When an agent registers itself to the Kron PAM, in Device Inventory it appears on Unassigned Devices. So, we need to assign this agent to a device group. The user who needs to log in to this device should be in the same Device Realm as this device. Otherwise, the user will be blocked by an agent. If needed the feature can be disabled. 

If the LDAP user account is not defined or imported from the Active directory to Kron PAM when the user wants to log in observe the below warning.

Learn how to assign agents to device groups in Single Connect and ensure that users in the same Device Realm can log in without any issues. Find out what happens if the LDAP user account is not defined or imported from Active Directory and how it affects 

Active Sessions

Realm Check for Windows Agent

Reputation Engine Integration

Kron Pam - Agent Reference Guide

3.7.0 Installation

Agent Dashboard

Application Catalog

Advanced Policy

Agent Administration

Multi-Factor Authentication

Local Administration Right

Run as Administrator Right

Session and Authentication Logs

Windows Agent

Linux Agent

Single Mode Installation for Linux

Hybrid Mode Installation for Linux

Agent Installation for macOS

Multitenancy Enabled Installation

Linux/Unix Agent

Creating Device Groups

Creating Device Realms

Adding a Device from the Device Inventory

Device Management

Linux Agent Profile

Agent Management

Creating White/Black Policy Keys

Creating Policy Groups

Creating Policy Realms

Policy Management

System Configurations

Authentication Logs

Session Logs

Command Logs

Agent Logs

Agent Reference Guide