SecTrail MFA Integration

to integrate kron pam with sectrail, users must use active directory or kron pam local accounts have mobile phone numbers in their accounts defined in active directory kron pam operates between active directory and sectrail kron pam integrates with sectrail via api, provided certain parameters are defined in kron pam api key (the api key is created by sectrail for each customer environment) token generate url (otp messaging url) token validation url (otp validation url) to adjust the sectrail integration settings navigate to administration > system config manager set the following parameters mfa provider=sectrail (default internal) mfa external provider sectrail apiuser=xxx (encrypted) mfa external provider sectrail apikey=xxx (encrypted) mfa external provider sectrail generatetokenurl= (for example https //1 2 3 4/externalwebservice ) mfa external provider sectrail otpvalidurl= (for example https //1 2 3 4/externalwebservice ) mfa external provider sectrail httpheaders= (default=“ content type\ application/json ” common header definition for both urls) (value can be parsed with enter for more than one header attribute)