Some configurations must be made to use MFA (Multi-Factor Authentication) when performing SQL Proxy for Oracle database devices

, press the options button for the user group where the SQLPROXY user is (in this example, it is ORACLE UG). Then, press the 

 page. Then, press the options button for the user used for the Oracle database (in this case SQLPROXY) and click the 

In this example, the QR code sent to the email address of the SQLPROXY user needs to be scanned using the Kron DAM mobile application.

Then, two parameters must be entered in the 

. By pressing the +Add button, add the following parameters:

The delimiter is your choice (in this example, # is used)

Multi-Factor Authentication → User Group Management

.
Locate the user group that contains the database user connecting through SQL Proxy (for example, 

This configuration defines which user groups are allowed to authenticate using MFA when connecting via SQL Proxy.

Next, proceed to an SQL Client (in this example, DBeaver is used). The Database Name, Port, and Password are the same as in the SQL Proxy steps. 

The username is different; here, as an example, enter (SQLPROXY) customer delimiter (#) and the 6-digit code displayed in the Kron DAM application in the Username field. The user should be able to connect successfully.

Connecting with the Kron DAM SQL Proxy with MFA

Connecting with the Kron DAM SQL Proxy

Configuring Kron DAM for Read-Only Access

Configuring SSMS for Read-Only Connections

Read-Only Mode on SQL Server

3.8.1 User/Device/Policy Definition

Dynamic Data Masking

Oracle RAC Configuration

Hive - Zookeeper Configuration

SQL Proxy

Session Logs

Query Logs

Active Sessions

Database Session Logs and Activity Views

Kron DAM with Azure SQL Database

Creating a Notification Target

Defining an Alarm Policy (cloned)

Defining an Alarm Policy

Database Alarm

Kron DAM Configuration for Connection of ML-Based Threat Analytics and Response Engine

ML Engine Endpoint Configuration

Threat Analytics Dashboard and Investigation

Kron DAM Configuration for Threat Threshold Incident Response

Anomaly Actions

Detected Risk Scores

Threat Analytics and Response Engine Configuration

User and Entity Behavior Analytics

SQL Proxy Configuration for SSO

Device Group Configuration in SSO

Configuring SSO Token Generation for Oracle and MSSQL Databases

Establish Connection to Database with SSO

Single Sign-On (SSO)

Creating a Vault Account

Vault Password Checkout

Associating a Vault Account with a Database Device

Add Vault Account

Connection Reservation and Approval

Query Approval and Management

Logging and Auditing

Connection Reservation & Command Approval

Denial-of-Service (DoS) Protection

Connection Rate Limit

Database Packet Rate

User Packet Rate

Buffer Overflow Attack Protection

DAM Object Explorer Usage

DAM Object Explorer

Creating Data Types 

Bulk Data Type Import

Data Discovery

Schedule Discovery

Data Regulatory Standards

Data Dictionary

Excluded Column Data Types

Applying Masking from Scheduled Discovery Results

Sensitive Data Discovery

Database Audit Report

Vulnerability Scanner Report

Reports

Permit Zone

Database Discovery

Adding Function Groups

Adding Function Realms

Menu Lists Management

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: SQL Proxy Application Properties

Reference Guide