---
title: Kron PAM-side configuration
slug: kronpam-reference-guide-3-9-0/kron-pam-side-configuration
docTags: 
createdAt: 2025-10-14T10:02:12.044Z
---

As **SAML entity ID**, please enter the equivalent of the URL below (the exact address depends on customer specifications):

http\://adfs.krontech-new\.internal/adfs/services/trust

As **SAML Login URL**, enter the equivalent of the URL below (the exact address depends on customer specifications):

https\://adfs.krontech-new\.internal/adfs/ls/idpinitiatedsignon 

As **SAML Logout URL**, enter the equivalent of the URL below (the exact address depends on customer specifications):

https\://adfs.krontech-new\.internal/adfs/ls/

As **SAML Remote URL**, enter Kron PAM login page. If something goes wrong during the handshake stage, Kron PAM directs the connection here.

https\://\{KronPAM.Address}

***SAML Launcher URL ****can be left blank*. ADFS does not support this field.

For **SAML X509 Certification Key:**

1-Go to the **Certificates **section on the ADFS management page, right-click on Token-Signing certificate, and click **View Certificate.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Y7RJ45dI77ra14qqu5wKz_image.png)

2-Open the Details tab, click the **Copy to file** button, and click **Next.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/z_u9Ojn33bniytJBS4_Pk_image.png)

3-Choose the "Base-64 encoded X.509 (.CER)" option, and click **Next**. Choose a file name and save the certificate file. Open the saved file on Notepad, and copy its content for pasting to Kron PAM certification section.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/E9GgGR2ClBYe-TIZGxSQa_image.png)

:::hint{type="warning"}
Don’t forget to edit the Cors filter as mentioned in the [Azure AD Configuration](docId\:zHLYQoQgGvFq7SPuu6zBS) section to allow ADFS access.
:::

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/KbjMSbtu5gooK8LuJzPba_image.png)