the merchant Back Office.
Last updated