Reference Guide
...
Using MFA to Log in to the Kro...
One-Time Password Expire in Kron PAM Web GUI
if users enter incorrect otp for configured times in a row, they are redirected to the login screen to configure the number of retry attempts, you must set the following parameter in system config manager name parameter property value user captcha retrytokenattempts property value ${number} default value=0 if you configure the parameter as given above and users enter incorrect tokens three times in a row, they will be redirected to the login screen and asked for captcha information apart from username and password information