Overview

1Kosmos Login for Linux integrates with the Pluggable Authentication Module (PAM) to enable MFA for SSH login on Linux systems. It supports standalone authentication as well as 2FA/MFA combinations.

---

Supported Authentication Methods

The following methods can be used individually or in combination:

• Push Notification
• OTP (via SMS, Email, or Voice Call)
• Password
• QR Code

For example, an administrator can enable push notification and SMS OTP, allowing users to choose any enabled method at login — or enforce all methods as MFA.

1Kosmos Linux PAM can only authenticate accounts in user directories connected to your 1Kosmos tenant.