---
title: Using MFA for Radius
slug: singleconnect-reference-guide-3-2-0/using-mfa-for-radius
description: Learn how to activate Multi-Factor Authentication (MFA) for Radius Authentication in Single Connect with this comprehensive guide. Discover the pre-requisites for administrators and users, follow easy step-by-step instructions for configuring the file, an
docTags: 
createdAt: 2022-12-02T09:29:57.000Z
---

MFA can also be used with the Radius Authentication. To activate MFA for Radius:


**Pre-requisite:** Admin and users have the QR code, installed the Single Connect mobile app, scanned the QR code with the mobile app, and MFA is enabled for the user group that will be using MFA for Radius connections. 

1. Establish an SSH connection to Single Connect as the pamuser user
2. Edit the **sc\_radiusd.conf** file with the command below:
   vi /etc/raddb/sc\_radiusd.conf

Check the configuration file to see if the parameter below is already configured. If not, add the lines below. If there is a hash (# ) sign in front of the parameters, delete the hash ( # ) sign to activate the parameter. If the parameter value is false, change it to true. (Default value is true) To type or add anything in the vi editor, first press the Insert button on the keyboard, then type in the necessary line. Press Esc to exit typing mode. To save the file press Esc, then colon (: ), then type in “wq!”, and press enter. If you don’t want to save the changes on the file, press Esc, then colon (: ), then type in “q!”, and press enter.
sc\_otp\_enabled=true

:::hint{type="info"}
When the OTP login screen comes up, the system message can be changed under the sc\_radiusd.conf file. Default message: sc\_otp\_message="Single Connect - Please Enter OTP:"
:::

Service restart is required for the change in the configuration file to take place.
**systemctl restart pam-radius.service**