---
title: Setting 2FA on SSH connections
slug: singleconnect-2-16/setting-2fa-on-ssh-connections
description: Learn how to set up two-factor authentication (2FA) for SSH connections on the Single Connect platform with this comprehensive document. Follow step-by-step instructions for adding the target device, creating device groups, defining credentials, and activ
docTags: 
createdAt: 2020-08-28T14:58:04.000Z
---

::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/umK0C6Ol23cJRAgd218WP_Single%20Connect%201280-01.png" size="64" position="flex-start" showCaption="false"}









SETTING 2FA ON 
SSH CONNECTIONS
---------------

Date : 20.02.2020
Author : Kron Product Team

	

**2FA  Activation for Single Connect SSH Connections**


This configuration have two phases and first phase of the configuration requires higher level of modification.
 <u>Please ask consultation from Kron Technical Support for these steps</u>
[](https://sc-support@kron.com)<u>**epdestek\@kron.com.tr**</u>



# Settings to be made on the Web Interface

1\. The target device should be added to Single Connect by accessing the web interface.



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/dl5pct2SYmHAZUjsdncSv_1.png" size="84" position="center" showCaption="false"}

&#x20;   &#x20;

2\. The device group containing the target device should be created and credentials should be defined in "Device Group" settings.

::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/bOaSwQt_nMJXMoG61vQCf_1.png" size="84" position="center" showCaption="false"}

3\. The device group realm definition should be done for the group of users who asked
to have connections by accessing the web interface.



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/H77dx-YPWcL1mdxJYXKch_1.png" size="84" position="center" showCaption="false"}

4\. On the 2FA Provisioning screen, 2FA should be activated in the User Group Management section for the corresponding user group.



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/FbyBCB5ZtsutAI3lwJ-Fs_1.png" size="84" position="center" showCaption="false"}



5\. OTP will be asked when the user starts a SSH session on the target device by connecting to the interface.&#x20;

6\. The link will be provided after the OTP displayed in the mobile app should be entered.



::Image[]{src="https://api.archbee.com/api/presign/g9cApVza9NIhSh0pjZYtA/S2LUupgoSIAj-u6dTKoHF_1.png" size="84" position="center" showCaption="false"}