In 2024, the global average data breach cost rose to $4.88 million—a 10% increase over 2023 and the highest total ever. To enhance security and align with new carrier requirements, EasyPost and FedEx are updating the FedEx integration to initiate FedEx’s Multi-Factor Authentication (MFA) flow. This change improves data protection and enables incremental access to FedEx’s new REST API, which requires MFA.
Functionality
What is Multi-Factor Authentication?
Multi-factor authentication (MFA) is a security process requiring multiple forms of verification to access an account or system.
Benefits
- Increased security: Reduces the risk of unauthorized account access, even if passwords are compromised.
- Protection against phishing: Adds a layer of protection from attacks attempting to capture login credentials.
- Compliance requirements: Meets industry and organizational standards for securing sensitive data.
EasyPost FedEx Default Account
No action is required.
EasyPost FedEx International Connect Account
No action is required.
FedEx - Bring Your Own Account (BYOA) to EasyPost
Accounts integrated using BYOA must complete authentication using one of four FedEx PIN validation methods. This includes but is not limited to, customers with a FedEx Smart Post, now FedEx Ground Economy account.
Account Authentication
To update your FedEx accounts using the EasyPost Dashboard:
- Log in to EasyPost and navigate to Account Settings.
- Select the Carriers tab.
- Locate the FedEx account and select Update.
- Follow the FedEx authorization page prompts and choose a PIN validation type (Email, SMS, Call, or Invoice Number). Note: Access to email, phone number (for call or SMS), or an invoice number is required for authentication.
- Accept the End User License agreement.
- Enter FedEx account information.
- Enter the received PIN into the field associated with the selected PIN validation method (Email, SMS, Call, or Invoice) to complete verification.
- A success message will confirm that the carrier account was successfully updated.
Troubleshooting
Endpoint Issues
If issues arise with this endpoint, consider generating a new account using the EasyPost Dashboard. For further assistance, contact support@easypost.com.
Verifying Account Number and Contact Information
Account information such as email and phone number can be reviewed at fedex.com.
- Log into fedex.com using the credentials associated with the attempted EasyPost authorization.
- Navigate to Accounts > My profile.
- Select Review to confirm contact details.
- Confirm account information.
- Click Account Management to review the Account Number.
FAQs
Q: How long does it take for the PIN validation to be sent once I select an authentication method?
A: Most PINs are delivered within two minutes.
Q: How long is the PIN valid?
A: PINs remain valid for 10 minutes.
Q: Will API account generation still be available with FedEx MFA?
A: Yes.
Q: Will EasyPost Dashboard account generation still be available with FedEx MFA?
A: Yes.
Q: How will this change adding new FedEx accounts through the API?
A: A new endpoint is available to authenticate after you create accounts through the API.
Q: How will I authenticate existing accounts through the API?
A: Use the endpoint above to authenticate your existing FedEx accounts through the API.
Q: How will I authenticate existing accounts through the EasyPost dashboard?
A: Follow the documented steps above to authenticate your existing FedEx accounts.
Q: What address should I use to validate my accounts?
A: Use the address associated with your FedEx account. Please utilize the address associated with the credit card aligned to your FedEx account.
Q: What phone number should I use to validate my accounts?
A: Use the phone number associated with your FedEx account.
Q: How long do I have to complete the subsequent calls (pin/invoice validation) until the address verification token expires?
A: You will have 30 minutes.
Q: When can I attempt to update my account again after receiving the following error message:
"code": "UNPROCESSABLE_ENTITY",
"message": "PIN.MAXRETRY.EXCEEDED: Max retry exceeded for PIN Generation."A: You will need to wait 24 hours before attempting verification again.