---
title: MFA Integration
slug: kronpam-reference-guide-3-8-0/mfa-integration
docTags: 
createdAt: 2025-09-24T14:45:00.074Z
---

Kron PAM’s Multi-Factor Authentication (MFA) module provides both internal and external MFA solutions. This functionality is described in detail here: [Using SMS for MFA](docId:5cICV8_HpSncxmhYYOSoo)

To use MFA via SMS, the SMS service must be configured in the **Administration** interface. The SMS Integration screen includes the parameters needed to define and use an SMS provider.

**To configure SMS services for MFA Integration:**

1\) Navigate to **Administration > System Configuration Management > Integrations > SMS Integration**.

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/nykjEJQ2C2F367LzENPK1_image.png "SMS Configuration")

2\) Click **+ Add SMS Integration**.

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Qoe1kLfEY9wl-Cw_6uvU9_image.png "Add SMS Integration")

3\) From the **Parameter Type** dropdown list, select **MFA Integration**.

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ziX2xsPjO9PVGSyw5_N8g_image.png "MFA Integration")

4\) For the **HTTP SMS Channel** type, fill in all the required fields and click **Save**.

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2y49oFJWVhgTngzAgKwG5_image.png "Add SMS Parameter")

Example values for each field are listed in the table below:

| **HTTP SMS Parameters**            | **Example Values**                                                                                                                                                                                                                                                                                                                                        |
| ---------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **HTTP URL**                       | https\://api.sms.com/v1/send-sms                                                                                                                                                                                                                                                                                                                          |
| **HTTP Method**                    | POST or GET                                                                                                                                                                                                                                                                                                                                               |
| **HTTP Headers**                   | Content-Type\:text/xml                                                                                                                                                                                                                                                                                                                                    |
| **HTTP Body**                      | \<request>\<authentication>\<username>\*\*\*\*\*\*\</username>\<password>\*\*\*\*\*\*\</password>\</authentication>\<order>\<sender>KRON\</sender>\<sendDateTime>\</sendDateTime>\<message>\<text>\<!\[CDATA\[Krontech Kron PAM MFA token is %token%]]>\</text>\<receipents>\<number>%messageInfo%\</number>\</receipents>\</message>\</order>\</request> |
| **HTTP Secret Body**               | \<request>\<authentication>\<username>\*\*\*\*\*\*\</username>\<password>\*\*\*\*\*\</password>\</authentication>\<order>\<sender>KRON\</sender>\<sendDateTime>\</sendDateTime>\<message>\<text>\<!\[CDATA\[Your MFA Secret Key: %secret%]]>\</text>\<receipents>\<number>%phoneNumber%\</number>\</receipents>\</message>\</order>\</request>            |
| **HTTP Encoding**                  | UTF-8                                                                                                                                                                                                                                                                                                                                                     |
| **HTTP Timeout&#x20;**(in seconds) | 30                                                                                                                                                                                                                                                                                                                                                        |