Using MFA for SFTP Proxy

only users in enabled user groups can use mfa for sftp connections kron pam ’s built in mfa can be used as an enhanced security level for sftp proxy when you open an sftp client (winscp or filezilla), you are prompted to enter your kron pam credentials to connect to the sftp proxy for filezilla connections after logging in successfully with your credentials, you are prompted to enter an mfa token for winscp connections you enter kron pam credentials and mfa token on the same screen also, sftp clients have their own configurations for mfa usage for instance, the logon type must be selected as interactive to enable mfa for a user see the mfa usage on filezilla figure below