Enabling Multi-Factor Authentication (MFA)

there are different mfa use cases using mfa to log in to the kron pam web gui using mfa to log in to the kron pam desktop client using mfa for ssh/rdp connections using mfa for ssh proxy using mfa for http/https proxy using mfa for sftp proxy using mfa for tacacs+ and radius using mfa for mobile client for every use case, mfa needs to be enabled at a user group level to use mfa with the kron pam web gui, at least one of the user groups needs to be enabled the second application of mfa is to the activate mfa feature on a user group, to establish ssh or rdp connections to a device by using the mfa feature to enable mfa for a user group navigate to administration > mfa open the user group management tab click the options button and select the enable otp button for the desired user group (the whole row will turn green when mfa is enabled)