The whateverMobileSMSTokenProvider randomly generates a 6-digit token after the user entered her correct password.
The token is then sent to the user via text message. The user's attribute sms is used as the recipient phone number. If this attribute has not been provided by the user data provider, the login attempt fails.
The text message is sent via WhateverMobile REST API. To use this API, a registered user account with sufficient balance is necessary. Membrane uses the specified user name and password to identify itself when connecting to the WhateverMobile SMS Gateway.