---
title: Connecting with the Kron DAM SQL Proxy with MFA
slug: kron-dam-reference-guide-3-8-1/connecting-with-the-kron-dam-sql-proxy-with-mfa
docTags: 
createdAt: 2024-07-18T14:26:47.194Z
---

Some configurations must be made to use MFA (Multi-Factor Authentication) when performing SQL Proxy for Oracle database devices**. **Please check [Email Server Configuration](docId\:ubHUuEI1t13ZE_C6pQab5)**  **before configuring MFA in SQL Proxy.

In the **Multifactor Authentication** and go to **User Group Management**, press the options button for the user group where the SQLPROXY user is (in this example, it is ORACLE UG). Then, press the **Enable OTP** option on the screen that appears.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/LE3ogjY4uJdkCgH9f5oox_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/lQPn-srnIVr6aje_gp8Uo_image.png "User Group Management")

After this, navigate to the **Multifactor Authentication page** and go to the **User Token Management** page. Then, press the options button for the user used for the Oracle database (in this case SQLPROXY) and click the **Send Manual Registration Key** button.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/QO4mg6EIPP5oTpgKfoFZH_image.png" size="100" width="949" height="475" position="center" caption="User Token Management" darkWidth="949" darkHeight="475" showCaption="false"}

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/_pZm8Y5s3nASyvAEHZrEu_image.png "User Token Management")

In this example, the QR code sent to the email address of the SQLPROXY user needs to be scanned using the Kron DAM mobile application.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/AXC7btL-9NYItVFrqVv-J_image.png" size="34" width="368" height="559" position="center" caption="The second one is MFA 6-digit code" darkWidth="368" darkHeight="559" showCaption="true"}

Then, two parameters must be entered in the *System Configuration Manager*. By pressing the +Add button, add the following parameters:

- **dam.ddm.mfa.enabled **with a value of** true**
- **dam.ddm.mfa.delimiter **with a value of** #**
  - The delimiter is your choice (in this example, # is used)

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Woo9PkWx4AY10p4cvmHM3_.blob "System Configuration Manager")

Navigate to **Multi-Factor Authentication → User Group Management**.
Locate the user group that contains the database user connecting through SQL Proxy (for example, *ORACLE UG*).
Click the **Options** button for the user group and select **Enable OTP**.

This configuration defines which user groups are allowed to authenticate using MFA when connecting via SQL Proxy.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/yPwDhqqWWtWUtQoXVtMmn_image.png "Multi-Factor Authentication page")

Next, proceed to an SQL Client (in this example, DBeaver is used). The Database Name, Port, and Password are the same as in the SQL Proxy steps. 

The username is different; here, as an example, enter (SQLPROXY) customer delimiter (#) and the 6-digit code displayed in the Kron DAM application in the Username field. The user should be able to connect successfully.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/y6DXXZoTooR_LX3mH2V2V_image.png "MFA 6 digit and Delimiter with Database Username on SQL Proxy")