---
title: Using MFA for Remote Privileged Access Management (RPAM)
slug: kronpam-reference-guide-3-9-0/using-mfa-for-remote-privileged-access-management-rpam
docTags: 
createdAt: 2025-06-20T11:12:55.033Z
---

Kron PAM’s built-in MFA can be used as a secondary layer of authentication for logging into the Kron PAM Remote Privileged Access Management.
To enable MFA for Kron PAM Remote Privileged Access Management:

1. Navigate to Administration > System Configuration. Manager.
2. Set the **rpam.client.otp.enabled **parameter as **true**.

If the parameter is set to true *and *if MFA is enabled for the user, after the user enters Kron PAM password, the RPAM Portal asks the user for OTP.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/AM-BEcbX9LTU8Uc22Mamg_image.png "OTP Asked for RPAM")

If the new parameter is set to false or if it is set to true but the OTP is not enabled for the user, after the user enters Kron PAM password, the RPAM Portal lists the target devices without asking OTP.