Two-Factor Authorization
Kron PAM can be used for Two-Factor Authorization, which includes location confirmation-based authorization (based on Geo Fencing).
The system administrator can add location confirmation-based authorization to the black policy key on the Kron PAM server. In case the user runs the command that has been defined in the black policy key and if the black policy key has been configured with the location confirmation, the user still can run the command if his/her location matches those in the definition of the black key.
To confirm the user’s location, the user can use the Geo Fencing tab on the Kron PAM Mobile Client Application. This allows users to be authorized only when they are in the pre-selected location.
In case the user needs authorization through location confirmation, follow the steps below:
- Select Geo Fencing on the Kron PAM Mobile Client Application, and the user can see the token notification related to location. Click the Approve button.
- After clicking the Approve button, Kron PAM Mobile Client Application asks the user to approve his/her location by clicking the Approve button.
- Click the Return to Geo-Fencing button to return back to the Geo Fencing tab.
Conversely, the user can cancel Geo Fencing request by following the steps below:
1. Select Geo Fencing on the Kron PAM Mobile Client Application, and the user can see the token notification related to location. Click the Reject button.
2. After clicking the Reject button, the new modal is opened and asks the user to reject the request by clicking the Reject button.
3. Click the Return to Geo-Fencing button to return back to the Geo Fencing tab.
