Using SMS for MFA

there are two methods to send sms over http (via sms proxy), or over smpp (via smsc) instead of using the kron pam mobile client , otps can be generated by kron pam and sent via sms to adjust the mfa sms settings navigate to administration > system configuration manager enter 2fa in the parameter name field and click the search button set the value of the iga 2fa sms http body , iga 2fa sms http headers , iga 2fa sms http secret body , iga 2fa sms http url , iga 2fa sms smpp body , iga 2fa sms smpp secret body , iga 2fa sms http timeout and iga 2fa token timestep parameters non administrator users can use the mfa they will use when they gain access, from both sms and kron pam mobile client in addition, sms activations can be done by users themselves in this way, only sms or kron pam mobile client can be used to activate sms for users with admin rights navigate to administration > mfa > user group management activate sms by clicking enable sms in the options button of each user group to activate sms for users with user rights log in to the kron pam web gui go to the user area in the right corner click on mfa token and select enable sms sms configuration pop up opens select true from the enable sms dropdown (the inherit from group is inherited from the user group property ) note on mfa sms logic the preference of each user is dominant when otpsmsenabled is updated in the user group properties , the properties of the group members are not updated mfa sms sending logic is as follows if otpsmsenabled is defined in the user property, its value is used (no lookup for user group properties) if otpsmsenabled is not defined in the user property, sms is sent when at least one of the user's groups has the otpsmsenabled property as true the combo box values are a) inherited from the group, b) false, and c) true if no otpsmsenabled property exists in the user properties, the inherit from group appears selected when the sms configuration popup opens