Dashboard

Overview of your WAuth system

Date range:

📊 Metrics Guide

Total Authentications
Number of OTP codes generated

Total Verifications
OTP codes successfully validated

Auth Success Rate
Verifications ÷ Authentications × 100

Verify Success Rate
Successful ÷ Total Attempts × 100

No-Action Rate
Unused OTPs ÷ Total Generated × 100

Activity Overview

Flagged Organizations

Organization	Contact	Country	VAT Status	IP Mismatch	Payment Mismatch	Review Status	Review

Communications

Date range:

ID	Date	Type	Template	Recipients	Subject	Tenant	Status	Preview

All Organizations

Organization ID	Name	Email	Membership	Credits	Status	Actions

All Apps

App / Client ID	Name	Organization	Registration	API Key	Status	Actions

App

Channel

Type

Status

Loading...

Filter Users

Organization:

App:

Admin Users

Username	Email	Role	Status	Created	Actions

Pending User Approvals

Email	Phone	Method	App	Registered	Expires	Actions

Standard Users

User ID	Email	Phone	Signup Method	App	Organization	Created	Active Sessions	Actions

All Super Admin Users

Username	Email	Role	Status	Created	Actions

Date & Account Filter

From:

To:

📋 Activity Log Guide

🔐 OTP Generation
OTP code created and sent

✅ OTP Verification
User validates OTP code

📱 WhatsApp
Mobile delivery method

📧 Email
Email delivery method

✓ Successful
Operation completed

⏸️ No-Action
OTP generated, never used

✗ Failed
Error or invalid input

Usage Metrics

Usage Activity Log

Complete history of authentication and verification requests for billing and monitoring

When	Organization	App ID	Action	Channel	Result	Requests

Detailed Activity Logs

Individual request/response logs for system auditing and debugging

Timestamp	Organization	App ID	Event	Method	Endpoint	Status	IP Address	User	Actions

Widget Test

OIDC Test

Loading comprehensive integration guide...

Username

Email

Role

Change Password

Leave new password blank to keep your current password.

Current Password

New Password

Confirm New Password

Password Complexity

Complexity: 0/100 (minimum 85 required to save a new password)

Loading...

Passkeys

Sign in quickly and securely with a passkey (Face ID, Touch ID, or Windows Hello).

Loading...

Company Registration Number Official company registration number

VAT Number VAT registration number (will appear on invoices)

Physical Address Physical business address

Postal Address Postal address (if different from physical)

Phone Number Business phone number

Website Company website URL

Activity Logs Retention (days) Days to keep activity logs. Leave empty for system default (90). Use 0 to retain indefinitely.

Subscription Levels

ID	Name	Description	Price	Credits	Status	Actions

Audit Entries

Date	Admin	Action	Entity Type	Entity ID	Details

Date range:

Reconciliation

Select date range and click Apply to load reconciliation.

Audit Log

Date	Action	Entity	Payment ID	User	Details

Search:

Date range:

All Orders

Order ID	Payment ID	Account	Item	Amount	Status	Date	Invoice

Credit Tiers

ID	Name	Credits	Price	Cost Per Credit	Status	Actions

Admin Users

Username	Email	Role	Status	Created	Actions

Pending User Approvals

Email	Phone	Method	App	Registered	Expires	Actions

Standard Users

App	Email	Phone	Signup Method	Created	Actions

Credit Transactions

Date	Amount	Description	Balance After	Created By

Operation Cost Rules

Operation	Cost	Description	Status	Actions

Credit Transaction History

Date	Amount	Description	Balance After	Created By

Available Credit Packages

🗑️ Hard Delete All Data

This action will permanently delete:

All organizations and their data
All apps and API keys
All admin users (except super admins)
All standard users
All OIDC models and sessions
All activity logs and metrics
All payments and orders
All credit transactions
All communication history

The following will be preserved:

Super admin accounts
Subscription levels
Credit tiers
Credit cost configurations

⚠️ WARNING

This action is IRREVERSIBLE. All customer data will be permanently lost. Only use this for development/testing environments.

Title	URL Slug	Status	Version	Updated	Actions

Edit Policy

Title

URL Slug

Content

Visibility

Draft: Only super administrators can view. Use for work-in-progress policies.
Published (public): Anyone can view and download. Suitable for public-facing policies.
Published (secured): Only logged-in admins (super admin or organization admin) can view. Good for internal compliance docs.
Private: Only super administrators can view. Use for sensitive internal drafts.

Version History

Click a version to restore it.

VAT Rate (%) VAT percentage applied to invoices (e.g., 15 for 15%)

VAT Number Company VAT registration number

Company Name Company name as it appears on invoices

Company Physical Address Physical address displayed on invoices for billing purposes

Service Title Service description displayed on invoices (e.g., "OAuth 2.0 Authentication Services")

Logo URL URL to company logo for invoices

Thank You Message Message displayed on invoices

Invoice Footer Footer text displayed at bottom of invoices

App Name

Description

App Logo Upload square image (max 2MB). JPEG, PNG, GIF, WebP

Copyright Text

Terms of Service URL *

Privacy Policy URL *

Callback URLs define where users are redirected after authentication. Success endpoints handle successful logins; failure endpoints handle errors. Post-logout URIs are for OIDC logout flows.

Success Callback Endpoints *

Failure Callback Endpoint *

Post Logout Redirect URIs URLs for redirect after logout. Leave empty for localhost only.

Skip User Validation for OTP APIs When enabled, any email/phone can request OTP via API. When disabled, only pre-registered users can.

