Reference Guide
Multi-Factor Authentication

Enabling Multi-Factor Authentication (MFA)

2min

There are different MFA use cases:

  1. Using MFA to log in to the Kron PAM Web GUI
  2. Using MFA to log in to the Kron PAM Desktop Client
  3. Using MFA for SSH/RDP Connections
  4. Using MFA for SSH Proxy
  5. Using MFA for HTTP/HTTPS Proxy
  6. Using MFA for SFTP Proxy
  7. Using MFA for TACACS+ and Radius
  8. Using MFA for Mobile Application

For every use case, MFA needs to be enabled at a user group level. To use MFA with the Kron PAM Web GUI, at least one of the user groups needs to be enabled.

The second application of MFA is to the activate MFA feature on a user group, to establish SSH or RDP connections to a device by using the MFA feature. To enable MFA for a user group:

  1. Navigate to Administration > MFA.
  2. Open the User Group Management tab.
  3. Click the Options button and select the Enable OTP button for the desired user group (the whole row will turn green when MFA is enabled)
Enabling MFA for a User Group

Enabling MFA for a User Group