End User Guide
Multi-Factor Authentication (MFA)
3min
Kron PAM can be leveraged for Multi-Factor Authentication. The definitions for Multi-Factor Authentication are configured and tested by the system admin during deployment.
Kron PAM’s MFA is available in online/offline modes with the mobile application and SMS verification.
- Download the Kron PAM Mobile Application from the App Store or Google Play Store.
- Log in to the Kron PAM Web GUI.
- Navigate to Administration > 2FA Provisioning. A QR code and activation code will be displayed. A new QR code and activation code can be generated by clicking the Generate New One button.
- Open the Kron PAM Mobile Application. Navigate to Offline Token > QR Code or Manual.
- Scan the QR code or enter the activation code manually on the mobile application.
- A Multi-Factor Authentication code will be generated for a predefined time interval on the mobile application.
![Multi-Factor Authentication (MFA) Activation Menu Multi-Factor Authentication (MFA) Activation Menu](https://images.archbee.com/g9cApVza9NIhSh0pjZYtA/ju-3NJUqWQSOoJ3m_AvWZ_image.png?format=webp)
Multi-Factor Authentication (MFA) Activation Menu
![Document image Document image](https://images.archbee.com/g9cApVza9NIhSh0pjZYtA/r1EnEnMdZlbjVx7trPXIi_image.png?format=webp)
![Document image Document image](https://images.archbee.com/g9cApVza9NIhSh0pjZYtA/9G-bLGS6Ala6o6KmAMO81_image.png?format=webp)
![3 3](https://images.archbee.com/g9cApVza9NIhSh0pjZYtA/9DsHTuGO4o7pap-swIEOj_image.png?format=webp)
Multi-Factor Authentication (MFA) Activation
When a new token is generated by Kron PAM, it will be sent to the user via SMS.
Assign Hardware Token
The hardware token provided to the users can be stored on Kron PAM.
- Navigate to 2FA Provisioning.
- Open the Assign Hardware Token tab.
- Enter the serial number of the device to which the hardware token is assigned.
- Click Assign.
![Assign Hardware Token Assign Hardware Token](https://images.archbee.com/g9cApVza9NIhSh0pjZYtA/g2RhmJDE-uIa-sBBHF5lz_image.png?format=webp)
Assign Hardware Token