The Kron PAM Session Manager is a core component designed to secure, monitor, and control privileged access across your IT environment. It enables organizations to enforce least privilege policies by logging user activity, monitoring live sessions, and applying granular access control rules in real time.

Session Manager operates primarily in an agentless proxy mode, which allows it to intercept and manage privileged sessions without requiring any software to be installed on the target systems. This approach simplifies deployment and maintenance while ensuring robust oversight of remote and internal access to critical systems.

For use cases involving endpoint-level control and policy enforcement, Kron PAM also supports an Endpoint Privilege Management (EPM) agent. The EPM agent provides deeper integration with endpoints, offering advanced capabilities such as application control, privilege elevation, and local command restrictions. For more information on agent-based functionality, please refer to the Agent Reference Guide.

Improve session management for low-privileged accounts with the Kron PAM Session Manager. Monitor, log, and enforce policies seamlessly with this powerful tool. Enhance security and streamline processes with ease.

Approval Workflow SMS Settings

Session Manager

Manual Log In Connections

Global Username/Password Connection

Session User (LDAP/AD User) Connection

Multiple User Selection in SSH Proxy

Generate SSH Key with SSH-Keygen Tool

Uploading Public Component of Key Pair to Target SSH Device

Adding Private Key as a Global SSH Key

Generate SSH Key with Putty

Global SSH Key Connections

SSH Passphrase Connections

Assigning Kron PAM Credentials to Target System Accounts

Managerial Approval for SSH Proxy Connections

SSH Proxy Connections

SSH Sessions Duration-Based Limitation Settings

SSH Proxy Connection Interfaces

SSH Proxy Encryption and Key Exchange Algorithms

Reason Field in SSH Connections

Sensitive Session Log Control in SSH Proxy

Session Log Control in SSH Proxy

Kron SSH (Kssh)

SSH Session Settings 

SSH Proxy

[NEWUI] PAM BU Kron PAM- Reference Guide

Kron PAM Web GUI

License Manager

Email Server Configuration

Language Settings

Menu Lists Management

System Configuration Parameters

Enabling Push Notifications for Mobile Application

Enabling HTTPS on the Kron PAM Web GUI

802.1x Authentication

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Kron PAM GUI

Multitenancy

Kron PAM Administration

Manual User Creation

Kron PAM Users Search

User Definition Option Menu

Editing Kron PAM Users

User Properties Set up 

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Definition

Policy Groups Definition

Policy Realm Definition

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (SAPM)

Approval Workflow

Approval Management

RDP Proxy

HTTP Proxy

Advanced Authorization Methods

User and Entity Behavior Analytics

Password Vault

Application Token

Secrets

Sending the MFA QR Code to Users

Creating a Connection Between Kron PAM and the Kron PAM Mobile Application

Enabling Multi-Factor Authentication (MFA)

Using MFA to Log in to the Kron PAM Web GUI

Using MFA to Log in to the Kron PAM Desktop Client

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP/HTTPS Proxy

Using MFA for SFTP Proxy

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Mobile Application

Offline Mode Settings

Using SMS for MFA

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke to User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for TACACS+ Devices

MSCHAPv2 RADIUS Configuration

TACACS+ Management Configuration Page 

TACACS+ Access Manager

SQL Proxy

Sensitive Data Discovery

SFTP Proxy

Data Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from the Google Cloud Platform

Cloud PAM

Cloud Infrastructure Entitlement Management (CIEM)

Kron PAM Logs

Active Sessions and Dual Control

System Log Viewer

SIEM Configuration

Reports

Threat Analytics and Response Dashboard

Tamper Proof Logging

Kron PAM Reporting and Logging Functions

Monitoring

Alarms

Alarm Configuration

Monitoring & Alarms

Watchdog Configuration 

Watchdog Mechanism

High Availability

Failover Scenario

Visualizing Reports and User Rights

Creating Charts for Reporting

Creating Dashboards

Dynamic Reports

Reporting

Logical Architecture

Tenant Management Requirements 

Tenant Management Interface

Administration by Tenant Admins

System Config Manager Parameters

DevOps Integration

Kron PAM Remote Access Portal

Secure Remote Access Connector

Remote Access Configuration in Kron PAM

Kron PAM Remote Access

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: Job Descriptions for Job Scheduler

Reference Guide