Control who can register for your app. Open allows anyone; Domain Whitelist restricts to specific email domains; Closed hides self-service sign-up in the login UI and blocks the public /register form, but you can still provision users with your app API key (POST /api/users).

Registration Mode

Allowed Email Domains Comma-separated list

Allowed Phone Prefixes Comma-separated country codes. Leave empty for all.

Require Admin Approval New registrations pending until approved

Webhooks send real-time events to your server (OTP generation, verification, OIDC auth). Configure HTTPS URLs to receive POST payloads when these events occur.

Authentication Webhook URL Called when OTP is generated

Verification Webhook URL Called when OTP is verified

OIDC Webhook URL Called on OIDC authentication events

Communication consent webhook URL Optional. Your server receives notifications when someone opts in or out, or when a WhatsApp messaging window opens or closes. HTTPS only.

Communication webhook signing secret Optional shared password so your server can verify events really came from WAuth. Leave blank to keep the current secret.

Control when and how you ask users for permission to contact them after login - for example promotions (marketing) or account alerts (service). Marketing consent is always optional; users can still sign in if they decline.

How asking for consent works

During login - After the user verifies their identity but before they return to your app, WAuth can show a preferences screen (tick boxes for WhatsApp, email, SMS, call). Configure the wording below.
After WhatsApp login (optional) - If you connect your WhatsApp Business account on the WhatsApp Business tab, WAuth can send a short chat message asking them to subscribe or skip. Only runs when needed and when WhatsApp login was used.

When should we ask? Login screen first, then WhatsApp if still needed - recommended. Ask on the sign-in screen; if WhatsApp preferences were not captured there, follow up in WhatsApp after login.
WhatsApp chat only - do not show WhatsApp options on the login screen; ask in WhatsApp after the user signs in with WhatsApp.
Login screen only - never send a consent message in WhatsApp.

Which channels can users choose? Tick the combinations you want to offer. Marketing = promotions and news. Service = account, security, and transactional alerts.

Channel	Marketing	Service
WhatsApp
Email
SMS
Call

Login screen wording

Text shown on the preferences screen during login (step 1 above). Publish when you change copy - WAuth keeps a record of which version each user saw. Version: not loaded

Screen title Main heading at the top of the preferences screen.

Marketing section heading Label above marketing channel tick boxes.

Service section heading Label above service / alert channel tick boxes.

Connect your organisation's WhatsApp Business account so login and consent messages can use your business number instead of WAuth's shared verification number.

What works without connecting?

WhatsApp login still works using WAuth's platform number for OTP verification.
Consent questions on the login screen (Communication Consent tab) still work.

What connecting unlocks

OTP links open a chat with your WhatsApp number.
Follow-up consent messages in WhatsApp after login (see checkbox below).
Users can reply STOP on your number to opt out of marketing.
Your systems can be notified when someone opens a WhatsApp conversation window.

Connection status

Not configured

Your business details

Business display name How your business name appears in admin - for your reference only.

WhatsApp business number * The public WhatsApp number customers will message (include country code, e.g. +27).

Meta (Facebook) connection details

Find these in Meta Business Suite -> WhatsApp -> API setup, or ask whoever manages your Meta app.

Meta phone number ID * Numeric ID Meta assigns to your WhatsApp number - not the phone number itself.

WABA ID WhatsApp Business Account ID - optional, useful for support with Meta.

Webhook verify token * Pick any secret phrase. Enter the same phrase when Meta asks for a verify token for the inbound webhook URL below.

Meta app secret * From Meta for Developers -> your app -> Settings -> Basic. Used to confirm inbound messages are genuine.

Access token Lets WAuth send the post-login consent message from your number. Leave blank on save to keep the existing token.

After-login WhatsApp consent

Send a consent message in WhatsApp after login When enabled, users who sign in with WhatsApp may receive a short message on your business number asking them to subscribe or skip - but only if they have not already chosen on the login screen, and only while your WhatsApp account is connected above. Click Save App (bottom of page) to store this setting.

Inbound webhook URL Copy this URL into Meta -> WhatsApp -> Configuration -> Webhook. WAuth uses it to receive OTP replies, STOP, and subscribe/not-now responses.

Configuration Overview

Snapshot of the app's current persisted configuration.

Status	Load an app to view its current configuration snapshot.

Dashboard

📊 Metrics Guide

Activity Overview

Compliance Review

Flagged Organizations

Communication Audit

Communications

Email Preview

Compliance Review

Organization Details

Supporting Documents

Organizations

All Organizations

Apps

All Apps

Communication Consent

Organizations with consent records

Organization Users

Filter Users

Admin Users

Pending User Approvals

Standard Users

Super Admin Users

All Super Admin Users

Metrics

Date & Account Filter

📋 Activity Log Guide

Usage Metrics

Usage Activity Log

Detailed Activity Logs

Test Integration

Widget Test

OIDC Test

How To Guide

Profile

Change Password

Subscription Levels

Subscription Levels

Admin Audit Log

Audit Entries

Audit Entry Details

Billing Audit Entry

Billing Audit

Reconciliation

Audit Log

Orders

All Orders

Credit Tiers

Credit Tiers

Account Users

Admin Users

Pending User Approvals

Standard Users

Credit History

Credit Transactions

Credit Costs

Operation Cost Rules

Credit Usage Report

Credit Transaction History

Buy Credits

Pending payments (local testing)

Available Credit Packages

⚠️ Danger Zone

🗑️ Hard Delete All Data

Policies & Procedures

Edit Policy

Version History

Settings

Edit App

Add Organization

Add App

Add Account

Add User

Add Account User

Communication preferences

Add Standard User

Edit PMPro User

Add Subscription Level

Add Credit Tier

Add/Subtract Credits