Reference Guide
Multi-Factor Authentication

MFA Configurations for VPN Services

1min

Kron PAM MFA can be used as a 3rd party MFA server for all applications, devices, VPNs, etc. that support RADIUS authentication. Two options are available for MFA server support:

  1. Both the first authentication (with username and password) and the secondary authentication (with OTP) are provided via Kron PAM. To activate this feature: • Define the VPN device according to the TACACS Access Manager configuration. • Enable MFA on the User Group (Navigate to Administration > MFA> User Group Management)
  2. Only a second authentication with OTP is provided via Kron PAM. To activate this feature: • Define the VPN device and the Device Group Realm with the related users in Kron PAM (See User Group Creation and Device Management sections.) • Define the element type property in the VPN Device element type section:
  3. Navigate to Device > Element Type.
  4. Click the Options button of the desired element type and select Show Properties.
  5. Set the radius.auth.only.token.enabled property value as true.
Only Second Authentication with OTP

PREVIOUS
Using Keystroke to User Behavior Analytics
NEXT
External MFA Providers
Docs powered by Archbee