Configuration of SMS notifications in WEBCON BPS

Applies to version: 2025 R1 and above, author: Krystyna Gawryał

Related documentation

A detailed description of the functionalities mentioned herein and their configuration can be found in the following sections of the WEBCON BPS Help:

• Security | WEBCON BPS
• SMS notifications | WEBCON BPS

Introduction

SMS notifications in WEBCON BPS are one of the methods for additional authentication of user operations, e.g. when authorizing path transition or access to confidential form data. This article provides instructions on how to configure an SMS gateway that allows sending short text messages with authorization codes from the system.

Communication Services

The first step to enable sending SMS notifications from WEBCON BPS is to create and configure a Communication Services resource in Microsoft Azure. To do this, follow these steps: Quickstart - Create and manage resources in Azure Communication Services - An Azure Communication Services quickstart | Microsoft Learn.
Open the page of the newly created Communication Services resource. Using the navigation menu on the left, go to Tools → Keys and copy the values of the Endpoint and Key fields (Primary key section).

Designer Studio

Open WEBCON BPS Designer Studio and select Global Parameters → Security in the System settings section. The option Additional authorization method is available on the right side of the window. Check the box next to the SMS option and open the configuration window for this authorization method by clicking on the icon with three dots.
 

In the SMS gateway configuration window, in the Endpoint and Access key fields, paste the endpoint and key you copied from the Communication Services resource. Also fill in the Sender field – the entered name will be displayed on the phone as the name of the sender of SMS messages sent from the system.
 

Click Save and close the window.

Recipient's phone number

SMS messages are sent from the system to the mobile phone number specified in the configuration of the profile of the user designated to receive such messages. By default, the number is taken from AD or Microsoft Entra ID when synchronizing users and groups.
 

The phone number can also be manually added or edited directly in the user profile settings, but this operation requires additional authorization. In this case, the authorization code is sent in the SMS notification, so you should perform the configurations described in the previous sections before changing it.

Note: the mobile phone number must be in the correct format. More information is available here: SMS concepts in Azure Communication Services - An Azure Communication Services concept document | Microsoft Learn.

SMS vs. operation authorization

If additional authorization is enabled in the process configuration (path transition authorization, confidential form data access authorization) and the specified authorization method is SMS, according to the above configurations, a one-time authorization code will be sent to the phone number of the user performing the operation for which additional authorization is required.
 

You can read more about the authorization of operations in WEBCON BPS in the following articles:

• Path transition authorization
• Access authorization to form fields
   

It should be noted that, apart from changing the phone number in the user profile, these are the only use cases for SMS notifications in WEBCON BPS and no other operation sends this type of message from the system.