---
title: Two-Factor Authorization
slug: end-user-guide-3-5-0-legacy-ui/two-factor-authorization
description: Learn how Kron PAM's Two-Factor Authorization using Geo-Fencing mode enhances security by ensuring users can only access the system from a specific location. This document provides detailed instructions on configuring and testing the Two-Factor Authentica
docTags: 
createdAt: 2022-08-12T13:05:35.000Z
---

Kron PAM can be used for Two-Factor Authorization. System admin configures and tests Two-Factor Authentication definitions for location confirmation during deployment.

To use these features, you should log in to your Kron PAM. Otherwise, it will redirect you to the login page before it lets you generate any token or confirm any request.

Kron PAM Two Factor Authorization is available in Geo-Fencing mode with the mobile application.

# Geo-Fencing

Kron PAM allows you to add restrictions to black key commands, such as location confirmation. To confirm a user’s location, you use Geo-Fencing. This allows users to be authorized only when they are located in the pre-selected location. In case a user needs authorization through location conformation, follow the steps below: 

1. After the initial setup, select **Geo-Fencing,** and you will see the token notification.
2. Tap on the notification and then on **OK** to approve the command.

:::hint{type="info"}


- If you have the authorization to execute the command from your location, the **Waiting confirmation. Do you want to try again now? (y/n) **notification is displayed on your CLI session.
- If you don’t have the authorization to execute the command from your location, a simple error is displayed on the CLI session.
:::

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2hKi1qk5TDvjEM3fUW3pY_image.png" size="42" width="396" height="582" position="center" caption="Geo-fencing" showCaption="true"}