Reference Guide
Multi-Factor Authentication
Creating a Connection Between Kron PAM and the Kron PAM Mobile Application
The Kron PAM mobile application is available on the Android and Apple app stores. Users need to download it first and follow these steps to synchronize Kron PAM and the mobile app:
- Open the Kron PAM mobile application.
- Select Offline Token > Scan QR Code.
- Use the Kron PAM mobile app to scan the QR code included in the email sent by an admin.
- By scanning the QR code, the MFA key matches up the Kron PAM mobile app and the Kron PAM Web GUI.
OTP can also be used in MFA Clients such as Google Authenticator or Microsoft Authenticator, apart from the Kron PAM mobile application. By default, only the Kron PAM mobile app is allowed, but can be activated in other MFA client applications by following the steps below.
To enable Multi-Factor Authentication (MFA) for MFA Client Applications:
- Navigate to Administration > System Configuration Manager.
- Set the required parameters: iga.2fa.use.external.mobile.app=true (Default value is false)
Creating a Connection between Kron PAM and its mobile app


Creating a Connection between Kron PAM and its mobile app

When the parameter is set to true, MFA Client applications will be able to read barcodes. The generated OTP value will be synchronized with the Kron PAM mobile application.