---
title: Kron PAM Remote Privileged Access Management
slug: kronpam-end-user-guide-3-9-0/kron-pam-remote-privileged-access-management
description: The Kron PAM Remote Access Portal is a secure web portal that enables vendors to remotely access and manage devices within an internal network. Vendors receive a personalized email invitation containing a unique URL and passcode, granting them access to t
docTags: 
createdAt: 2023-10-18T08:15:52.152Z
---

The **Kron PAM Remote Privileged Access Management** (RPAM) contains a web portal that users can access remotely (SSH, RDP, container-based HTTP/HTTPS sessions) and manage devices in the internal network.

:::hint{type="info"}
The available session types depend on the realm and portal functions assigned to your user account by the administrator.
:::

The Kron PAM Remote Privileged Access Management consists of the **RPAM Portal** and the **RPAM Connector.**

The **RPAM Portal** is a web-based access layer designed to serve privileged users, such as third-party contractors or remote employees, who require controlled access to internal corporate systems.The **RPAM Connector** acts as a controlled intermediary between the externally accessible **RPAM Portal** and the internal Kron PAM infrastructure.

When the administrator sends a RPAM invitation to selected users, those users receive an email with a URL and a passcode. When the access time has started, users can click on the URL, enter the passcode first, then enter the Kron PAM user password and start working.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/TIy_D-pDbP0q4kEref0aK_image.png "Mail Example for RPAM Invitation")

- Click the link in the mail (<u>Remote Privileged Access Management</u>).
- Enter the passcode.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/xYcyN3Wr1qZEEsFNdTHDe_image.png "RPAM Portal’s Passcode Page")

- Then enter the user's Kron PAM password.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/rHwMOQQaUe3PPlq5LDg9J_image.png "RPAM Portal’s Login Page")

:::hint{type="info"}
If you enter the wrong password, the portal displays the following message: "Wrong password. Please enter the correct Kron PAM's password."
:::

The SAML option is available only if your administrator has enabled SAML integration under **Integrations** > **SAML Configuration**.

:::hint{type="info"}
To log in with SAML instead, on a non multi-tenant Kron PAM server:

1. Click **Login with Different Methods**.
2. Click "**Login with Azure Entra**" button to continue with SAML-based authentication.
:::

:::hint{type="info"}
To log in with SAML instead, on a multi-tenant Kron PAM server:

1. Click **Login with Different Methods**.
2. Enter your tenant name and click **Get Available Methods**. To return to the login page instead, click **Cancel**.
3. Click "**Login with Azure Entra**" button to continue with SAML-based authentication.
:::



- Users can access to internal network by double-clicking.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/rHjblsyp-5cdIXyqaTPOj_image.png "Device List")

- Device connection will initiate in a new window.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/XnHmhfn40i88pptdCiNcy_image.png "SSH to the internal network")

- If the connection time has not started, you can not access the remote server.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/GDDbX9EGlBDI9Xp5Muz_m_image.png "Waiting Connection Time")

- If the OTP parameter (rap.client.otp.enabled) is set to **true**, after entering the Kron PAM user’s password, the user must enter the OTP value, which is accessible on the Kron PAM Mobile Client Application or email.&#x20;

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/1roJhO-UliT8FBmdvcGAx_image.png "OTP Screen on the RPAM Portal")