High-Level Design

The architecture of Kron PAM is designed to offer both centralization and distribution flexibility. The core Kron PAM system handles session management, password vault operations, and overall policy enforcement from a central point. This includes all provisioning of hardware resources, coordination of session activities, and management of security logs. The Kron PAM high-level design is shown below.

In complex environments—such as those employing remote data centers or requiring multitenancy—a hierarchical deployment model is used. Connector modules are installed at remote sites to interface between the central system and local user endpoints. These connectors ensure that session requests and authentication processes are securely relayed to the central system.