Magic link (default)
The default and recommended authentication method. The customer enters their email address, Omneo sends a secure magic link to that address, and clicking the link logs them in without a password. Benefits:- No password for customers to forget
- Eliminates the risk of weak passwords or credential stuffing
- Reduces support enquiries about forgotten passwords
One-time login code (optional)
Instead of a link, the customer receives a 6-digit code by email or SMS and enters it on a verification screen. The code expires after 15 minutes, works once, and is invalidated after 5 wrong attempts. The customer can ask for a new code after a short wait (60 seconds by default). Choose a code over a magic link when:- Customers often read email on one device and log in on another, for example in store on a shared tablet or on a laptop with email on their phone.
- Corporate mail filters or link scanners open links before the customer does, which can consume a magic link.
- Your own website owns the login form and you want the customer to stay on your site rather than open Profile Portal.
Password authentication (optional)
If your implementation requires password-based login (e.g., for eCommerce account integration), customers can set a password on their Omneo profile. Passwords must be strong and are stored with bcrypt hashing. Omneo does not expose passwords via the API.Staff accounts (CX Manager)
CX Manager users require a password. Per Omneo’s security policy, passwords must be at least 32 characters. Use a password manager to generate and store secure passwords. Staff should never share CX Manager credentials. Each staff member should have their own account with the appropriate role.Resetting a customer’s access
If a customer reports they cannot access their account:- Verify their identity (ask for name, email, recent purchase details)
- Confirm their email address in CX Manager
- Ask them to request a new magic link or login code from their Profile Portal login page