Reference Guide
Multi-Factor Authentication
Using MFA to Log in to the Kron PAM Desktop Client
mfa can be enabled for kron pam desktop client login, for mfa enabled user groups to activate mfa for kron pam desktop client log in pre requisite all users, including the admin, have a qr code, installed the kron pam mobile client, scanned the qr code with the mobile client, and mfa is enabled for at least the user group (see section docid\ fgqar5tv6lsoe8zgmbtfn ) navigate to administration > system configuration manager set the required parameter desktop client otp enabled=true (one time password enabled for desktop client log in)