---
title: Connecting with the Kron DAM SQL Proxy with MFA
slug: kronpam-reference-guide-3-9-0/connecting-with-the-kron-dam-sql-proxy-with-mfa
docTags: 
createdAt: 2024-07-18T14:26:47.194Z
---

Some configurations must be made to use MFA (Multi-Factor Authentication) when performing SQL Proxy for Oracle database devices**. **Please check [Email Server Configuration](docId\:ubHUuEI1t13ZE_C6pQab5)**  **before configuring MFA in SQL Proxy.

In the **Multifactor Authentication** and go to **User Group Management**, press the options button for the user group where the SQLPROXY user is (in this example, it is ORACLE UG). Then, press the **Enable OTP** option on the screen that appears.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/LE3ogjY4uJdkCgH9f5oox_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/lQPn-srnIVr6aje_gp8Uo_image.png "User Group Management")

After this, navigate to the **Multifactor Authentication page** and go to the **User Token Management** page. Then, press the options button for the user used for the Oracle database (in this case SQLPROXY) and click the **Send Manual Registration Key** button.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/QO4mg6EIPP5oTpgKfoFZH_image.png" size="100" width="949" height="475" position="center" caption="User Token Management" darkWidth="949" darkHeight="475" showCaption="false"}

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/_pZm8Y5s3nASyvAEHZrEu_image.png "User Token Management")

In this example, the QR code sent to the email address of the SQLPROXY user needs to be scanned using the Kron DAM mobile application.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/AXC7btL-9NYItVFrqVv-J_image.png" size="34" width="368" height="559" position="center" caption="The second one is MFA 6-digit code" darkWidth="368" darkHeight="559" showCaption="true"}

Then, two parameters must be entered in the *System Configuration Manager*. By pressing the +Add button, add the following parameters:

- **dam.ddm.mfa.enabled **with a value of** true**
- **dam.ddm.mfa.delimiter **with a value of** #**
  - The delimiter is your choice (in this example, # is used)

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Woo9PkWx4AY10p4cvmHM3_.blob "System Configuration Manager")

Navigate to **Multi-Factor Authentication → User Group Management**.
Locate the user group that contains the database user connecting through SQL Proxy (for example, *ORACLE UG*).
Click the **Options** button for the user group and select **Enable OTP**.

This configuration defines which user groups are allowed to authenticate using MFA when connecting via SQL Proxy.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/yPwDhqqWWtWUtQoXVtMmn_image.png "Multi-Factor Authentication page")

Next, proceed to an SQL Client (in this example, DBeaver is used). The Database Name, Port, and Password are the same as in the SQL Proxy steps. When MFA is required for the user, the Connect to Target Database dialog displays the expected username format, including the delimiter.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/qi6CuFRc2txET8FXu-jcV_image.png "Figure – Connection dialog showing the username format for MFA")

The username is different; here, as an example, enter (SQLPROXY) customer delimiter (#) and the 6-digit code displayed in the Kron DAM application in the Username field. The user should be able to connect successfully.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/y6DXXZoTooR_LX3mH2V2V_image.png "MFA 6 digit and Delimiter with Database Username on SQL Proxy")

:::hint{type="info"}
JDBC Driver supports Multi-Factor Authentication (MFA) connections for Oracle and Microsoft SQL Server. In addition, MFA can be enabled for PostgreSQL and MySQL through the same configuration approach used for MSSQL. While SQL Proxy only supports MFA for Oracle and MSSQL, JDBC Driver extends MFA connectivity to PostgreSQL and MySQL as well.
:::